Blue teaming Archieven - Page 2 of 9

FalconFriday — Detecting Active Directory Data Collection — 0xFF21

Nov 11, 2022 | Blue teaming

[dsm_breadcrumbs show_home_icon="off" separator_icon="K||divi||400" admin_label="Supreme Breadcrumbs" _builder_version="4.18.0" _module_preset="default" items_font="||||||||" items_text_color="rgba(255,255,255,0.6)" custom_css_main_element="color:...

FalconFriday — Detecting ADCS web services abuse — 0xFF20

Oct 14, 2022 | Blue teaming

[dsm_breadcrumbs show_home_icon="off" separator_icon="K||divi||400" admin_label="Supreme Breadcrumbs" _builder_version="4.18.0" _module_preset="default" items_font="||||||||" items_text_color="rgba(255,255,255,0.6)" custom_css_main_element="color:...

FalconFriday — Detecting LSASS dumping with debug privileges — 0xFF1F

Sep 16, 2022 | Blue teaming

[dsm_breadcrumbs show_home_icon="off" separator_icon="K||divi||400" admin_label="Supreme Breadcrumbs" _builder_version="4.18.0" _module_preset="default" items_font="||||||||" items_text_color="rgba(255,255,255,0.6)" custom_css_main_element="color:...

Microsoft Defender for Endpoint Internals 0x03 — MDE telemetry unreliability and log augmentation

Jul 8, 2022 | Blue teaming

[dsm_breadcrumbs show_home_icon="off" separator_icon="K||divi||400" admin_label="Supreme Breadcrumbs" _builder_version="4.18.0" _module_preset="default" items_font="||||||||" items_text_color="rgba(255,255,255,0.6)" custom_css_main_element="color:...

Microsoft Defender for Endpoint Internals 0x02 — Audit Settings and Telemetry

Jul 1, 2022 | Blue teaming

[dsm_breadcrumbs show_home_icon="off" separator_icon="K||divi||400" admin_label="Supreme Breadcrumbs" _builder_version="4.18.0" _module_preset="default" items_font="||||||||" items_text_color="rgba(255,255,255,0.6)" custom_css_main_element="color:...

FalconFriday — Detecting UnPACing and shadowed credentials—0xFF1E

Jun 17, 2022 | Blue teaming

[dsm_breadcrumbs show_home_icon="off" separator_icon="K||divi||400" admin_label="Supreme Breadcrumbs" _builder_version="4.18.0" _module_preset="default" items_font="||||||||" items_text_color="rgba(255,255,255,0.6)" custom_css_main_element="color:...

FalconFriday — Detecting malicious modifications to Active Directory — 0xFF1D

May 13, 2022 | Blue teaming

[dsm_breadcrumbs show_home_icon="off" separator_icon="K||divi||400" admin_label="Supreme Breadcrumbs" _builder_version="4.18.0" _module_preset="default" items_font="||||||||" items_text_color="rgba(255,255,255,0.6)" custom_css_main_element="color:...

Debugging the undebuggable and finding a CVE in Microsoft Defender for Endpoint

Apr 1, 2022 | Blue teaming

[dsm_breadcrumbs show_home_icon="off" separator_icon="K||divi||400" admin_label="Supreme Breadcrumbs" _builder_version="4.18.0" _module_preset="default" items_font="||||||||" items_text_color="rgba(255,255,255,0.6)" custom_css_main_element="color:...

FalconFriday — EzETW — Got To Catch Them All…

Mar 11, 2022 | Blue teaming

[dsm_breadcrumbs show_home_icon="off" separator_icon="K||divi||400" admin_label="Supreme Breadcrumbs" _builder_version="4.18.0" _module_preset="default" items_font="||||||||" items_text_color="rgba(255,255,255,0.6)" custom_css_main_element="color:...

Search result

More to read

FalconFriday — Detecting Active Directory Data Collection — 0xFF21

FalconFriday — Detecting ADCS web services abuse — 0xFF20

FalconFriday — Detecting LSASS dumping with debug privileges — 0xFF1F

Microsoft Defender for Endpoint Internals 0x03 — MDE telemetry unreliability and log augmentation

Microsoft Defender for Endpoint Internals 0x02 — Audit Settings and Telemetry

FalconFriday — Detecting UnPACing and shadowed credentials—0xFF1E

FalconFriday — Detecting malicious modifications to Active Directory — 0xFF1D

Debugging the undebuggable and finding a CVE in Microsoft Defender for Endpoint

FalconFriday — EzETW — Got To Catch Them All…

Together. Secure. Today.

Get in touch with one of our professionals

FalconForce realizes ambitions by working closely with its customers in a methodical manner, improving their security in the digital domain.