Click here to download all references as Bib-File.
| 2022-11-03 ⋅ SentinelOne ⋅ Black Basta Ransomware | Attacks deploy Custom EDR Evasion Tools tied to FIN7 Threat Actor Black Basta QakBot SocksBot |
| 2022-10-12 ⋅ SentinelOne ⋅ WIP19 Espionage | New Chinese APT Targets IT Service Providers and Telcos With Signed Malware Maggie ScreenCap |
| 2022-09-26 ⋅ SentinelOne ⋅ Lazarus ‘Operation In(ter)ception’ Targets macOS Users Dreaming of Jobs in Crypto |
| 2022-09-22 ⋅ SentinelOne ⋅ The Mystery of Metador | An Unattributed Threat Hiding in Telcos, ISPs, and Universities |
| 2022-09-15 ⋅ SentinelOne ⋅ From the Front Lines | Slam! Anatomy of a Publicly-Available Ransomware Builder Slam |
| 2022-08-25 ⋅ SentinelOne ⋅ BlueSky Ransomware | AD Lateral Movement, Evasion and Fast Encryption Put Threat on the Radar BlueSky Cobalt Strike JuicyPotato |
| 2022-08-15 ⋅ SentinelOne ⋅ Detecting a Rogue Domain Controller – DCShadow Attack MimiKatz TrickBot |
| 2022-07-28 ⋅ SentinelOne ⋅ Living Off Windows Defender | LockBit Ransomware Sideloads Cobalt Strike Through Microsoft Security Tool Cobalt Strike LockBit |
| 2022-06-06 ⋅ SentinelOne ⋅ From the Front Lines | Another Rebrand? Mindware and SFile Ransomware Technical Breakdown Mindware Sfile |
| 2022-05-19 ⋅ SentinelOne ⋅ CrateDepression | Rust Supply-Chain Attack Infects Cloud CI Pipelines with Go Malware |
| 2022-05-09 ⋅ SentinelOne ⋅ From the Front Lines | Unsigned macOS oRAT Malware Gambles For The Win |
| 2022-04-18 ⋅ SentinelOne ⋅ From the Front Lines | Peering into A PYSA Ransomware Attack Chisel Chisel Cobalt Strike Mespinoza |
| 2022-03-29 ⋅ SentinelOne ⋅ From the Front Lines | Hive Ransomware Deploys Novel IPfuscation Technique To Avoid Detection Cobalt Strike Hive |
| 2022-03-24 ⋅ SentinelOne ⋅ Ransomware Encryption Internals: A Behavioral Characterization Babuk Babuk BlackMatter |
| 2022-03-21 ⋅ SentinelOne ⋅ The Art and Science of macOS Malware Hunting with radare2 | Leveraging Xrefs, YARA and Zignatures AbstractEmu Vigram |
| 2022-03-15 ⋅ SentinelOne ⋅ Threat Actor UAC-0056 Targeting Ukraine with Fake Translation Software Cobalt Strike GraphSteel GrimPlant SaintBear |
| 2022-02-17 ⋅ SentinelOne ⋅ Log4j2 In The Wild | Iranian-Aligned Threat Actor “TunnelVision” Actively Exploiting VMware Horizon |
| 2022-02-09 ⋅ SentinelOne ⋅ Modified Elephant APT and a Decade of Fabricating Evidence DarkComet Incubator NetWire RC |
| 2022-02-01 ⋅ SentinelOne ⋅ Sneaky Spies and Backdoor RATs | SysJoker and DazzleSpy Malware Target macOS DazzleSpy SysJoker |
| 2022-01-18 ⋅ SentinelOne ⋅ BlackCat Ransomware | Highly-Configurable, Rust-Driven RaaS On The Prowl For Victims BlackCat |