Shell to Signal

Categories

Every article is filed under the part of the attack-to-detection chain it covers. Most articles touch more than one.

Attack0 articles

How a technique works and exactly how it was run in the range.

No articles in this category yet.

Telemetry0 articles

What Sysmon, Windows, auditd and the firewall actually recorded.

No articles in this category yet.

Detection0 articles

SPL rules, tuning notes, and the variants that slipped through.

No articles in this category yet.

Range0 articles

Building and running the isolated lab that every test runs in.

No articles in this category yet.