▲ 1 r/purpleteamsec
Fake Microsoft Teams Campaign Delivers ValleyRAT via NSIS Installer and DLL Sideloading
labs.k7computing.comu/netbiosX — 6 hours ago
u/netbiosX
▲ 5 r/purpleteamsec
Credential Access Detection Beyond LSASS
training.ridgelinecyber.comu/netbiosX — 1 day ago
▲ 4 r/purpleteamsec
GhostTree: Unveiling Path Manipulation Techniques to Bypass Windows Security
varonis.comu/netbiosX — 2 days ago
▲ 1 r/purpleteamsec
How Storm-2949 turned a compromised identity into a cloud-wide breach
microsoft.comu/netbiosX — 2 days ago
▲ 4 r/purpleteamsec
Inside AD CS Escalation: Unpacking Advanced Misuse Techniques and Tools
unit42.paloaltonetworks.comu/netbiosX — 4 days ago
▲ 4 r/purpleteamsec
Novel Evilginx Frontend - Lowering the barrier for token theft reuse
newtonpaul.comu/netbiosX — 6 days ago
▲ 3 r/purpleteamsec
Threat Analysis: Backdoored Electron Apps Evading Defenses
levelblue.comu/netbiosX — 8 days ago
▲ 4 r/purpleteamsec
magnetar - A EDR bypassing shellcode loader framework for Windows 10 64bit, featuring ETW/AMSI patching, Tartarus Gate, process protection and more
github.comu/netbiosX — 9 days ago
▲ 5 r/purpleteamsec
Detecting Remote Thread Creation with Windows Driver
medium.comu/netbiosX — 10 days ago
▲ 1 r/purpleteamsec
Detection Engineering Best Practices: Performance, Readability & Maintenance
kqlquery.comu/netbiosX — 10 days ago
▲ 2 r/purpleteamsec
Adversaries Leverage AI for Vulnerability Exploitation, Augmented Operations, and Initial Access
cloud.google.comu/netbiosX — 10 days ago
▲ 7 r/purpleteamsec
Unmanaged PowerShell Execution: Hunting Beyond powershell.exe
detect.fyiu/netbiosX — 11 days ago
▲ 4 r/purpleteamsec
Purple Team Exercise Framework v4 - AI/ML Threat Guidance, Cloud & Identity Coverage, Continuous Purple Teaming and More
github.comu/netbiosX — 12 days ago
▲ 3 r/purpleteamsec
PositiveIntent - Evasive loader for .NET Framework assemblies
github.comu/netbiosX — 14 days ago
▲ 4 r/purpleteamsec
The Accidental C2: Exploring Dev Tunnels for Remote Access
specterops.iou/netbiosX — 15 days ago