Date Author Title

RISK DETECTION

2026-08-20Rob VandenBrinkUsing Microsoft Graph and Powershell - Risk Detection Commands

RISK

2026-08-20/a>Rob VandenBrinkUsing Microsoft Graph and Powershell - Risk Detection Commands
2024-08-07/a>Guy BruneauSame Scripts, Different Day: What My DShield Honeypot Taught Me About the Importance of Security Fundamentals [Guest Diary]
2022-08-17/a>Johannes UllrichA Quick VoIP Experiment
2020-05-14/a>Rob VandenBrinkPatch Tuesday Revisited - CVE-2020-1048 isn't as "Medium" as MS Would Have You Believe
2017-03-25/a>Russell EubanksDistraction as a Service
2017-03-11/a>Russell EubanksWhat's On Your Not To Do List?
2015-03-21/a>Russell EubanksHave you seen my personal information? It has been lost. Again.
2014-06-11/a>Daniel WesemannHelp your pilot fly!
2013-08-19/a>Guy Bruneau Business Risks and Cyber Attacks
2012-12-18/a>Dan GoldbergMitigating the impact of organizational change: a risk assessment
2012-11-23/a>Rob VandenBrinkRisk Assessment Reloaded (thanks PCI ! )
2012-11-23/a>Rob VandenBrinkWhat's in Your Change Control Form?
2012-10-17/a>Rob VandenBrinkCyber Security Awareness Month - Day 17 - A Standard for Risk Management - ISO 27005
2012-05-30/a>Rob VandenBrinkToo Big to Fail / Too Big to Learn?
2011-05-25/a>Lenny ZeltserMonitoring Social Media for Security References to Your Organization
2010-08-22/a>Manuel Humberto Santander PelaezSCADA: A big challenge for information security professionals
2010-06-10/a>Deborah HaleTop 5 Social Networking Media Risks
2010-04-04/a>Mari NicholsFinancial Management of Cyber Risk
2009-11-29/a>Patrick Nolan A Cloudy Weekend
2009-09-15/a>Johannes UllrichSANS releases new Cyber Security Risk Report
2009-04-19/a>Mari NicholsProviding Accurate Risk Assessments
2008-07-08/a>Swa FrantzenSecurity implications in HVAC equipment
2008-03-22/a>Koon Yaw TanMicrosoft Security Advisory Released (950627)

DETECTION

2026-08-20/a>Rob VandenBrinkUsing Microsoft Graph and Powershell - Risk Detection Commands
2026-03-28/a>Kenneth HartmanTeamPCP Supply Chain Campaign: Update 003 - Operational Tempo Shift as Campaign Enters Monetization Phase With No New Compromises in 48 Hours
2025-07-07/a>Xavier MertensWhat's My (File)Name?
2025-01-06/a>Xavier MertensMake Malware Happy
2024-02-20/a>Xavier MertensPython InfoStealer With Dynamic Sandbox Detection
2023-11-22/a>Guy BruneauCVE-2023-1389: A New Means to Expand Botnets
2023-10-31/a>Xavier MertensMultiple Layers of Anti-Sandboxing Techniques
2023-05-28/a>Guy BruneauWe Can no Longer Ignore the Cost of Cybersecurity
2023-02-04/a>Guy BruneauAssemblyline as a Malware Analysis Sandbox
2023-01-21/a>Guy BruneauDShield Sensor JSON Log to Elasticsearch
2023-01-08/a>Guy BruneauDShield Sensor JSON Log Analysis
2022-12-21/a>Guy BruneauDShield Sensor Setup in Azure
2022-09-26/a>Xavier MertensEasy Python Sandbox Detection
2021-12-28/a>Russ McReeLotL Classifier tests for shells, exfil, and miners
2021-04-02/a>Xavier MertensC2 Activity: Sandboxes or Real Victims?
2020-11-20/a>Xavier MertensMalicious Python Code and LittleSnitch Detection
2017-12-14/a>Russ McReeDetection Lab: Visibility & Introspection for Defenders
2017-06-17/a>Guy BruneauMapping Use Cases to Logs. Which Logs are the Most Important to Collect?
2016-08-29/a>Russ McReeRecommended Reading: Intrusion Detection Using Indicators of Compromise Based on Best Practices and Windows Event Logs
2015-02-10/a>Mark BaggettDetecting Mimikatz Use On Your Network
2014-09-27/a>Guy BruneauWhat has Bash and Heartbleed Taught Us?
2013-12-16/a>Tom WebbThe case of Minerd
2013-08-19/a>Johannes UllrichRunning Snort on ESXi using the Distributed Switch
2012-09-02/a>Lorna HutchesonDemonstrating the value of your Intrusion Detection Program and Analysts
2012-08-16/a>Johannes UllrichA Poor Man's DNS Anomaly Detection Script
2008-11-16/a>Maarten Van HorenbeeckDetection of Trojan control channels