Resources | Threat Hunting and Intelligence (4)

We’ll focus on a critical technique that is widely utilized by various threat actors, from sophisticated nation-state adversaries to opportunistic cybercriminals.

Threat Hunting and Intelligence

Understanding T1543 to Create or Modify System Processes

Oct 18, 2024 3 min read

Managed Security Operations

7 Reasons Why RADICL Loves CrowdStrike

Jul 24, 2024 5 min read

RADICL recently observed a sophisticated phishing campaign designed to steal O365 login credentials.

Threat Hunting and Intelligence

Sharing is Caring – Novel SharePoint Phishing Campaign

Jul 17, 2024 3 min read

The Pyramid of Pain is a conceptual model created by David Bianco in 2013 that helps detection engineers and analysts understand how to best use threat intelligence to halt threat actors.

Threat Hunting and Intelligence

Pyramid of Pain: You Can't Tie Your Shoes That Way

Jul 02, 2024 3 min read

We identify ways hackers leverage everyday websites and tools to build a picture of a target organization they can use to gain initial access.

Threat Hunting and Intelligence

Big Brother Hacker - Attack Reconnaissance

Jun 05, 2024 5 min read

MITRE ATLAS is a globally accessible, living knowledge base of adversary tactics and techniques against Al-enabled systems based on real-world attack observations and realistic demonstrations from Al-red teams and security groups.

Threat Hunting and Intelligence

Navigating Skynet with MITRE ATLAS

May 20, 2024 2 min read

Load More Stories

Beyond contracting officers and primes, your SPRS score is on file with the federal government. If a cyber incident occurs and DoD investigators are examining your compliance history, your SPRS submission is part of the record.

Regulatory Compliance

What is SPRS? How Defense Contractors Are Scored on Cybersecurity

May 26, 2026 8 min read

Regulatory Compliance

What is DFARS 252.204-7012? A Guide for Defense Contractors

May 14, 2026 8 min read

Regulatory Compliance

CMMC Compliance Deadline 2026: Key Dates That Affect Your DoD Contract

Apr 13, 2026 6 min read

Threat Hunting and Intelligence

Cross-Platform Rust Loader Delivers Modified Sliver Implant via Cloud Storage Abuse

Jul 20, 2026 9 min read

Threat Hunting and Intelligence

One Email, Five Layers: Anatomy of an AiTM Phishing Kill Chain

Jul 16, 2026 7 min read

PowerShell script used deliberate attempts to bypass CrowdStrike EDR using native BitLocker encryption and vssadmin shadow copy deletion.

Threat Hunting and Intelligence

Ransomware Gang or IT Admin?

Jun 24, 2026 3 min read

Signal & Noise is your weekly brief on the latest in cybersecurity. Here's Volume 2.

Industry Analysis

Signal & Noise, Volume 2

Jul 17, 2026 4 min read

DoW paused Phase II of CMMC, but the need for advanced cybersecurity is as vital as ever.

Industry Analysis

CMMC Phase II is Paused. The Cyber Threat Is Not.

Jul 14, 2026 4 min read

Industry Analysis

Signal & Noise, Volume 1

Jul 10, 2026 5 min read

Incident Response

What Are Incident Response Solutions?

Apr 13, 2026 7 min read

On the evening of 7/25/24, CrowdStrike pushed a content update which caused Windows systems to crash and/or enter a reboot loop, rendering the systems unusable.

Incident Response

A Day in the Life: Our vSOC Responds to the CrowdStrike Incident

Jul 24, 2024 2 min read

Ransoming an espionage victim carries several advantages that can make it an ideal move for nation-state threat actors.

Incident Response

I Spy a Ransomware Attack

Jul 16, 2024 2 min read

There was a joint advisory this week (AA26-097A) warning of active exploitation of internet-facing Programmable Logic Controllers (PLCs).

Attack Surface and Vulnerability Management

Iranian APT Actors Are Targeting Your PLCs — Here's What to Do

Apr 09, 2026 2 min read

Attack Surface and Vulnerability Management

CMMC Enclave: What It Is, When It Works, and How to Build the Right Compliance Boundary

Mar 26, 2026 11 min read

Attack Surface and Vulnerability Management

EP 9 - Palo Alto Networks' Daryan Dehghanpisheh on Vulnerability Management

Jan 23, 2026 1 min read

Security Operations & vSOC

SOC Cost in 2026: What It Costs to Build vs Outsource a 24/7 Security Operations Center

Jul 13, 2026 7 min read

Security Operations & vSOC

SOC Automation: AI-Driven Security Operations Centers Explained

Jul 09, 2026 7 min read

Managed Security Operations

SOC Alert Triage in Cybersecurity: Guide to Incident Response

Jul 07, 2026 6 min read

DIB Innovators

EP 57 - Cyber Resilience at the Crossroads

Apr 10, 2025 2 min read

DIB Innovators

EP 1 - Micro-Ant's Charles McCarrick on Innovation and Opportunity in the DIB

Dec 08, 2023 2 min read

DIB Innovators

EP 111 — Vision Miner's Rob Lent On 9 Years Of Bootstrapping Accessible High-Temp 3D Printing

Jul 17, 2026 1 min read

DIB Innovators

EP 110 — AdlerAerospace’s Wilhelm Meya On The Broken Math Of Drone Defense

Jul 14, 2026 1 min read

DIB Innovators

EP 109— Skyways' Isaac Roberts On Mass-Producing Autonomous Cargo Drones For Contested Logistics

Jul 09, 2026 1 min read

Understanding T1543 to Create or Modify System Processes

7 Reasons Why RADICL Loves CrowdStrike

Sharing is Caring – Novel SharePoint Phishing Campaign

Pyramid of Pain: You Can't Tie Your Shoes That Way

Big Brother Hacker - Attack Reconnaissance

Navigating Skynet with MITRE ATLAS

THE DIB CYBERSECURITY MATURITY REPORT 2025 EDITION

Regulatory Compliance

What is SPRS? How Defense Contractors Are Scored on Cybersecurity

What is DFARS 252.204-7012? A Guide for Defense Contractors

CMMC Compliance Deadline 2026: Key Dates That Affect Your DoD Contract

Threat Hunting & Intelligence

Cross-Platform Rust Loader Delivers Modified Sliver Implant via Cloud Storage Abuse

One Email, Five Layers: Anatomy of an AiTM Phishing Kill Chain

Ransomware Gang or IT Admin?

Industry Analysis

Signal & Noise, Volume 2

CMMC Phase II is Paused. The Cyber Threat Is Not.

Signal & Noise, Volume 1

Incident Response

What Are Incident Response Solutions?

A Day in the Life: Our vSOC Responds to the CrowdStrike Incident

I Spy a Ransomware Attack

Attack Surface & Vulnerability Management

Iranian APT Actors Are Targeting Your PLCs — Here's What to Do

CMMC Enclave: What It Is, When It Works, and How to Build the Right Compliance Boundary

EP 9 - Palo Alto Networks' Daryan Dehghanpisheh on Vulnerability Management

Security Operations & vSOC

SOC Cost in 2026: What It Costs to Build vs Outsource a 24/7 Security Operations Center

SOC Automation: AI-Driven Security Operations Centers Explained

SOC Alert Triage in Cybersecurity: Guide to Incident Response

Operational Resilience

EP 57 - Cyber Resilience at the Crossroads

EP 1 - Micro-Ant's Charles McCarrick on Innovation and Opportunity in the DIB

The DIB Innovators

EP 111 — Vision Miner's Rob Lent On 9 Years Of Bootstrapping Accessible High-Temp 3D Printing

EP 110 — AdlerAerospace’s Wilhelm Meya On The Broken Math Of Drone Defense

EP 109— Skyways' Isaac Roberts On Mass-Producing Autonomous Cargo Drones For Contested Logistics