Threat Hunting

Hunting for Persistence with Cympire: Part I — Registry Run Keys

Hunting for Persistence with Cympire - Registry Run Persistence

Learn how attackers use Windows registry keys to maintain persistence once they’ve compromised a machine. Then see how to hunt for these malicious keys.

Adam Goss
8 February 2023

Threat Intelligence, Threat Hunting

Elevate Your Threat Detections Using the Almighty Pyramid of Pain

Elevate your Threat Detections using the The Almighty Pyramid of Pain

Discover how to turn a bad guy's day into a nightmare using the Pyramid of Pain to elevate your threat detections and increase the cost on adversaries.

Adam Goss
24 January 2023
8 Comments

Threat Intelligence, Custom Tooling

Let Us Find Out Whodunit

Whodunit is a tool that can be used to identify the most likely Advanced Persistent Threat group responsible for an attack. Let's find out how to use it!

Adam Goss
11 January 2023

Threat Hunting

Threat Hunting With Velociraptor III – Hunting Demo

Learn how to use Velociraptor’s threat hunting capabilities to identify malicious activity associated with real-world malware and threat actors in this demo.

Adam Goss
8 November 2022
1 Comment

Threat Hunting

Threat Hunting With Velociraptor II: Environment Setup

Discover how to create a virtualized threat hunting environment and use Velociraptor as a threat hunting tool to sniff out malicious reverse shells.

Adam Goss
26 October 2022

Threat Hunting

Threat Hunting With Velociraptor I – Introduction

Learn what threats are, what threat hunting is, and the basic security requirements needed to start a threat hunting program in this series introduction.