Blog tagged as ie1

Yes, and it is complementary to others like MITRE ATT&CK and NIST. Cyber frameworks like these are limited by their attempt to be holistic. For example, MITRE ATT&CK states right up front that it is a "knowledge base of tactics and techniques based on real world observations." Thi...

The words on the console are drenched in red. Red bad.

The level 3 SOC team is looking at you with this urgent escalation. They fear an advanced threat actor is moving around the internal network. This critical endpoint happened to have some extra logging enabled and now reports a java app i...