Introducing BloodHound Scentry: Accelerate your APM practice. Learn More
blog category

Research & Tradecraft

image for Operational Guidance for Offensive User DPAPI Abuse

Research & Tradecraft

Operational Guidance for Offensive User DPAPI Abuse

By: Will Schroeder
Aug 22, 2018 • 20 min read
Read Post
image for 🧙‍ Merlin v0.6.0 Beta Released

Research & Tradecraft

🧙‍ Merlin v0.6.0 Beta Released

By: Russel Van Tuyl
Aug 7, 2018 • 4 min read
Read Post
image for 🧙‍ Merlin Adds Support for the QUIC protocol

Research & Tradecraft

🧙‍ Merlin Adds Support for the QUIC protocol

By: Russel Van Tuyl
Jul 31, 2018 • 5 min read
Read Post
image for GhostPack

Research & Tradecraft

GhostPack

By: Will Schroeder
Jul 24, 2018 • 15 min read
Read Post
image for The PowerView PowerUsage Series #5

Research & Tradecraft

The PowerView PowerUsage Series #5

By: Will Schroeder
Jul 17, 2018 • 3 min read
Read Post
image for The Tale of SettingContent-ms Files

Research & Tradecraft

The Tale of SettingContent-ms Files

By: Matt Nelson
Jun 11, 2018 • 10 min read
Read Post
image for HTTPS Payload and C2 Redirectors

Research & Tradecraft

HTTPS Payload and C2 Redirectors

By: Jeff Dimmock
Apr 11, 2018 • 12 min read
Read Post
image for Remote Hash Extraction On Demand Via Host Security Descriptor Modification

Research & Tradecraft

Remote Hash Extraction On Demand Via Host Security Descriptor Modification

By: Will Schroeder
Apr 10, 2018 • 16 min read
Read Post
image for Defenders Think in Graphs Too! Part 2

Research & Tradecraft

Defenders Think in Graphs Too! Part 2

By: Jared Atkinson
Apr 5, 2018 • 24 min read
Read Post