These articles are for technical teams, showing some of our recent findings and research. Each of these articles provides a detailed breakdown of something we have either used in the wild or have worked on in an effort to create new TTPs and contribute to the cyber community.
Featured Research
Threat Hunting 101
January 13, 2025·
threat hunting, CrowdStrike
First of all, it is necessary to define what threat hunting actually means in the cybersecurity world. In today’s ever-changing cybersecurity landscape, threat hunting is a proactive approach to identify and neutralise malicious activities that may bypass traditional defences. Unlike traditional reactive security strategies, which focus on responding to known threats and alerts, threat hunting adopts a proactive stance, actively searching for signs of potential...
Read Full Article →
January 5, 2025
SecOps
Navigating the Maze of Security Alerts: First Steps into Effective Triage
Have you ever encountered a security alert in your environment and wondered: ‘What is this? How should we investigate it?’” In this article, we’ll aim to simplify the process of triaging an...
April 9, 2023
aws
Protecting Assets Behind CloudFront
One of the most common ways of bypassing a Web Application Firewall (WAF) involves finding out the backend servers’ address and connecting to it directly. An IP can be leaked in many...
March 3, 2023
Apache
Building a Research Environment for Log4j
Given its widespread adoption rate and the challenge enterprises face with tracking down where it is being used, Log4j would likely continue to be a relevant attack vector for quite a long...
March 3, 2023
Analysing and Reproducing PoC for Log4j 2.15.0
Shortly after the release of the patch for CVE-2021-44228, bundled by Apache as Log4j 2.15.0, researchers already found ways of bypassing the fix: CVE-2021-45046. In particular, for less than a couple of...
February 5, 2023
Logging Raw HTTP Requests in Python
Quite often, during our red team engagements, we find ourselves in a situation where we need to carry out web research and exploitation over several chained proxies. To that extend, to be...
Understand how your company will respond to trained and skilled offensive actors.
We understand real-world threat actors’ methodology, and our manual testing of your assets will help you develop and mature robust cybersecurity.