Topics
Every post, grouped by topic and by MITRE ATT&CK technique.
01Topics
- Threat Hunting9
- DFIR5
- Malware Analysis4
- Splunk4
- Detection3
- ELK3
- Triage3
- Detection & Response2
- Email Analysis2
- Memory Forensics2
- Phishing2
- Remediation2
- Response Playbook2
- Threat Response2
- Case File1
- Initial Access1
- PowerShell1
02ATT&CK techniques
Every technique covered on the site, by number of posts. Each links to the posts that cover it.
- T1068 Exploitation for Privilege Escalation 3
- T1218.005 Mshta 3
- T1204.004 Malicious Copy and Paste 2
- T1021 Remote Services 1
- T1036.005 Match Legitimate Name or Location 1
- T1053.005 Scheduled Task 1
- T1055 Process Injection 1
- T1059.001 PowerShell 1
- T1059.007 JavaScript 1
- T1081 Credentials in Files 1
- T1099 Timestomp 1
- T1102.001 Dead Drop Resolver 1
- T1105 Ingress Tool Transfer 1
- T1134 Access Token Manipulation 1
- T1204.002 Malicious File 1
- T1543.003 Windows Service 1
- T1547.001 Registry Run Keys / Startup Folder 1
- T1562.004 Disable or Modify System Firewall 1
- T1567.002 Exfiltration to Cloud Storage 1