SpecterOps Blog

Research & Tradecraft

To Infinity and Beyond!

Increasing our understanding of EDR capabilities in the face of impossible odds. Introduction I recently had a discussion with our…

Research & Tradecraft

Behavior vs. Execution Modality

On Detection: Tactical to Functional Part 12 Introduction At Shmoocon 2015, Will Schroeder (Harmj0y) gave a talk titled “I Hunt…

Research & Tradecraft

Part 12: Behavior vs. Execution Modality

Industry Insights

Phish Sticks; Hate the Smell, Love the Taste

Phishing School I’ll Make You Great at Phishing or Your Money Back I am already making you better at phishing. Right…

Industry Insights

Plenty of Phish in the Sea

Phishing School How to Find the Right Phishing Targets A weapon is useless unless you have something to aim it at.…

Research & Tradecraft

Manual LDAP Querying: Part 2

This post is a follow-up to my previous post on manual LDAP querying. I would highly recommend reading that post…

Research & Tradecraft

ADCS Attack Paths in BloodHound — Part 2

ADCS Attack Paths in BloodHound — Part 2 In Part 1 of this series, we explained how we incorporated Active Directory Certificate Services…

Research & Tradecraft

Nemesis 1.0.0

In August of last year, @tifkin_, @0xdab0, and I released Nemesis, our offensive data enrichment platform. After lots of feedback,…

Research & Tradecraft

LSA Whisperer

Thank you to SpecterOps for supporting this research, to Elad for helping draft this blog, and to Sarah, Daniel, and…