BloodHound 8.0 update adds BloodHound OpenGraph — expanding attack path visibility beyond AD and Entra ID. Learn More
blog category

Research & Tradecraft

image for Lateral Movement using Excel.Application and DCOM

Research & Tradecraft

Lateral Movement using Excel.Application and DCOM

By: Matt Nelson
Sep 11, 2017 • 6 min read
Read Post
image for Hunting With Active Directory Replication Metadata

Research & Tradecraft

Hunting With Active Directory Replication Metadata

By: Will Schroeder
Sep 6, 2017 • 15 min read
Read Post
image for Randomized Malleable C2 Profiles Made Easy

Research & Tradecraft

Randomized Malleable C2 Profiles Made Easy

By: Jeff Dimmock
Aug 29, 2017 • 6 min read
Read Post
image for UMCI vs Internet Explorer: Exploring CVE-2017–8625

Research & Tradecraft

UMCI vs Internet Explorer: Exploring CVE-2017–8625

By: Matt Nelson
Aug 24, 2017 • 3 min read
Read Post
image for The PowerView PowerUsage Series #2

Research & Tradecraft

The PowerView PowerUsage Series #2

By: Will Schroeder
Aug 16, 2017 • 2 min read
Read Post
image for Attack Infrastructure Log Aggregation and Monitoring

Research & Tradecraft

Attack Infrastructure Log Aggregation and Monitoring

By: Jeff Dimmock
Aug 7, 2017 • 9 min read
Read Post
image for WSH Injection: A Case Study

Research & Tradecraft

WSH Injection: A Case Study

By: Matt Nelson
Aug 3, 2017 • 4 min read
Read Post
image for Offensive Encrypted Data Storage (DPAPI edition)

Research & Tradecraft

Offensive Encrypted Data Storage (DPAPI edition)

By: Will Schroeder
Jul 31, 2017 • 5 min read
Read Post
image for Bypassing AMSI via COM Server Hijacking

Research & Tradecraft

Bypassing AMSI via COM Server Hijacking

By: Matt Nelson
Jul 19, 2017 • 6 min read
Read Post