23965 shaares
42 results
tagged
attacksteps
"Living off the land" on Windows. Clear references to Cyber Kill Chain steps.
In contrast, the median dwell time for all non-ransomware incidents has risen slightly from 11 days to 13 days. So, the ransomware gangs are moving faster than ever, but all other network intrusions, where the motivations and end goals aren’t always clear, tend to linger.
Useful poster from SANS.
Really nice and complete rundown on an attack and the attackers involved.
Uses MITRE ATT&CK as a controlled vocabulary.
Interested in a detailed-but-accessible case study of the Russian cyberespionage campaign that targeted SolarWinds (among others)? I’ve got you covered.