corpus.blog
41554 blogs · [ { "id": "01a07df3-579b-728b-a106-ba30635de954", "title": "Threat Hunt Deep Dives: The Return of the WIZard", "url": "https://www.intel471.com/blog/threat-hunt-deep-dives-episode-1", "published_at": "2020-11-20T18:00:00+00:00" }, { "id": "01a07df3-579b-728b-a106-ba306390e548", "title": "3 Threat Hunting Myths You Shouldn't Believe", "url": "https://www.intel471.com/blog/3-threat-hunting-myths-you-shouldnt-believe", "published_at": "2020-11-17T18:00:00+00:00" }, { "id": "01a07df3-579b-728b-a106-ba306454f2aa", "title": "Ransomware-as-a-service: The pandemic within a pandemic", "url": "https://www.intel471.com/blog/ransomware-as-a-service-2020-ryuk-maze-revil-egregor-doppelpaymer", "published_at": "2020-11-16T18:00:00+00:00" }, { "id": "01a07df3-579b-728b-a106-ba30650375ea", "title": "Detection Content - The Trouble with Free", "url": "https://www.intel471.com/blog/detection-content-the-trouble-with-free", "published_at": "2020-11-12T18:00:00+00:00" }, { "id": "01a07df3-579b-728b-a106-ba30659e580a", "title": "Trickbot down, but is it out?", "url": "https://www.intel471.com/blog/trickbot-update-november-2020-bazar-loader-microsoft", "published_at": "2020-11-10T18:00:00+00:00" }, { "id": "01a07df3-579b-728b-a106-ba3065de92b3", "title": "After the Hunt: How to Follow Up on Cyber Threat Hunting Findings", "url": "https://www.intel471.com/blog/after-the-hunt-how-to-follow-up-on-cyber-threat-hunt-findings", "published_at": "2020-11-05T18:00:00+00:00" }, { "id": "01a07df3-579b-728b-a106-ba30668e6922", "title": "Cyborg Security 2020 CTF Solutions", "url": "https://www.intel471.com/blog/cyborg-security-2020-ctf-solutions", "published_at": "2020-10-28T17:00:00+00:00" }, { "id": "01a07df3-579b-728b-a106-ba30670417e4", "title": "Alleged REvil member spills details on group’s ransomware operations", "url": "https://www.intel471.com/blog/revil-ransomware-interview-russian-osint-100-million", "published_at": "2020-10-28T17:00:00+00:00" }, { "id": "01a07df3-579b-728b-a106-ba3067dcf1af", "title": "What is Structured Threat Hunting?", "url": "https://www.intel471.com/blog/what-is-structured-threat-hunting", "published_at": "2020-10-27T17:00:00+00:00" }, { "id": "01a07df3-579b-728b-a106-ba3067fd3ddf", "title": "Leveraging Intel 471’s Malware Intelligence Data using MISP", "url": "https://www.intel471.com/blog/intel-471-misp-malware-intelligence-data", "published_at": "2020-10-20T17:00:00+00:00" }, { "id": "01a07df3-579b-728b-a106-ba30689fb949", "title": "Global Trickbot disruption operation shows promise", "url": "https://www.intel471.com/blog/global-trickbot-disruption-operation-shows-promise", "published_at": "2020-10-20T17:00:00+00:00" }, { "id": "01a07df3-579b-728b-a106-ba3068a528e3", "title": "That was quick: Trickbot is back after disruption attempts", "url": "https://www.intel471.com/blog/trickbot-online-emotet-microsoft-cyber-command-disruption-attempts", "published_at": "2020-10-15T17:00:00+00:00" }, { "id": "01a07df3-579b-728b-a106-ba306903778d", "title": "Cyborg Security Introduces New Platform for Threat Hunting", "url": "https://www.intel471.com/blog/press-release-cyborg-security-introduces-new-platform-for-threat-hunting", "published_at": "2020-10-13T17:00:00+00:00" }, { "id": "01a07df3-579b-728b-a106-ba30695ef7cb", "title": "Detection Validation: Going Atomic on False Negatives", "url": "https://www.intel471.com/blog/1125", "published_at": "2020-10-13T17:00:00+00:00" }, { "id": "01a07df3-579b-728b-a106-ba306a22ee19", "title": "Recent Trickbot disruption operation likely to have only short-term impact", "url": "https://www.intel471.com/blog/trickbot-disruption-microsoft-short-term-impact", "published_at": "2020-10-13T17:00:00+00:00" }, { "id": "01a07df3-579b-728b-a106-ba306aaad462", "title": "Criminals posing as Lazarus Group threatened Travelex: Bitcoin or DDoS", "url": "https://www.intel471.com/blog/travelex-ddos-attack-lazarus-group-ransom", "published_at": "2020-10-13T17:00:00+00:00" }, { "id": "01a07df3-579b-728b-a106-ba306b2e07f3", "title": "OSINT for Attack Surface Monitoring", "url": "https://www.intel471.com/blog/osint-for-attack-surface-monitoring", "published_at": "2020-10-12T17:00:00+00:00" }, { "id": "01a07df3-579b-728b-a106-ba306b9b45dc", "title": "Cyborg Security + Elastic Deliver Advanced Threat Hunting Content", "url": "https://www.intel471.com/blog/cyborg-security-elastic-deliver-advanced-threat-hunting-content", "published_at": "2020-10-08T17:00:00+00:00" }, { "id": "01a07df3-579b-728b-a106-ba306c842e81", "title": "You Can Only Hunt What You Can See: Best Endpoint Log Sources for Threat Hunting", "url": "https://www.intel471.com/blog/you-can-only-hunt-what-you-can-see-best-endpoint-log-sources-for-threat-hunting", "published_at": "2020-09-29T17:00:00+00:00" }, { "id": "01a07df3-579b-728b-a106-ba306d659a1c", "title": "An Overview of the Actors Behind the Largest MageCart Attack (So Far!)", "url": "https://www.intel471.com/blog/an-overview-of-the-actors-behind-the-largest-magecart-attack-so-far", "published_at": "2020-09-25T17:00:00+00:00" }, { "id": "01a07df3-579b-728b-a106-ba306e1901cc", "title": "The Trouble with Attribution in Cyber Threat Intelligence (Part 1)", "url": "https://www.intel471.com/blog/the-trouble-with-attribution-in-cyber-threat-intelligence-part-1", "published_at": "2020-09-18T17:00:00+00:00" }, { "id": "01a07df3-579b-728b-a106-ba306f154250", "title": "Partners in crime: North Koreans and elite Russian-speaking cybercriminals", "url": "https://www.intel471.com/blog/partners-in-crime-north-koreans-and-elite-russian-speaking-cybercriminals", "published_at": "2020-09-16T17:00:00+00:00" }, { "id": "01a07df3-579b-728b-a106-ba306ff5697a", "title": "You Can Only Hunt What You Can See: Best Network Log Sources for Threat Hunting", "url": "https://www.intel471.com/blog/you-can-only-hunt-what-you-can-see-best-network-log-sources-for-threat-hunting", "published_at": "2020-09-08T17:00:00+00:00" }, { "id": "01a07df3-579b-728b-a106-ba3070601d45", "title": "Snatch Ransomware", "url": "https://www.intel471.com/blog/snatch-ransomware", "published_at": "2020-09-04T17:00:00+00:00" }, { "id": "01a07df3-579b-728b-a106-ba30706db5c3", "title": "COVID-19 and the Use of Offensive Cyber Operations", "url": "https://www.intel471.com/blog/covid-19-and-the-use-of-offensive-cyber-operations", "published_at": "2020-09-03T17:00:00+00:00" }, { "id": "01a07df3-579b-728b-a106-ba3070f2700d", "title": "Threat Hunting & Threat Content Creation", "url": "https://www.intel471.com/blog/threat-hunting-threat-content-creation", "published_at": "2020-08-28T17:00:00+00:00" }, { "id": "01a07df3-579b-728b-a106-ba307120d2ab", "title": "The Rise of Doxware - Capable Ransomware", "url": "https://www.intel471.com/blog/the-rise-of-doxware-capable-ransomware", "published_at": "2020-08-27T17:00:00+00:00" }, { "id": "01a07df3-579b-728b-a106-ba30713933b5", "title": "OSINT for Security Assessments", "url": "https://www.intel471.com/blog/osint-for-security-assessments", "published_at": "2020-08-26T17:00:00+00:00" }, { "id": "01a07df3-579b-728b-a106-ba3071c6987b", "title": "Prioritizing “critical” vulnerabilities: A threat intelligence perspective", "url": "https://www.intel471.com/blog/prioritizing-critical-vulnerabilities-a-threat-intelligence-perspective", "published_at": "2020-08-12T17:00:00+00:00" }, { "id": "01a07df3-579b-728b-a106-ba3071c6f216", "title": "Black Hat USA 2020 Cyber Puzzle Solutions", "url": "https://www.intel471.com/blog/black-hat-usa-2020-cyber-puzzle-solutions", "published_at": "2020-08-12T17:00:00+00:00" }, { "id": "01a07df3-579b-728b-a106-ba30726baacc", "title": "OSINT for Cyber Threat Intelligence 09.08.2020", "url": "https://www.intel471.com/blog/osint-for-cyber-threat-intelligence-09-08-2020", "published_at": "2020-08-09T17:00:00+00:00" }, { "id": "01a07df3-579b-728b-a106-ba30730cb439", "title": "How Cyborg Security Creates Threat Hunting Content", "url": "https://www.intel471.com/blog/how-cyborg-creates-threat-hunting-content", "published_at": "2020-08-07T17:00:00+00:00" }, { "id": "01a07df3-579b-728b-a106-ba30735ff1eb", "title": "Black Hat Webcast | Understanding and Disrupting Offensive Innovations", "url": "https://www.intel471.com/blog/webcast-understanding-and-disrupting-offensive-innovations", "published_at": "2020-07-30T17:00:00+00:00" }, { "id": "01a07df3-579b-728b-a106-ba3074214fcb", "title": "Chance Favors the Prepared Mind: Building an Advanced Threat Hunter", "url": "https://www.intel471.com/blog/chance-favors-the-prepared-mind-building-an-advanced-threat-hunter", "published_at": "2020-07-28T17:00:00+00:00" }, { "id": "01a07df3-579b-728b-a106-ba3075032df0", "title": "Flowspec – TA505’s bulletproof hoster of choice", "url": "https://www.intel471.com/blog/bulletproof-hoster-of-choice", "published_at": "2020-07-15T17:00:00+00:00" }, { "id": "01a07df3-579b-728b-a106-ba307575db66", "title": "Python Malware On The Rise", "url": "https://www.intel471.com/blog/python-malware-on-the-rise", "published_at": "2020-07-14T17:00:00+00:00" }, { "id": "01a07df3-579b-728b-a106-ba3075d6a51b", "title": "What the Heck is Threat Intelligence?", "url": "https://www.intel471.com/blog/what-the-heck-is-threat-intelligence", "published_at": "2020-07-10T17:00:00+00:00" }, { "id": "01a07df3-579b-728b-a106-ba307688c14d", "title": "Iran’s domestic espionage: Lessons from recent data leaks", "url": "https://www.intel471.com/blog/irans-domestic-espionage", "published_at": "2020-07-08T17:00:00+00:00" }, { "id": "01a07df3-579b-728b-a106-ba307692daa2", "title": "Threat Content, Not Automation, Fuels Effective Threat Hunting", "url": "https://www.intel471.com/blog/threat-content-not-automation-fuels-effective-threat-hunting", "published_at": "2020-07-07T17:00:00+00:00" }, { "id": "01a07df3-579b-728b-a106-ba30774bbe5b", "title": "15 New modules for Open Source and SpiderFoot HX", "url": "https://www.intel471.com/blog/15-new-modules-for-open-source-and-spiderfoot-hx", "published_at": "2020-06-03T17:00:00+00:00" }, { "id": "01a07df3-579b-728b-a106-ba30777a7c33", "title": "The Trouble With Threat Intelligence Today", "url": "https://www.intel471.com/blog/the-trouble-with-threat-intelligence-today", "published_at": "2020-06-03T17:00:00+00:00" }, { "id": "01a07df3-579b-728b-a106-ba3077e12848", "title": "SANS Webcast | Is Your Threat Hunting Effective?", "url": "https://www.intel471.com/blog/webcast-is-your-threat-hunting-effective", "published_at": "2020-05-26T17:00:00+00:00" }, { "id": "01a07df3-579b-728b-a106-ba3078793443", "title": "Remexi Backdoor", "url": "https://www.intel471.com/blog/remexi-backdoor", "published_at": "2020-05-21T17:00:00+00:00" }, { "id": "01a07df3-579b-728b-a106-ba3078a5eeb2", "title": "A brief history of TA505", "url": "https://www.intel471.com/blog/a-brief-history-of-ta505", "published_at": "2020-05-21T17:00:00+00:00" }, { "id": "01a07df3-579b-728b-a106-ba3078abb8e8", "title": "You need to adjust your patch priorities!", "url": "https://www.intel471.com/blog/you-need-to-adjust-your-patch-priorities", "published_at": "2020-05-21T17:00:00+00:00" }, { "id": "01a07df3-579b-728b-a106-ba30798e7b8f", "title": "Why You Need Internal SOC Analysts With Hands on Keyboards", "url": "https://www.intel471.com/blog/why-you-need-internal-soc-analysts-with-hands-on-keyboards", "published_at": "2020-05-18T17:00:00+00:00" }, { "id": "01a07df3-579b-728b-a106-ba307995ea49", "title": "Automation is a Tool for Analysts - Not Vice Versa", "url": "https://www.intel471.com/blog/automation-is-a-tool-for-analysts-not-vice-versa", "published_at": "2020-05-05T17:00:00+00:00" }, { "id": "01a07df3-579b-728b-a106-ba3079e13152", "title": "Changes in REvil ransomware version 2.2", "url": "https://www.intel471.com/blog/changes-in-revil-ransomware-version-2-2", "published_at": "2020-05-04T17:00:00+00:00" }, { "id": "01a07df3-579b-728b-a106-ba307ad10e60", "title": "COVID-19 pandemic: Through the eyes of a cybercriminal", "url": "https://www.intel471.com/blog/covid-19-pandemic-through-the-cybercriminals-eyes", "published_at": "2020-04-30T17:00:00+00:00" }, { "id": "01a07df3-579b-728b-a106-ba307b5f6cb9", "title": "Network Content and You: Why Logs Matter in the Age of TLS\\SSL", "url": "https://www.intel471.com/blog/network-content-and-you-why-logs-matter-in-the-age-of-tlsssl", "published_at": "2020-04-21T17:00:00+00:00" }, { "id": "01a07df3-579b-728b-a106-ba307bab5459", "title": "Understanding the relationship between Emotet, Ryuk and TrickBot", "url": "https://www.intel471.com/blog/understanding-the-relationship-between-emotet-ryuk-and-trickbot", "published_at": "2020-04-14T17:00:00+00:00" }, { "id": "01a07df3-579b-728b-a106-ba307c1a0238", "title": "Porting the Bug Bounty Concept to Threat Hunting", "url": "https://www.intel471.com/blog/porting-the-bug-bounty-concept-to-threat-hunting", "published_at": "2020-04-09T17:00:00+00:00" }, { "id": "01a07df3-579b-728b-a106-ba307c85c9ec", "title": "REvil Ransomware-as-a-Service: An analysis of a ransomware affiliate operation", "url": "https://www.intel471.com/blog/revil-ransomware-as-a-service-an-analysis-of-a-ransomware-affiliate-operation", "published_at": "2020-04-01T17:00:00+00:00" }, { "id": "01a07df3-579b-728b-a106-ba307d469b91", "title": "Why Artificial Intelligence Can't Save Your SOC", "url": "https://www.intel471.com/blog/why-artificial-intelligence-cant-save-your-soc", "published_at": "2020-03-31T17:00:00+00:00" }, { "id": "01a07df3-579b-728b-a106-ba307de77948", "title": "Analysis of an attempted attack against Intel 471", "url": "https://www.intel471.com/blog/analysis-of-an-attempted-attack-against-intel-471", "published_at": "2020-03-26T17:00:00+00:00" }, { "id": "01a07df3-579b-728b-a106-ba307e25537c", "title": "3 Factors Holding Back Threat Hunting Today", "url": "https://www.intel471.com/blog/3-factors-holding-back-threat-hunting-today", "published_at": "2020-03-25T17:00:00+00:00" }, { "id": "01a07df3-579b-728b-a106-ba307f1dcd09", "title": "Malicious actors leverage Coronavirus Disease 2019 fear to increase business", "url": "https://www.intel471.com/blog/malicious-actors-leverage-coronavirus-disease-2019-fear-to-increase-business", "published_at": "2020-03-19T17:00:00+00:00" }, { "id": "01a07df3-579b-728b-a106-ba307fc2e00e", "title": "Threat Hunting and You: Why Content is Critical to Threat Hunting", "url": "https://www.intel471.com/blog/threat-hunting-and-you-why-content-is-critical-to-threat-hunting", "published_at": "2020-03-09T17:00:00+00:00" }, { "id": "01a07df3-579b-728b-a106-ba307fe83c4a", "title": "Introducing Intel 471’s Cybercrime Underground General Intelligence Requirements (CU-GIR): a common framework to address a common challenge", "url": "https://www.intel471.com/blog/introducing-intel-471s-cybercrime-underground-general-intelligence-requirements-cu-gir-a-common-framework-to-address-a-common-challenge", "published_at": "2020-02-26T18:00:00+00:00" }, { "id": "01a07df3-579b-728b-a106-ba30800a391f", "title": "Intelligence requirements: Moving from concept to practice", "url": "https://www.intel471.com/blog/intelligence-requirements-moving-from-concept-to-practice", "published_at": "2020-02-14T18:00:00+00:00" }, { "id": "01a07df3-579b-728b-a106-ba3080bc4277", "title": "Nixintel: Crypto Scam Investigation Using SpiderFoot HX For OSINT Automation", "url": "https://www.intel471.com/blog/nixintel-crypto-scam-investigation-using-spiderfoot-hx-for-osint-automation", "published_at": "2019-12-16T18:00:00+00:00" }, { "id": "01a07df3-579b-728b-a106-ba308132d135", "title": "Nixintel: SpiderFoot HX Case Study of Investigating A Phishing Domain", "url": "https://www.intel471.com/blog/nixintel-spiderfoot-hx-case-study-of-investigating-a-phishing-domain", "published_at": "2019-12-03T18:00:00+00:00" }, { "id": "01a07df3-579b-728b-a106-ba3081eb9cf0", "title": "In this blog post by SpiderFoot author, Steve Micallef, see how OSINT is used to investigate a Bitcoin scam.", "url": "https://www.intel471.com/blog/how-osint-is-used-to-investigate-a-bitcoin-scam", "published_at": "2019-11-18T18:00:00+00:00" }, { "id": "01a07df3-579b-728b-a106-ba30822e69d8", "title": "Melting the deep and dark web myth and why we hate the phrase", "url": "https://www.intel471.com/blog/melting-the-deep-and-dark-web-myth-and-why-we-hate-the-phrase", "published_at": "2019-09-10T17:00:00+00:00" }, { "id": "01a07df3-579b-728b-a106-ba30830dccde", "title": "OSINT is re-defining what an organisation’s perimeter looks like.", "url": "https://www.intel471.com/blog/osint-is-re-defining-what-an-organisations-perimeter-looks-like", "published_at": "2019-01-27T18:00:00+00:00" }, { "id": "01a07df3-579b-728b-a106-ba3083cb4880", "title": "No, the criminal underground isn’t dropping its use of Bitcoin anytime soon", "url": "https://www.intel471.com/blog/no-the-criminal-underground-isnt-dropping-its-use-of-bitcoin-anytime-soon", "published_at": "2018-01-04T18:00:00+00:00" }, { "id": "01a07df3-579b-728b-a106-ba3083fb22e7", "title": "Naming malware: What’s in a name?", "url": "https://www.intel471.com/blog/naming-malware-whats-in-a-name", "published_at": "2017-05-31T17:00:00+00:00" }, { "id": "01a07df3-579b-728b-a106-ba308442b59f", "title": "Being a cyber threat intelligence analyst and operating in the fog of uncertainty", "url": "https://www.intel471.com/blog/being-a-cyber-threat-intelligence-analyst-and-operating-in-the-fog-of-uncertainty", "published_at": "2017-05-18T17:00:00+00:00" }, { "id": "01a07df3-579b-728b-a106-ba30851fd4a5", "title": "Who hacked the Democratic National Committee?", "url": "https://www.intel471.com/blog/who-hacked-the-democratic-national-committee", "published_at": "2016-06-17T17:00:00+00:00" }, { "id": "01a07df3-579b-728b-a106-ba30852413c0", "title": "Cyber Threat Intelligence: Comparing the incident-centric and actor-centric approaches", "url": "https://www.intel471.com/blog/cyber-threat-intelligence-comparing-the-incident-centric-and-actor-centric-approaches", "published_at": "2016-05-19T17:00:00+00:00" }, { "id": "01a07df3-579b-728b-a106-ba3085bd9026", "title": "Cyber threat intelligence requirements: What are they, what are they for and how do they fit in the…", "url": "https://www.intel471.com/blog/cyber-threat-intelligence-requirements-what-are-they-what-are-they-for-and-how-do-they-fit-in-the", "published_at": "2016-05-19T17:00:00+00:00" }, { "id": "01a07df3-579b-728b-a106-ba3086208e40", "title": "Actionable intelligence — Is it a capability problem or does your intelligence provider suck?", "url": "https://www.intel471.com/blog/actionable-intelligence-is-it-a-capability-problem-or-does-your-intelligence-provider-suck", "published_at": "2016-05-19T17:00:00+00:00" }, { "id": "01a07df3-579b-728b-a106-ba308669cc7f", "title": "Cyber threat intelligence: Why should I be worried about threats that aren’t specifically about my organization?", "url": "https://www.intel471.com/blog/cyber-threat-intelligence-why-should-i-be-worried-about-threats-that-arent-specifically-about-my-organization", "published_at": "2016-05-19T17:00:00+00:00" }, { "id": "01a07df3-579b-728b-a106-ba3086e54f31", "title": "Cyber Threat Intelligence: Observing the adversary", "url": "https://www.intel471.com/blog/cyber-threat-intelligence-observing-the-adversary", "published_at": "2016-05-17T17:00:00+00:00" } ] posts Claim your blog
Back to Intel 471
Blog · corpus.blog/blogs/intel471.com/posts

Intel 471

intel471.com

2020

Threat Hunt Deep Dives: The Return of the WIZardoriginal ↗
20 Nov 2020
3 Threat Hunting Myths You Shouldn't Believeoriginal ↗
17 Nov 2020
Ransomware-as-a-service: The pandemic within a pandemicoriginal ↗
16 Nov 2020
Detection Content - The Trouble with Freeoriginal ↗
12 Nov 2020
Trickbot down, but is it out?original ↗
10 Nov 2020
After the Hunt: How to Follow Up on Cyber Threat Hunting Findingsoriginal ↗
5 Nov 2020
Cyborg Security 2020 CTF Solutionsoriginal ↗
28 Oct 2020
Alleged REvil member spills details on group’s ransomware operationsoriginal ↗
28 Oct 2020
What is Structured Threat Hunting?original ↗
27 Oct 2020
Leveraging Intel 471’s Malware Intelligence Data using MISPoriginal ↗
20 Oct 2020
Global Trickbot disruption operation shows promiseoriginal ↗
20 Oct 2020
That was quick: Trickbot is back after disruption attemptsoriginal ↗
15 Oct 2020
Cyborg Security Introduces New Platform for Threat Huntingoriginal ↗
13 Oct 2020
Detection Validation: Going Atomic on False Negativesoriginal ↗
13 Oct 2020
Recent Trickbot disruption operation likely to have only short-term impactoriginal ↗
13 Oct 2020
Criminals posing as Lazarus Group threatened Travelex: Bitcoin or DDoSoriginal ↗
13 Oct 2020
OSINT for Attack Surface Monitoringoriginal ↗
12 Oct 2020
Cyborg Security + Elastic Deliver Advanced Threat Hunting Contentoriginal ↗
8 Oct 2020
You Can Only Hunt What You Can See: Best Endpoint Log Sources for Threat Huntingoriginal ↗
29 Sept 2020
An Overview of the Actors Behind the Largest MageCart Attack (So Far!)original ↗
25 Sept 2020
The Trouble with Attribution in Cyber Threat Intelligence (Part 1)original ↗
18 Sept 2020
Partners in crime: North Koreans and elite Russian-speaking cybercriminalsoriginal ↗
16 Sept 2020
You Can Only Hunt What You Can See: Best Network Log Sources for Threat Huntingoriginal ↗
8 Sept 2020
Snatch Ransomwareoriginal ↗
4 Sept 2020
COVID-19 and the Use of Offensive Cyber Operationsoriginal ↗
3 Sept 2020
Threat Hunting & Threat Content Creationoriginal ↗
28 Aug 2020
The Rise of Doxware - Capable Ransomwareoriginal ↗
27 Aug 2020
OSINT for Security Assessmentsoriginal ↗
26 Aug 2020
Prioritizing “critical” vulnerabilities: A threat intelligence perspectiveoriginal ↗
12 Aug 2020
Black Hat USA 2020 Cyber Puzzle Solutionsoriginal ↗
12 Aug 2020
OSINT for Cyber Threat Intelligence 09.08.2020original ↗
9 Aug 2020
How Cyborg Security Creates Threat Hunting Contentoriginal ↗
7 Aug 2020
Black Hat Webcast | Understanding and Disrupting Offensive Innovationsoriginal ↗
30 Jul 2020
Chance Favors the Prepared Mind: Building an Advanced Threat Hunteroriginal ↗
28 Jul 2020
Flowspec – TA505’s bulletproof hoster of choiceoriginal ↗
15 Jul 2020
Python Malware On The Riseoriginal ↗
14 Jul 2020
What the Heck is Threat Intelligence?original ↗
10 Jul 2020
Iran’s domestic espionage: Lessons from recent data leaksoriginal ↗
8 Jul 2020
Threat Content, Not Automation, Fuels Effective Threat Huntingoriginal ↗
7 Jul 2020
15 New modules for Open Source and SpiderFoot HXoriginal ↗
3 Jun 2020
The Trouble With Threat Intelligence Todayoriginal ↗
3 Jun 2020
SANS Webcast | Is Your Threat Hunting Effective?original ↗
26 May 2020
Remexi Backdoororiginal ↗
21 May 2020
A brief history of TA505original ↗
21 May 2020
You need to adjust your patch priorities!original ↗
21 May 2020
Why You Need Internal SOC Analysts With Hands on Keyboardsoriginal ↗
18 May 2020
Automation is a Tool for Analysts - Not Vice Versaoriginal ↗
5 May 2020
Changes in REvil ransomware version 2.2original ↗
4 May 2020
COVID-19 pandemic: Through the eyes of a cybercriminaloriginal ↗
30 Apr 2020
Network Content and You: Why Logs Matter in the Age of TLS\SSLoriginal ↗
21 Apr 2020
Understanding the relationship between Emotet, Ryuk and TrickBotoriginal ↗
14 Apr 2020
Porting the Bug Bounty Concept to Threat Huntingoriginal ↗
9 Apr 2020
REvil Ransomware-as-a-Service: An analysis of a ransomware affiliate operationoriginal ↗
1 Apr 2020
Why Artificial Intelligence Can't Save Your SOCoriginal ↗
31 Mar 2020
Analysis of an attempted attack against Intel 471original ↗
26 Mar 2020
3 Factors Holding Back Threat Hunting Todayoriginal ↗
25 Mar 2020
Malicious actors leverage Coronavirus Disease 2019 fear to increase businessoriginal ↗
19 Mar 2020
Threat Hunting and You: Why Content is Critical to Threat Huntingoriginal ↗
9 Mar 2020
Introducing Intel 471’s Cybercrime Underground General Intelligence Requirements (CU-GIR): a common framework to address a common challengeoriginal ↗
26 Feb 2020
Intelligence requirements: Moving from concept to practiceoriginal ↗
14 Feb 2020

2019

Nixintel: Crypto Scam Investigation Using SpiderFoot HX For OSINT Automationoriginal ↗
16 Dec 2019
Nixintel: SpiderFoot HX Case Study of Investigating A Phishing Domainoriginal ↗
3 Dec 2019
In this blog post by SpiderFoot author, Steve Micallef, see how OSINT is used to investigate a Bitcoin scam.original ↗
18 Nov 2019
Melting the deep and dark web myth and why we hate the phraseoriginal ↗
10 Sept 2019
OSINT is re-defining what an organisation’s perimeter looks like.original ↗
27 Jan 2019

2018

No, the criminal underground isn’t dropping its use of Bitcoin anytime soonoriginal ↗
4 Jan 2018

2017

Naming malware: What’s in a name?original ↗
31 May 2017
Being a cyber threat intelligence analyst and operating in the fog of uncertaintyoriginal ↗
18 May 2017

2016

Who hacked the Democratic National Committee?original ↗
17 Jun 2016
Cyber Threat Intelligence: Comparing the incident-centric and actor-centric approachesoriginal ↗
19 May 2016
Cyber threat intelligence requirements: What are they, what are they for and how do they fit in the…original ↗
19 May 2016
Actionable intelligence — Is it a capability problem or does your intelligence provider suck?original ↗
19 May 2016
Cyber threat intelligence: Why should I be worried about threats that aren’t specifically about my organization?original ↗
19 May 2016
Cyber Threat Intelligence: Observing the adversaryoriginal ↗
17 May 2016
Previous