Research & Tradecraft

Research & Tradecraft

The Curious Case of QueueUserAPC

Summary Due to the nature of the .NET compiled language runtime, user asynchronous procedure calls (APCs)...

By: Dwight Hohnstein

Jul 1, 2019 • 9 min read

Research & Tradecraft

Diving into the Security Analyst’s Mind

By: Jared Atkinson

May 30, 2019 • 11 min read

Research & Tradecraft

Designing Peer-To-Peer Command and Control

By: Ryan Cobb

May 1, 2019 • 19 min read

Research & Tradecraft

Lateral Movement — SCM and DLL Hijacking Primer

Summary As Defenders increase in maturity, the more they are able to leverage built-in utilities against...

By: Dwight Hohnstein

Apr 18, 2019 • 11 min read

Research & Tradecraft

Revisiting TTPs: TimeStomper

In this post, I will cover how to manipulate file times on the Windows OS. Manipulating...

By: Justin Bui

Apr 16, 2019 • 8 min read

Research & Tradecraft

Merlin v0.7.0 Release & Roll-up

By: Russel Van Tuyl

Apr 12, 2019 • 10 min read

Research & Tradecraft

Folder Actions for Persistence on macOS

By: Cody Thomas

Apr 8, 2019 • 9 min read

Research & Tradecraft

Go Phishing (and Reporting)

By: Christopher Maddalena

Apr 1, 2019 • 11 min read

Research & Tradecraft

Perfect is the Enemy

By: Robby Winchester

Mar 26, 2019 • 7 min read