Intermediate Purple Team Workshop on Detection Engineering

    UNICORN LIBRARY

    SCYTHE aims to educate and engage in order to inspire the art of the possible in cybersecurity.

    Unicorn Trio Cropped
    Adversarial threats, risk management, and security innovation don’t pause when working from home. We have curated a collection of presentations, research, blogs, and conversations from our team. Come enjoy our library and stay tuned for the new unicorn content that will be added regularly.

    Posts by Topic

    see all
    #threatthursday,
    Blue Team,
    CTI,
    Ransomware

    Threat Emulation: Black Basta

    Kristen Cotten
    by Kristen Cotten
    on October 20, 2022

    Intro Welcome to the October 2022 SCYTHE #ThreatThursday! This edition features an emulation based on Black Basta ransomware.  Executive Summary Black Basta is back on the radar again this fall after ...

    Read More
    October 17, 2022 • 5 min read
    Writing Better Security Exclusions With EER
    Blue Team, Purple Team
    By Jake Williams
    September 29, 2022 • 14 min read
    SCYTHE Library: Threat Emulation: Yanluowang
    #threatthursday, Blue Team, CTI, Ransomware
    By Kristen Cotten
    September 27, 2022 • 4 min read
    Easy LOLBAS Wins for Purple Teams
    Red Team, Blue Team, Purple Team
    By Brandon Radosevich
    September 16, 2022 • 3 min read
    New OMB Guidance to Software Producers
    CISO/Executive, Policy
    By Jake Williams
    August 25, 2022 • 14 min read
    Threat Emulation: GootLoader
    #threatthursday, Red Team, Blue Team, CTI
    By Christopher Von Reybyton
    July 28, 2022 • 10 min read
    Threat Emulation: Qakbot
    #threatthursday, Blue Team, CTI, Ransomware
    By Kristen Cotten
    June 30, 2022 • 6 min read
    Windows Telemetry Persistence
    #threatthursday, Red Team
    By Kristen Cotten
    May 31, 2022 • 1 min read
    AMA with Jake Williams
    Company
    By Jake Williams
    May 30, 2022 • 7 min read
    Breaking: Follina (MSDT) Vulnerability
    Red Team, Blue Team, CTI
    By Jake Williams