Category: Threat Hunting

Articles tagged Threat Hunting

Subscribe
Filters
Detection and response for the actively exploited ProxyShell vulnerabilities
Security Labs
Threat Hunting

Detection and response for the actively exploited ProxyShell vulnerabilities

In the last week, Elastic Security has observed the exploitation of Microsoft Exchange vulnerabilities associated with ProxyShell. Review the post to find newly released details about this activity.

Daniel Stepanic
Adversary tradecraft 101: Hunting for persistence using Elastic Security (Part 1)
Security Labs
Threat Hunting

Adversary tradecraft 101: Hunting for persistence using Elastic Security (Part 1)

Learn how Elastic Endpoint Security and Elastic SIEM can be used to hunt for and detect malicious persistence techniques at scale.

David French
Collecting Cobalt Strike Beacons with the Elastic Stack
Security Labs
Threat Hunting

Collecting Cobalt Strike Beacons with the Elastic Stack

Part 1 - Processes and technology needed to extract Cobalt Strike implant beacons

Derek Ditch

Elastic Security Labs Newsletter

Follow Elastic Security Labs on Twitter