Filter by technique: All T1190 T1486 T1566.002 T1055.001 T1195.001 T1059.001 T1204.002 T1203

Filter by company: All Intel Recorded Future Kaseya

• UAT-8302 and its box full of malware

  Cisco Talos Intelligence

  T1053.005 100% T1087.002 98% T1055.001 97%
  1 day ago
• A Practical Guide to BloodHound Data Collection

  Black Hills InfoSec

  T1588.002 88% T1087.002 78% T1482 60%
  2026-04-29
• The 60ms Window: How Event 5156 Solves the ADWS Attribution Problem

  Huntress

  T1087.002 69% T1482 31%
  2026-04-09
• The ADWS Architecture That Hides PowerShell AD Enumeration

  Huntress

  T1087.002 98% T1059.001 97% T1482 93%
  2026-04-08
• Ransomware Under Pressure: Tactics, Techniques, and Procedures in a Shifting Threat Landscape

  Mandiant

  T1486 100% T1219 100% T1112 99%
  2026-03-16
• Proactive Preparation and Hardening Against Destructive Attacks: 2026 Edition

  Mandiant

  T1021.001 99% T1021.006 99% T1649 93%
  2026-03-06
• The (!FALSE) Pattern | Huntress

  Huntress

  T1087.002 79%
  2026-01-29
• SDFlags | Huntress

  Huntress

  T1482 93% T1069.002 72% T1098.007 64%
  2026-01-15
• The LDAP Whitespace Problem | Huntress

  Huntress

  T1087.002 82% T1654 52%
  2025-12-30
• The OID Problem: Writing LDAP Detections That Actually Work

  Huntress

  T1087.002 98% T1558.003 96% T1003.006 80%
  2025-12-16
• Velociraptor WSUS Exploitation, Pt. I: WSUS-Up?

  Huntress

  T1059.001 91% T1087.002 75% T1068 47%
  2025-11-20
• Gootloader | Threat Detection Overview

  Huntress

  T1055.001 99% T1059.001 99% T1003.006 96%
  2025-11-05
• Agenda Ransomware Deploys Linux Variant on Windows Systems Through Remote Management Tools and BYOVD Techniques

  Trend Micro Research

  T1486 99% T1219 91% T1068 86%
  2025-10-23
• From a Single Click: How Lunar Spider Enabled a Near Two-Month Intrusion

  The DFIR Report

  T1218.011 100% T1055.001 100% T1555.003 99%
  2025-09-29
• Blurring the Lines: Intrusion Shows Connection With Three Major Ransomware Gangs

  The DFIR Report

  T1003.001 100% T1046 99% T1021.001 99%
  2025-09-08
• KongTuke FileFix Leads to New Interlock RAT Variant

  The DFIR Report

  T1059.001 100% T1087.002 96% T1059.003 96%
  2025-07-14
• Getting Started with NetExec: Streamlining Network Discovery and Access

  Black Hills InfoSec

  T1021.002 97% T1110.003 97% T1201 95%
  2025-07-09
• Hide Your RDP: Password Spray Leads to RansomHub Deployment

  The DFIR Report

  T1078 100% T1486 99% T1003.001 99%
  2025-06-30
• Another Confluence Bites the Dust: Falling to ELPACO-team Ransomware

  The DFIR Report

  T1003.001 100% T1021.001 99% T1021.002 99%
  2025-05-19
• PerfMon! What Is It Good For? | Huntress

  Huntress

  T1558.003 86% T1087.002 81% T1558.004 80%
  2025-01-23
• One Active Directory Account Can Be Your Best Early Warning

  Black Hills InfoSec

  T1110.003 99% T1558.003 81% T1548.002 59%
  2025-01-16
• The Nearest Neighbor Attack: How A Russian APT Weaponized Nearby Wi-Fi Networks for Covert Access

  Volexity

  T1078 99% T1003.003 99% T1490 97%
  2024-11-22
• Making Sense of Alphabet Soup: 16 Security Terms and Acronyms You Should Know | Huntress

  Huntress

  T1056.001 100% T1486 99% T1219 97%
  2024-09-18
• New Ransomware Reporting Requirements Kick in as Victims Increasingly Avoid Paying

  Coveware

  T1219 99% T1486 98% T1482 96%
  2024-01-26
• PNPT: Certification Review

  Black Hills InfoSec

  T1087.002 83% T1482 47%
  2023-01-31
• Improved Security and Backups Result in Record Low Number of Ransomware Payments

  Coveware

  T1021.002 99% T1486 97% T1485 95%
  2023-01-20
• PlumHound Reporting Engine for BloodHoundAD

  Black Hills InfoSec

  T1087.002 93% T1098 53% T1654 45%
  2022-12-06
• Impacket Offense Basics With an Azure Lab

  Black Hills InfoSec

  T1087.002 99% T1557.001 84% T1552.006 83%
  2022-06-01
• Domain Goodness – How I Learned to LOVE AD Explorer

  Black Hills InfoSec

  T1087.002 99% T1589.002 48%
  2017-05-15
• Domain User Enumeration

  Black Hills InfoSec

  T1087.002 96%
  2016-12-07