Ilja Krasnjanski·Nov 2Building and Testing Detections for UNK_DeadDropThirty-three YARA rules replayed against retained artifacts, followed by a separate noise review and static scanner evaluation.
Mahim Avi·Oct 3How to scan systems with THOR lite scanner during compromise assessment and incident responseIn this post, I tried to consolidate information's of thor-lite that I think will be helpful for IR folks.
Ayush Malwarex·Sep 4Technical Deep-Dive: Analyzing Qakbot Version 2.7.23 (Campaign: BDNIMBUS)Executive Summary
