Click here to download all references as Bib-File.
| 2021-01-04 ⋅ SentinelOne ⋅ Building a Custom Malware Analysis Lab Environment TrickBot |
| 2020-12-02 ⋅ SentinelOne ⋅ APT32 Multi-stage macOS Trojan Innovates on Crimeware Scripting Technique OceanLotus |
| 2020-11-25 ⋅ SentinelOne ⋅ Egregor RaaS Continues the Chaos with Cobalt Strike and Rclone Cobalt Strike Egregor |
| 2020-11-18 ⋅ SentinelOne ⋅ Ranzy Ransomware | Better Encryption Among New Features of ThunderX Derivative ThunderX Ransomware |
| 2020-11-05 ⋅ SentinelOne ⋅ Resourceful macOS Malware Hides in Named Fork Bundlore |
| 2020-10-19 ⋅ SentinelOne ⋅ Purple Fox EK | New CVEs, Steganography, and Virtualization Added to Attack Flow |
| 2020-10-06 ⋅ SentinelOne ⋅ The FONIX RaaS | New Low-Key Threat with Unnecessary Complexities FONIX |
| 2020-09-03 ⋅ SentinelOne ⋅ Multi-Platform SMAUG RaaS Aims To See Off Competitors SMAUG Ransomware |
| 2020-08-31 ⋅ SentinelOne ⋅ The BLINDINGCAN RAT and Malicious North Korean Activity BLINDINGCAN |
| 2020-08-13 ⋅ SentinelOne ⋅ Case Study: Catching a Human-Operated Maze Ransomware Attack In Action Maze |
| 2020-08-10 ⋅ SentinelOne ⋅ Agent Tesla | Old RAT Uses New Tricks to Stay on Top Agent Tesla |
| 2020-07-27 ⋅ SentinelOne ⋅ Four Distinct Families of Lazarus Malware Target Apple’s macOS Platform AppleJeus Casso Dacls WatchCat |
| 2020-07-22 ⋅ SentinelOne ⋅ Enter the Maze: Demystifying an Affiliate Involved in Maze (SNOW) ISFB Maze TrickBot Zloader |
| 2020-06-17 ⋅ SentinelOne ⋅ A Click from the Backyard | Analysis of CVE-2020-9332, a Vulnerable USB Redirection Software |
| 2020-06-08 ⋅ SentinelOne ⋅ A Guide to macOS Threat Hunting and Incident Response |
| 2020-05-20 ⋅ SentinelOne ⋅ Why On-Device Detection Matters: New Ramsay Trojan Targets Air-Gapped Networks Ramsay |
| 2020-05-14 ⋅ SentinelOne ⋅ Deep Dive Into TrickBot Executor Module “mexec”: Reversing the Dropper Variant TrickBot |
| 2020-05-11 ⋅ SentinelOne ⋅ The Anatomy of an APT Attack and CobaltStrike Beacon’s Encoded Configuration Cobalt Strike |
| 2020-05-04 ⋅ SentinelOne ⋅ Meet NEMTY Successor, Nefilim/Nephilim Ransomware Nefilim Ransomware Nemty |
| 2020-04-08 ⋅ SentinelOne ⋅ Deep Dive Into TrickBot Executor Module “mexec”: Hidden “Anchor” Bot Nexus Operations Anchor TrickBot |