Skip to content

stories

Directory actions

More options

Directory actions

More options

Latest commit

 

History

History
 
 

stories

Folders and files

NameName
Last commit message
Last commit date

parent directory

..
deprecated
deprecated
 
 
3cx_supply_chain_attack.yml
3cx_supply_chain_attack.yml
 
 
abnormal_kubernetes_behavior_using_splunk_infrastructure_monitoring.yml
abnormal_kubernetes_behavior_using_splunk_infrastructure_monitoring.yml
 
 
acidpour.yml
acidpour.yml
 
 
acidrain.yml
acidrain.yml
 
 
active_directory_discovery.yml
active_directory_discovery.yml
 
 
active_directory_kerberos_attacks.yml
active_directory_kerberos_attacks.yml
 
 
active_directory_lateral_movement.yml
active_directory_lateral_movement.yml
 
 
active_directory_password_spraying.yml
active_directory_password_spraying.yml
 
 
active_directory_privilege_escalation.yml
active_directory_privilege_escalation.yml
 
 
adobe_coldfusion_arbitrary_code_execution_cve_2023_29298_cve_2023_26360.yml
adobe_coldfusion_arbitrary_code_execution_cve_2023_29298_cve_2023_26360.yml
 
 
agenttesla.yml
agenttesla.yml
 
 
amadey.yml
amadey.yml
 
 
apache_struts_vulnerability.yml
apache_struts_vulnerability.yml
 
 
apt29_diplomatic_deceptions_with_wineloader.yml
apt29_diplomatic_deceptions_with_wineloader.yml
 
 
asset_tracking.yml
asset_tracking.yml
 
 
asyncrat.yml
asyncrat.yml
 
 
atlassian_confluence_server_and_data_center_cve_2022_26134.yml
atlassian_confluence_server_and_data_center_cve_2022_26134.yml
 
 
awfulshred.yml
awfulshred.yml
 
 
aws_cross_account_activity.yml
aws_cross_account_activity.yml
 
 
aws_defense_evasion.yml
aws_defense_evasion.yml
 
 
aws_iam_privilege_escalation.yml
aws_iam_privilege_escalation.yml
 
 
aws_identity_and_access_management_account_takeover.yml
aws_identity_and_access_management_account_takeover.yml
 
 
aws_network_acl_activity.yml
aws_network_acl_activity.yml
 
 
aws_security_hub_alerts.yml
aws_security_hub_alerts.yml
 
 
aws_user_monitoring.yml
aws_user_monitoring.yml
 
 
azorult.yml
azorult.yml
 
 
azure_active_directory_account_takeover.yml
azure_active_directory_account_takeover.yml
 
 
azure_active_directory_persistence.yml
azure_active_directory_persistence.yml
 
 
azure_active_directory_privilege_escalation.yml
azure_active_directory_privilege_escalation.yml
 
 
baron_samedit_cve_2021_3156.yml
baron_samedit_cve_2021_3156.yml
 
 
bishopfox_sliver_adversary_emulation_framework.yml
bishopfox_sliver_adversary_emulation_framework.yml
 
 
bits_jobs.yml
bits_jobs.yml
 
 
blackbyte_ransomware.yml
blackbyte_ransomware.yml
 
 
blacklotus_campaign.yml
blacklotus_campaign.yml
 
 
blackmatter_ransomware.yml
blackmatter_ransomware.yml
 
 
blacksuit_ransomware.yml
blacksuit_ransomware.yml
 
 
brand_monitoring.yml
brand_monitoring.yml
 
 
braodo_stealer.yml
braodo_stealer.yml
 
 
brute_ratel_c4.yml
brute_ratel_c4.yml
 
 
caddy_wiper.yml
caddy_wiper.yml
 
 
chaos_ransomware.yml
chaos_ransomware.yml
 
 
cisa_aa22_257a.yml
cisa_aa22_257a.yml
 
 
cisa_aa22_264a.yml
cisa_aa22_264a.yml
 
 
cisa_aa22_277a.yml
cisa_aa22_277a.yml
 
 
cisa_aa22_320a.yml
cisa_aa22_320a.yml
 
 
cisa_aa23_347a.yml
cisa_aa23_347a.yml
 
 
cisa_aa24_241a.yml
cisa_aa24_241a.yml
 
 
cisco_ios_xe_software_web_management_user_interface_vulnerability.yml
cisco_ios_xe_software_web_management_user_interface_vulnerability.yml
 
 
citrix_netscaler_adc_and_netscaler_gateway_cve_2023_4966.yml
citrix_netscaler_adc_and_netscaler_gateway_cve_2023_4966.yml
 
 
citrix_netscaler_adc_cve_2023_3519.yml
citrix_netscaler_adc_cve_2023_3519.yml
 
 
citrix_sharefile_rce_cve_2023_24489.yml
citrix_sharefile_rce_cve_2023_24489.yml
 
 
cleo_file_transfer_software.yml
cleo_file_transfer_software.yml
 
 
clop_ransomware.yml
clop_ransomware.yml
 
 
cloud_cryptomining.yml
cloud_cryptomining.yml
 
 
cloud_federated_credential_abuse.yml
cloud_federated_credential_abuse.yml
 
 
cobalt_strike.yml
cobalt_strike.yml
 
 
coldroot_macos_rat.yml
coldroot_macos_rat.yml
 
 
collection_and_staging.yml
collection_and_staging.yml
 
 
command_and_control.yml
command_and_control.yml
 
 
compromised_linux_host.yml
compromised_linux_host.yml
 
 
compromised_user_account.yml
compromised_user_account.yml
 
 
compromised_windows_host.yml
compromised_windows_host.yml
 
 
confluence_data_center_and_confluence_server_vulnerabilities.yml
confluence_data_center_and_confluence_server_vulnerabilities.yml
 
 
connectwise_screenconnect_vulnerabilities.yml
connectwise_screenconnect_vulnerabilities.yml
 
 
credential_dumping.yml
credential_dumping.yml
 
 
critical_alerts.yml
critical_alerts.yml
 
 
crushftp_vulnerabilities.yml
crushftp_vulnerabilities.yml
 
 
cve_2022_40684_fortinet_appliance_auth_bypass.yml
cve_2022_40684_fortinet_appliance_auth_bypass.yml
 
 
cve_2023_21716_word_rtf_heap_corruption.yml
cve_2023_21716_word_rtf_heap_corruption.yml
 
 
cve_2023_22515_privilege_escalation_vulnerability_confluence_data_center_and_server.yml
cve_2023_22515_privilege_escalation_vulnerability_confluence_data_center_and_server.yml
 
 
cve_2023_23397_outlook_elevation_of_privilege.yml
cve_2023_23397_outlook_elevation_of_privilege.yml
 
 
cve_2023_36884_office_and_windows_html_rce_vulnerability.yml
cve_2023_36884_office_and_windows_html_rce_vulnerability.yml
 
 
cyclops_blink.yml
cyclops_blink.yml
 
 
darkcrystal_rat.yml
darkcrystal_rat.yml
 
 
darkgate_malware.yml
darkgate_malware.yml
 
 
darkside_ransomware.yml
darkside_ransomware.yml
 
 
data_destruction.yml
data_destruction.yml
 
 
data_exfiltration.yml
data_exfiltration.yml
 
 
data_protection.yml
data_protection.yml
 
 
defense_evasion_or_unauthorized_access_via_sddl_tampering.yml
defense_evasion_or_unauthorized_access_via_sddl_tampering.yml
 
 
deobfuscate_decode_files_or_information.yml
deobfuscate_decode_files_or_information.yml
 
 
detect_zerologon_attack.yml
detect_zerologon_attack.yml
 
 
dev_sec_ops.yml
dev_sec_ops.yml
 
 
dhs_report_ta18_074a.yml
dhs_report_ta18_074a.yml
 
 
disabling_security_tools.yml
disabling_security_tools.yml
 
 
dns_amplification_attacks.yml
dns_amplification_attacks.yml
 
 
dns_hijacking.yml
dns_hijacking.yml
 
 
domain_trust_discovery.yml
domain_trust_discovery.yml
 
 
double_zero_destructor.yml
double_zero_destructor.yml
 
 
dynamic_dns.yml
dynamic_dns.yml
 
 
emotet_malware_dhs_report_ta18_201a.yml
emotet_malware_dhs_report_ta18_201a.yml
 
 
f5_authentication_bypass_with_tmui.yml
f5_authentication_bypass_with_tmui.yml
 
 
f5_big_ip_vulnerability_cve_2022_1388.yml
f5_big_ip_vulnerability_cve_2022_1388.yml
 
 
f5_tmui_rce_cve_2020_5902.yml
f5_tmui_rce_cve_2020_5902.yml
 
 
fin7.yml
fin7.yml
 
 
flax_typhoon.yml
flax_typhoon.yml
 
 
forest_blizzard.yml
forest_blizzard.yml
 
 
fortinet_fortinac_cve_2022_39952.yml
fortinet_fortinac_cve_2022_39952.yml
 
 
gcp_account_takeover.yml
gcp_account_takeover.yml