Filter by technique: All T1190 T1486 T1566.002 T1055.001 T1195.001 T1059.001 T1204.002 T1203

Filter by company: All Microsoft Google Huntress Apple Inc. GitHub Amazon Web Services Amazon Meta

• Through the Lens of MDR: Analysis of KongTuke’s ClickFix Abuse of Compromised WordPress Sites

  Trend Micro Research

  T1059.001 98% T1059.006 97% T1053.005 95%
  2026-03-10
• Apache ActiveMQ Exploit Leads to LockBit Ransomware

  The DFIR Report

  T1190 100% T1021.001 100% T1486 99%
  2026-02-23
• The Curious Case of the Comburglar

  Black Hills InfoSec

  T1053.005 100% T1036.005 81% T1204.002 72%
  2025-12-18
• Cat’s Got Your Files: Lynx Ransomware

  The DFIR Report

  T1486 100% T1046 100% T1135 98%
  2025-12-17
• Blurring the Lines: Intrusion Shows Connection With Three Major Ransomware Gangs

  The DFIR Report

  T1003.001 100% T1046 99% T1021.001 99%
  2025-09-08
• Another Confluence Bites the Dust: Falling to ELPACO-team Ransomware

  The DFIR Report

  T1003.001 100% T1021.001 99% T1021.002 99%
  2025-05-19
• Research that builds detections

  VirusTotal Blog

  T1059.001 94% T1204 93% T1685.005 93%
  2025-01-09
• How Logging Strategies Can Affect Cyber Investigations w/ Kiersten & James

  Black Hills InfoSec

  T1059.001 99% T1654 97% T1685.001 87%
  2024-09-23
• Defense Evasion: Defenders Strike Back! | Huntress

  Huntress

  T1486 97% T1556.006 41%
  2022-12-06
• Gifting User Passwords to Adversaries With NPPSPY | Huntress

  Huntress

  T1003.001 99% T1078 69% T1003 67%
  2022-08-16
• A Sysmon Event ID Breakdown – Updated to Include 29!!

  Black Hills InfoSec

  T1070.004 100% T1574.001 98% T1021.001 97%
  2021-01-08
• How To Deploy Windows Optics: Commands, Downloads, Instructions, and Screenshots

  Black Hills InfoSec

  T1564.006 78% T1059.001 43%
  2020-06-17
• Webcast: Think You’re Compromised? What Do We Do Next?

  Black Hills InfoSec

  T1588.002 76%
  2020-03-11