Research notes

Introduction When I talk about EDRs in this article, I mean a combination of endpoint protection (EPP) and endpoint detection and response…

In previous report on Cobalt Strike focused on the most frequently used capabilities that observed. In this report, we will focus on the…

A good detection technique to spot Remote Desktop Connections that are exposed to the internet is to scan RDP event logs for…

Intro In our research, we expose adversarial Tactics, Techniques and Procedures (TTPs) as well as the tools they use to execute their…

Administrators typically use Remote Desktop Protocol (RDP) in order to manage Windows environments remotely. It is also typical RDP to be enabled…

استاندارد NIST SP800-61 چیست؟ این استاندارد مدل و ساختار یک تیم مدیریت و رسیدگی به رخداد های رایانه ای (Computer Security Incident…

  در حال حاضر آرپ (ARP) یکی از روش های متداول برای جمع آوری و سرقت اطلاعات از طریق خواند اطلاعات می…