Temasec Mandiant Archives

Category Archives: Mandiant

A Hands-On Introduction to Mandiant’s Approach to OT Red Teaming

August 25 2020 By Syndicator in Daniel Kapellmann Zafra, Homepage Carousel, Industrial Control Systems, Latest Blog Posts, Mandiant, Nathan Brubaker, operational technology, Red Teaming, Rob Caldwell, Security, Threat Research

Operational technology (OT) asset owners have historically considered red teaming of OT and industrial control system (ICS) networks to be too risky due to the potential for...

Configuring a Windows Domain to Dynamically Analyze an Obfuscated Lateral Movement Tool

July 7 2020 By Daniel Pany in analysis, FLARE, Homepage Carousel, Latest Blog Posts, Malware, Mandiant, Matthew Haigh, Reverse Engineering, Security, Threat Research, Trevor Haskell

We recently encountered a large obfuscated malware sample that offered several interesting analysis challenges. It used virtualization that prevented us from producing a fully-deobfuscated memory dump...

Configuring a Windows Domain to Dynamically Analyze an Obfuscated Lateral Movement Tool

July 7 2020 By Daniel Pany in analysis, FLARE, Homepage Carousel, Latest Blog Posts, Malware, Mandiant, Matthew Haigh, Reverse Engineering, Security, Threat Research, Trevor Haskell

Using Real-Time Events in Investigations

May 14 2020 By Daniel Pany in Daniel Pany, Endpoint Security, Homepage Carousel, Incident Response, investigation, Latest Blog Posts, Mandiant, Redline, Security, Threat Research

To understand what a threat actor did on a Windows system, analysts often turn to the tried and true sources of historical endpoint artifacts such as the...

Using Real-Time Events in Investigations

May 14 2020 By Daniel Pany in Daniel Pany, Endpoint Security, Homepage Carousel, Incident Response, investigation, Latest Blog Posts, Mandiant, Redline, Security, Threat Research

To understand what a threat actor did on a Windows system, analysts often turn to the tried and true sources of historical endpoint artifacts such as the...