Click here to download all references as Bib-File.•

Enter keywords to filter the library entries below or Propose new Entry
2022-05-25 ⋅ CrowdStrike ⋅ Jamie Harris
Hunting a Global Telecommunications Threat: DecisiveArchitect and Its Custom Implant JustForFun
BPFDoor
2021-10-19 ⋅ CrowdStrike ⋅ Dan Meyer, Jamie Harris
LightBasin: A Roaming Threat to Telecommunications Companies
LightBasin
2021-07-07 ⋅ Elastic ⋅ Jamie Butler
Elastic Security prevents 100% of REvil ransomware samples
REvil
2021-03-06 ⋅ Click All the Things! Blog ⋅ Jamie Arndt
oleObject1.bin – OLe10nATive – shellcode
CloudEyE
2021-02-02 ⋅ Click All the Things! Blog ⋅ Jamie
XLSB: Analyzing a Microsoft Excel Binary Spreadsheet
2021-01-26 ⋅ Digital Shadows ⋅ Jamie Hart
Ransomware: Analyzing the data from 2020
2020-12-16 ⋅ Click All the Things! Blog ⋅ Jamie
Snake/404 Keylogger, BIFF, and Covering Tracks?: An unusual maldoc
2020-12-02 ⋅ Kryptos Logic ⋅ Jamie Hankins
Automated string de-gobfuscation
Blackrota
2020-09-24 ⋅ Click All the Things! Blog ⋅ Jamie Arndt
zLoader XLM Update: Macro code and behavior change
Zloader
2020-06-19 ⋅ Click All the Things! Blog ⋅ Jamie
zloader: VBA, R1C1 References, and Other Tomfoolery
Zloader
2020-05-25 ⋅ Elastic ⋅ Brent Murphy, David French, Jamie Butler
The Elastic Guide to Threat Hunting
2020-03-31 ⋅ Click All the Things! Blog ⋅ Jamie
LokiBot: Getting Equation Editor Shellcode
Loki Password Stealer (PWS)