Temasec Managed Defense Archives

Category Archives: Managed Defense

COOKIEJAR: Tracking Adversaries With FireEye Endpoint Security’s Logon Tracker Module

August 11 2020 By Syndicator in Alex Pennino, Homepage Carousel, Incident Response, Latest Blog Posts, Malware, Managed Defense, Nick Schroeder, Security, Threat Research

During a recent investigation at a telecommunications company led by Mandiant Managed Defense, our team was tasked with rapidly identifying systems that...

COOKIEJAR: Tracking Adversaries With FireEye Endpoint Security’s Logon Tracker Module

August 11 2020 By Syndicator in Alex Pennino, Homepage Carousel, Incident Response, Latest Blog Posts, Malware, Managed Defense, Nick Schroeder, Security, Threat Research

During a recent investigation at a telecommunications company led by Mandiant Managed Defense, our team was tasked with rapidly identifying systems that...

It’s Your Money and They Want It Now — The Cycle of Adversary Pursuit

March 31 2020 By Daniel Pany in Aaron Stephens, adversary, analysis, Homepage Carousel, Incident Response, Latest Blog Posts, Managed Defense, Security, Threat Research, Van Ta

When we discover new intrusions, we ask ourselves questions that will help us understand the totality of the activity set. How common is this activity? Is there anything...

It’s Your Money and They Want It Now — The Cycle of Adversary Pursuit

March 31 2020 By Daniel Pany in Aaron Stephens, adversary, analysis, Homepage Carousel, Incident Response, Latest Blog Posts, Managed Defense, Security, Threat Research, Van Ta

When we discover new intrusions, we ask ourselves questions that will help us understand the totality of the activity set. How common is this activity? Is there anything...

Managed Defense: The Analytical Mindset

February 11 2020 By Daniel Pany in analysis, Billy James Velasco, China, Grant Oviatt, Homepage Carousel, Latest Blog Posts, Managed Defense, Threat Research

When it comes to cyber security (managed services or otherwise), you’re ultimately reliant on analyst expertise to keep your environment safe. Products and intelligence are necessary pieces...

CertUtil Qualms: They Came to Drop FOMBs

October 29 2019 By Daniel Pany in Breach, Eoin Jennings, Farzin Maghsoudi, Homepage Carousel, Latest Blog Posts, Managed Defense, Niall Errity, Threat Research, vulnerabilities, Vulnerability

This blog post covers an interesting intrusion attempt that FireEye Managed Defense thwarted involving the rapid weaponization of a recently disclosed vulnerability combined with the creative use...

GAME OVER: Detecting and Stopping an APT41 Operation

August 19 2019 By Daniel Pany in Alex Pennino, APT, Homepage Carousel, Latest Blog Posts, Managed Defense, Matt Bromiley, Threat Research

In August 2019, FireEye released the “Double Dragon” report on our newest graduated threat group, APT41. A China-nexus dual espionage and financially-focused group, APT41...