Exfiltrate Data

nokoyawa, adfind, Exfiltrate Data, icedid, ransomware

From OneNote to RansomNote: An Ice Cold Intrusion

April 1, 2024

Exfiltrate Data ransomware rdp

Exfiltrate Data, ransomware, rdp, trigona

Buzzing on Christmas Eve: Trigona Ransomware in 3 Hours

January 29, 2024

adfind Attribution cobaltstrike

adfind, Attribution, cobaltstrike, Exfiltrate Data, FIN11, FlawedGrace, Lace Tempest, truebot

A Truly Graceful Wipe Out

June 12, 2023

cobaltstrike Exfiltrate Data ursnif

cobaltstrike, Exfiltrate Data, ursnif, wmiexec

Unwrapping Ursnifs Gifts

January 9, 2023

adfind cobaltstrike emotet

adfind, cobaltstrike, emotet, Exfiltrate Data, Kerberoast, ShareFinder

Dead or Alive? An Emotet Story

September 12, 2022

CVE-2021-44077 Exfiltrate Data exploit

CVE-2021-44077, Exfiltrate Data, exploit, Plink

Will the Real Msiexec Please Stand Up? Exploit Leads to Data Exfiltration

June 6, 2022

Access DFIR Labs Book a Demo

The DFIR Report provides in-depth, real-world intelligence based on observed intrusions, enabling security analysts and teams  to strengthen defenses, enhance detection,  and accelerate response.