Offensive Lateral Movement

Lateral movement is the process of moving from one compromised host to another. Penetration testers and red…

Understanding and Defending Against Access Token Theft: Finding Alternatives to winlogon.exe

Threat Hunting with Jupyter Notebooks— Part 1: Your First Notebook 📓

Lateral Movement — SCM and Dll Hijacking Primer

Using the Service Control Manager and built-in…

Introducing Ghostwriter

The SpecterOps project management and reporting engine

Threat Hunting with Jupyter Notebooks — Part 3: Querying Elasticsearch via Apache Spark ✨

Introducing the Funnel of Fidelity

At SpecterOps we work with companies to build robust detection and response programs. One of the…

Putting Sysmon v9.0 AND/OR Grouping Logic to the Test