kostastsale

Back to Analysts

Reports by kostastsale

adfind Attribution cobaltstrike
A Truly Graceful Wipe Out
June 12, 2023
Read More
Year in Review
2022 Year in Review
March 6, 2023
Read More
adfind cobaltstrike emotet
Dead or Alive? An Emotet Story
September 12, 2022
Read More
coinminer exploit
SELECT XMRig FROM SQLServer
July 11, 2022
Read More
cobaltstrike gootloader lazagne
SEO Poisoning - A Gootloader Story
May 9, 2022
Read More
exploit Fast Reverse Proxy PHOSPHORUS
PHOSPHORUS Automates Initial Access Using ProxyShell
March 21, 2022
Read More
Uncategorized
2021 Year In Review
March 7, 2022
Read More
adfind cobaltstrike Qbot
Qbot and Zerologon Lead To Full Domain Compromise
February 21, 2022
Read More
cobaltstrike
Cobalt Strike, a Defender’s Guide - Part 2
January 24, 2022
Read More
adfind bazar cobaltstrike
CONTInuing the Bazar Ransomware Story
November 29, 2021
Read More
cobaltstrike exploit hancitor
From Zero to Domain Admin
November 1, 2021
Read More
mountlocker xinglocker adfind
IcedID to XingLocker Ransomware in 24 hours
October 18, 2021
Read More

The DFIR Report provides in-depth, real-world intelligence based on observed intrusions, enabling security analysts and teams 
to strengthen defenses, enhance detection, 
and accelerate response.

© 2025 The DFIR Report. All Rights Reserved. | Privacy Policy