Securing Your Velociraptor Deployment
Our team are huge fans of Velociraptor. It's an incredibly powerful tool, for both DFIR and...
Securing Your Velociraptor Deployment
Mapping Adversary Emulation Plans
The Center for Threat-Informed Defense at MITRE recently released their Adversary Emulation Plans...
Integrating Thinkst Canaries with TheHive
We've been big fans of the Thinkst platform for a while now. We may have mentioned them a time or...
OpenSOC @ DEF CON 28 Safe Mode
Some of you may remember our last event, Camp COVID. That was the biggest event we had ever run....
Recon Provides Range Training for Military Cyber Protection Teams During COVID-19 Lockdown
Recently, our team was asked to provide training for an operational military Cyber Protection Team...
Visualizing Geo IP Information using Python
As part of the #OpenSOC event Recon InfoSec recently conducted, we wanted to visualize where all of...
Camp COVID - A Recap
Let me first say, on behalf of the Recon team, we cannot thank the community enough for joining us...
OpenSOC: Camp COVID
Hello OpenSOC fam! First and most importantly, we hope that you and yours are healthy and happy in...
Analysis Of Exploitation: CVE-2020-10189
The Recon incident response team recently worked an intrusion case involving a ManageEngine Desktop...
Automating Detection Coverage Analysis with ATT&CK Navigator
Staying on-top of the latest adversarial methodologies means quickly adjusting to new TTPs and...