top of page
Search


Detecting ManualFinder/PDF Editor Malware Campaign with KQL
The ManualFinder and PDF Editor malware campaign represents a chain attack that turns legitimate-looking applications (well, I guess..)...
Damien van der Linden
22 hours ago7 min read
Â
Â


Detecting Executive Impersonation Campaigns with KQL
These e-mails pretend to be from your CEO, have your first name as the subject, and contain absolutely no links, no files, just text.
Damien van der Linden
Jul 154 min read
Â
Â


FileFix – Another Deceptive Attack Vector (Demo and Detections)
ClickFix was bad enough, it became the second most common attack vector right after phishing. ClickFix tricked users with a deceptive...
Damien van der Linden
Jul 113 min read
Â
Â


From Car Rental to Infostealer: A SOCGholish Attack Analysis
Sometimes the most interesting security discoveries start with the most mundane activities.
Damien van der Linden
Jan 295 min read
Â
Â
bottom of page