By Kristen Cotten | October 27, 2022

    STEEP#MAVERICK

    Our newest emulation features a nifty obfuscation trick inspired by one of ...

    Topics:

    #threatthursday, Blue Team, CTI
    Read More
    By Kristen Cotten | October 20, 2022

    Threat Emulation: Black Basta

    Intro Welcome to the October 2022 SCYTHE #ThreatThursday! This edition...

    Topics:

    #threatthursday, Blue Team, CTI, Ransomware
    Read More
    By Kristen Cotten | September 29, 2022

    SCYTHE Library: Threat Emulation: Yanluowang

    Topics:

    #threatthursday, Blue Team, CTI, Ransomware
    Read More
    By Christopher Von Reybyton | August 25, 2022

    Threat Emulation: GootLoader

    ‍

    Topics:

    #threatthursday, Red Team, Blue Team, CTI
    Read More
    By Kristen Cotten | July 28, 2022

    Threat Emulation: Qakbot

    Intro Welcome to the July 2022 SCYTHE #ThreatThursday! This edition...

    Topics:

    #threatthursday, Blue Team, CTI, Ransomware
    Read More
    By Kristen Cotten | June 30, 2022

    Windows Telemetry Persistence

    June’s Threat Thursday will focus on a unique persistence method that is...

    Topics:

    #threatthursday, Red Team
    Read More
    By Jake Williams | May 26, 2022

    Threat Emulation: Industroyer2 Operation

    ‍

    Topics:

    #threatthursday, Blue Team, ICS, CTI
    Read More
    By Christopher Peacock | April 28, 2022

    Operationalizing Red Canary's 2022 Threat Detection Report

    Executive Summary How do we get started with Purple Team? This is a question...

    Topics:

    #threatthursday, Blue Team, CTI
    Read More
    By Christopher Peacock | March 31, 2022

    #ThreatThursday FIN13

    Executive Summary FIN13 is a financially-motivated threat actor tracked by...

    Topics:

    #threatthursday, Blue Team, Finance, CTI
    Read More
    2 3 4 5 6