12:08

2023 Top Routinely Exploited Vulnerabilities | Threat SnapShot

06:27

Going Rogue: APT29 Using Rogue RDP | Threat SnapShot

10:02

FIN7 is Dead, Long Live FIN7 | Threat SnapShot

31:54

Turning Novel Threats into Detections Easily with SnapAttack

08:33

Latest APT41 Campaign: Detection Opportunities | ThreatSnapShot

08:06

GrimResource: Arbitrary Code Execution via Malicious MSC file | Threat SnapShot

09:48

Microsoft Recall: Detecting Abuse | Threat SnapShot

08:27

Understanding CVE-2024-32002: Git Remote Code Execution | Threat SnapShot

05:18

Hunting CVE-2024-30051: Desktop Window Manager Privilege Escalation | Threat SnapShot

09:35

ESXi Ransomware: Trends, Logging, and Detection | Threat SnapShot

14:13

Operationalizing the 2024 M-Trends Report | Threat SnapShot

08:38

Hunting the XZ Backdoor (CVE-2024-3094) | Threat SnapShot

11:29

Hunting Exploitation of SmartScreen and Streaming Service CVEs | Threat SnapShot

16:25

ScreenConnect Compromise: Hackers Are Watching, Are You Ready? | Threat SnapShot

16:39

Click with Caution: The Moniker Link Vulnerability (CVE-2024-21413) Exposed | Threat Snapshot

15:25

Untangling Scattered Spider's Web: Hunting for RMM Tools | Threat SnapShot

10:47

Unzipped! The Hidden Dangers Behind .Zip Domains | Threat SnapShot

14:57

It's Raining Shells! Recent CVEs in SharePoint, Splunk, and Confluence, Oh My! | Threat SnapShot

20:06

Playing Cat and Mouse with the Attacker: Frequent Item Set Mining in the Registry (CAMLIS 2022)

10:58

Just Windows Things: Recent XAML PrivEsc and WinSXS DLL Search Order Hijacking | Threat SnapShot

12:15

Hunting for Attacks Using Recent Apache Struts and OfBiz Vulnerabilities | Threat SnapShot

07:49

Abusing MS Access Linked Tables for NTLM Relay Attacks | Threat SnapShot

59:08

Streamline SIEM Migrations and Optimize Your SOC with SnapAttack and Google Cloud

13:49

Turning Intelligence into Action: Scaling the Pyramid of Pain with MATI + SnapAttack | mWISE 2023

33:31

Continuous Validation: Trusting Your Detections Even When They Don’t Fire | SnapAttack at mWISE 2023

06:19

SmartScreen Bypass with Malicious Links (CVE-2023-36025) | Threat SnapShot

07:24

Analyzing a Cerber Ransomware Attack via Confluence RCE Exploit (CVE-2023-22518) | Threat SnapShot

07:08

Detecting Apache ActiveMQ Exploitation Activity (CVE-2023-46604) | Threat SnapShot

16:40

Prioritize, Mobilize, Validate, and Enhance Threat Detection: SnapAttack Interview with TAG Cyber

10:41

Hunting for Confluence (CVE-2023-22515) and Looney Tunables (CVE-2023-4911) | Threat SnapShot

11:45

Hunting for TeamCity CI/CD (CVE-2023-42793) and Cisco IOS (CVE-2023-20198) | Threat SnapShot

21:12

Adversary's Arsenal - T1053 - Scheduled Tasks

11:33

Detecting Malicious MinIO Updates and PPLBlade LSASS Dumping | Threat SnapShot

47:06

Leveling Up Your Detection Engineering: SnapAttack and Mandiant at mWISE 2022

14:30

Hunting for WinRAR 0-Day (CVE-2023-38831), Chinese Actor FLAX TYPHOON, and Qakbot | Threat SnapShot

12:19

Detecting BgInfo and cmdl32 LOLBINs and a Look at R7's 2023 Mid-Year Threat Review | Threat SnapShot

10:25

Uncovering Stealthy Network Tunnels from CloudflareD | Threat SnapShot

09:19

Rooting out Juicy, Sweet, Efs, and Rotten Potatos from your Windows Environment

09:29

WREAKING HAVOC: Hunting for Havoc C2 and Exorcising Demons from your Network | Threat SnapShot

14:51

Detection Opportunities from a Five Day BlackByte Campaign

09:23

Blackout / Chinese Actor Storm-0558 Accessing E-mails with Forged Tokens | Threat SnapShot

10:35

Squashing SCATTERED SPIDER's Attacks in the Cloud | Threat SnapShot

12:57

Detecting Pyramid and Other Tools Hiding in Your SIEM / EDR Blindspots | Threat SnapShot

11:10

Hunting for Mustang Panda's Malicious USB Drives | Threat SnapShot

11:04

Detecting Fake 0-day POCs and Common Enumeration Techniques | Threat SnapShot

13:05

Detecting MOVEit Exploitation Activity (CVE-2023-34362) | Threat SnapShot

05:09

Achieve Proactive Cybersecurity with SnapAttack: Tackling Turla

08:32

Hunting for GobRAT: Golang Malware Targeting Linux Routers

14:24

Living off the Land: Hunting TTPs from CACTUS Ransomware and Volt Typhoon | Threat SnapShot

12:01

Detecting Credential Theft and Lateral Movement via Kerberoasting

41:57

Hunting Russia FSB's Most Sophisticated "Snake" Malware | Threat SnapShot

08:39

Hunting for PaperCut RCE Exploitation (CVE-2023-27350)

13:52

Detecting the AuKill EDR Killer Malware | Threat SnapShot

13:38

Purple Teaming with the Mandiant M-Trends 2023 Report

02:20

Proactive Threat Management at Scale | What is SnapAttack?

11:05

QueueJumper, Kerberos LPE, CFLS 0-day, and more! | Threat SnapShot

13:02

I Smell a RAT - Hunting for AsyncRAT Infections | Threat SnapShot

07:38

Hunting for Supply Chain Compromise: 3CX Desktop App backdoored by Lazarus Group | Threat SnapShot

08:37

Hunting for Local Privilege Escalation via CVE-2023-21768 | Threat SnapShot

14:13

Russian Malicious Outlook Calendar Invites Targeting Ukraine (CVE-2023-23397) | Threat SnapShot