Automating Response to Credential Dumping Attacks
Automated playbook designed to detect, contain and remediate credential dumping activity.
Palo Alto Networks
Mimikatz
Detecting and Preventing the Path to a Golden Ticket With Cortex XDR
Cortex XDR detects and prevents the way attackers get a Golden Ticket leveraging multiple data sources and behavioral detection.
Detecting Credential Stealing with Cortex XDR
In this blog post, we review some common credential stealing techniques, mainly focusing on Mimikatz implementation, demonstrate attack scenarios using Mimikatz and explain how Cortex XDR protects our customers...
Muddying the Water: Targeted Attacks in the Middle East
Unit 42 discovers MuddyWater, a threat group targeting entities in the Middle East and beyond.
OilRig Deploys “ALMA Communicator” – DNS Tunneling Trojan
Unit 42 observed a new version of the Clayslide delivery document used to install a new custom Trojan whose developer calls “ALMA Communicator”.
Striking Oil: A Closer Look at Adversary Infrastructure
Striking oil: a closer look at adversary infrastructure.
TwoFace Webshell: Persistent Access Point for Lateral Movement
Unit 42 uncovers TwoFace: a two-layered webshell used to remotely access the network of a targetd organization in the Middle East.
Threat Brief: Petya Ransomware
This Unit 42 blog provides an update on the threat situation surrounding attacks using the Petya Ransomware which are impacting organizations in Ukraine and other parts of Europe.
Subscribe to the Blog!
Sign up to receive must-read articles, Playbooks of the Week, new feature announcements, and more.
By submitting this form, you agree to our Terms of Use and acknowledge our Privacy Statement. Please look for a confirmation email from us. If you don't receive it in the next 10 minutes, please check your spam folder.