By developing custom C#-based assemblies, attackers no longer need to rely on the tools present on the target system; they can instead write and deliver their own tools using a technique we call Bring Your Own Land (BYOL).
Read more...Threat Research Blog
FireEye posts blog entries under threat research to present and discuss cyber attacks and threat intelligence from a technical perspective. These blog posts cover everything from exploits and vulnerabilities, to advanced malware and targeted attacks.
A Totally Tubular Treatise on TRITON and TriStation
June 7, 2018 10:00 AM By Steve Miller, Evan ReeseIn December 2017, FireEye's Mandiant discussed an incident response involving the TRITON framework, and now FireEye’s Advanced Practices Team takes a deeper look at TRITON’s Python scripts.
Read more...Reverse Engineering the Analyst: Building Machine Learning Models for the SOC
June 5, 2018 12:30 PM By Matt Berninger, Awalin SopanWe describe machine learning based strategies to collect data, capture alert analysis, create a model, and build an efficacy workflow – all with the ultimate goal of automating alert triage and freeing up analyst time.
Read more...Remote Authentication GeoFeasibility Tool - GeoLogonalyzer
May 29, 2018 1:00 PM By David PanyWe are releasing GeoLogonalyzer to help organizations analyze logs to identify malicious logins based on GeoFeasibility.
Read more...Shining a Light on OAuth Abuse with PwnAuth
May 21, 2018 11:15 AM By Douglas BienstockPwnAuth is a web application framework that makes it easier for organizations to test their ability to detect and respond to OAuth abuse campaigns.
Read more...Sign up for email updates
Get information and insight on today's advanced threats from the leader in advanced threat prevention.
