Indicator of Attack vs Indicator of Compromises Archives

Threat Hunting for Cloud Snooping Attack

A cloud snooping attack refers to unauthorized monitoring, access, or manipulation of cloud resources to exfiltrate data or compromise services....

Hunting Strategies and Techniques of Malicious Processes Creating Network Traffic

Project Name: Hunting Strategies and Techniques of Malicious Processes Creating Network Traffic Hunting malicious processes generating network traffic using Wireshark...

How Cyber Attackers Exploit IP Addresses the Key Strategies and Evasion Techniques

Attackers frequently exploit IP addresses as indicators during cyberattacks for several critical reasons: Source Attribution: IP addresses are a key...

Threat Hunting for CloudFanta

Author: Rohit D Sadgune / Amruta Sadgune FAQ:- What is CloudFanta Data/Log sources details Threat hunting for cloudfanta Malware Analysis of cloudfanta How...

Linux threat hunting using CUT SORT UNIQ DIFF

Project Name: Linux threat hunting with CUT SORT UNIQ DIFF Description: This article will help you to understand hands-on command execution...

HACKFORALB successfully completed threat hunting for following attack…

DNS Reconnaissance, Domain Generation Algorithm (DGA), Robotic Pattern Detection, DNS Shadowing , Fast Flux DNS , Beaconing , Phishing , APT , Lateral Movement , Browser Compromised , DNS Amplification , DNS Tunneling , Skeleton key Malware , Advance Persistent Threats, Low and Slow attacks , DoS, Watering Hole Attack Detection, Weh Shell , DNS Water Torch Attack , Intrusion Detection, Cookie visibility and theft, User login Session hijacking, Broken Trust, Pass the Hash, Session fixation, Honey Token account suspicious activities, Data Snooping / Data aggregation, Cross Channel Data Egress, Banking fraud detection, Chopper Web shell

Tag: Indicator of Attack vs Indicator of Compromises