ICYMI: @SANSInstitute Webcast on #SolarWinds #IOCs #CTI #ThreatIntel @MalwareJake
That's a YES for APT #SolarWinds #CTI #ThreatIntel @SANSInstitute Webcast @MalwareJake
Sandboxing wouldn't have helped
High Confidence to evade detection in a high-security environment
#SolarWinds #CTI #ThreatIntel @SANSInstitute Webcast @MalwareJake
Huge Shoutout to @msftsecurity
@SANSInstitute Webcast @MalwareJake #SolarWinds
Known paths for SolarWinds Orion

#SolarWinds @SANSInstitute Webcast @MalwareJake
https://twitter.com/KyleHanslovan/status/1338506923642122243?s=20
https://gist.github.com/KyleHanslovan/0c8a491104cc55d6e4bd9bff7214a99e
Recommendations #SolarWinds @SANSInstitute Webcast with @MalwareJake #CTI #threatintelligence
If you have SolarWinds Orion assume you are compromised.
Recommendations 2
THREAT HUNT. You have to look backwards. They are a very capable group and most likely watching this webcast. @SANSInstitute webcast with @MalwareJake #SolarWinds #CTI #ThreatIntel
If you don't have SolarWinds Orion
Threat Model! Logging & Retention...
How would I detect this? Do I have logs? Do I have 9 months + of Logs???
@SANSInstitute Webcast with @MalwareJake #SolarWinds #threatintel #cti
This compromise would have been VERY difficult to detect. (ie don't feel bad...🤗 #hugops )

@SANSInstitute #SolarWinds webcast with @MalwareJake #cti #threatintel
TY to the FireEye team, SANS faculty/staff, and everyone in the community! <3
Sharing is Caring!

BURN IT DOWWWWNNNN! 🔥 (some personal interpretation...sorry not sorry)
Also, TY to Jake!!!!
@SANSInstitute webcast #SolarWinds with @MalwareJake #threatintel #cti @robtlee
https://twitter.com/Ch33r10/status/1338610615506579458?s=20
You can follow @Ch33r10.
Tip: mention @twtextapp on a Twitter thread with the keyword “unroll” to get a link to it.

Latest Threads Unrolled:
Those who think consciousness raising & movement building are disconnected, or even a distraction from electoral politics have not paid attention to the history of social change.In this thread, we
Read more
The 2020s will be known as the Remote Work decadeA few predictions of what is likely to emerge[ a thread ] Third Space: Office and Working from Home will
Read more
1/29: Have you ever had a concept explained to you that helps frame complex issues you’ve been wrestling with and opens your eyes to new possibilities? A concept that I
Read more
By continuing to use the site, you are consenting to the use of cookies as explained in our Cookie Policy to improve your experience.