Research & Tradecraft

Research & Tradecraft

Covenant v0.6

Aug 4, 2020 • 5 min read

Research & Tradecraft

Persistent AWS access with role chain juggling

Jul 16, 2020 • 7 min read

Research & Tradecraft

Requesting Azure AD Request Tokens on Azure-AD-joined Machines for Browser SSO

RequestAADRefreshToken is a tool that returns OAuth 2.0 refresh tokens for an Azure-AD-authenticated Windows user (i.e. the machine is joined to...

Jul 14, 2020 • 8 min read

Research & Tradecraft

Covenant v0.5

Jun 4, 2020 • 6 min read

Research & Tradecraft

Detection in Depth

May 8, 2020 • 17 min read

Research & Tradecraft

Through the Looking Glass

Mar 11, 2020 • 9 min read

Research & Tradecraft

Abusing Slack for Offensive Operations

Mar 4, 2020 • 9 min read

Research & Tradecraft

Detection Spectrum

Feb 21, 2020 • 11 min read

Research & Tradecraft

Capability Abstraction

Feb 6, 2020 • 15 min read