EDR hooking has become a major part of an adversary’s ability to successfully compromise an endpoint system. Hooking is a technique that alters the....

We identified Ivy framework fileless attack techniques that execute undetected in Microsoft Office. Here's how with suggested security augmentations.

This article explores gaps that allow for the undetected execution of code on systems protected by Microsoft Defender Advanced Threat Protection.

Even when the hooks are removed, defenders can still leverage other EDR functions, such as host isolation for incident triage or remote.

This post identifies systemic endpoint detection and response issues and examines how attackers can bypass any EDR product.

Two experienced red teamers describe successful engagements and how to counter attack chains.

Talon automates a password guessing technique targeting Kerberos and LDAP within the Windows Active Directory environment.

There are several different methods that adversaries can employ to move throughout a network. However, we will cover two techniques commonly used by....

In this information age, security threats are commonplace and can be devastating to a business. The ability to quickly and accurately detect cyber....