Lab PoC: SSH Reverse Tunnel over Tor (APT SandWorm technique)
Context: what SandWorm does with SSH and Tor
DFIR & Threat Intel (5 articles)
Cyberdefenders – FakeGPT Lab writeup
Instructions:
Cyberdefenders – 3CX Supply Chain Lab writeup
Instructions:
Emulation of attacks using Atomic Red Team and Detection with Azure Sentinel Part 8 (ATT&CK T1037.001, T1039, T1041, T1046)
We continue with the series of Attack Emulation using Atomic Red Team and Detection with Azure Sentinel Part. See part 1, See part 2, See pa
Anti-Forensic Modification in Files
One of the most critical phases after a successful intrusion is the elimination of traces. When an attacker creates, modifies, or accesses f