Sharing our knowledge

Knowledge center

FalconFriday — Process injection and malicious CPL files — 0xFF03

FalconFriday — Process injection and malicious CPL files — 0xFF03

FalconFriday — Detecting suspicious code compilation and Certutil — 0xFF02

FalconFriday — Detecting suspicious code compilation and Certutil — 0xFF02

FalconFriday — Detecting Malicious Browser Extensions and code signing- 0xFF01

FalconFriday — Detecting Malicious Browser Extensions and code signing- 0xFF01

Using Azure Pipelines to validate my Sysmon configuration

Using Azure Pipelines to validate my Sysmon configuration

Sysmon 11.1 Bug fixes, a schema update and a new field

Sysmon 11.1 Bug fixes, a schema update and a new field

Graphing MITRE ATT&CK via Bloodhound

Graphing MITRE ATT&CK via Bloodhound

Sysmon 11 — DNS improvements and FileDelete events

Sysmon 11 — DNS improvements and FileDelete events

No results found.

FalconForce realizes ambitions by working closely with its customers in a methodical manner, improving their security in the digital domain.

Energieweg 3
3542 DZ Utrecht
The Netherlands

FalconForce B.V.
[email protected]
(+31) 85 044 93 34

KVK 76682307
BTW NL860745314B01

ISO27001 certified