41554 blogs · 4,417,066 posts Claim your blog

Record · corpus.blog/posts/01a087cd-5a73-720c-b071-c67324424e73

Using dotnetfile to get a Sunburst timeline for intelligence gathering

r136a1.dev · published 18 June 2022

A record is what was published and who pointed at it. The text of the post is not held here: read it at the source, or at its Wayback capture.

Read the post at r136a1.dev Wayback capture

0blogs citing

First cited: —
Most recent: —
Rank this month: not ranked
Links from this post: 10
Words captured: 3,651

Cited by

No blog we hold has cited this post yet.

Links from this post

Link

Host

https://github.com/pan-unit42/dotnetfile

github.com

https://malpedia.caad.fkie.fraunhofer.de/details/win.sunburst

malpedia.caad.fkie.fraunhofer.de

https://docs.microsoft.com/en-us/dotnet/standard/native-interop/pinvoke

docs.microsoft.com

https://docs.microsoft.com/en-us/windows/win32/apiindex/windows-api-list

docs.microsoft.com

https://pan-unit42.github.io/dotnetfile/api_documentation/tables/implmap/

pan-unit42.github.io

https://pan-unit42.github.io/dotnetfile/api_documentation/tables/assembly/

pan-unit42.github.io

https://www.crowdstrike.com/blog/sunspot-malware-technical-analysis/

crowdstrike.com

https://orangematter.solarwinds.com/2021/01/11/new-findings-from-our-investigation-of-sunburst/

orangematter.solarwinds.com

https://www.solarwinds.com/sa-overview/securityadvisory

solarwinds.com

https://documentation.solarwinds.com/en/success_center/orionplatform/content/release_notes/solarwinds_platform_2022-2_release_notes.htm

documentation.solarwinds.com