Threat Hunting//
Threat Hunting Case Study: FileFix
FileFix bypasses Mark of the Web (MotW) protections by hijacking the Windows File Explorer address bar. Here is how to hunt for it.
In this post, SpiderFoot founder and CEO Steve Micallef talks about the importance of leveraging a broad spectrum of OSINT for managing your attack surface:
…when determining the attackable surface of an organization, we must not only care about externally exposed assets, but also externally exposed information relevant to that organization. Such information (OSINT) can be used by attackers to mount social engineering attacks, spear-phishing attacks, gain access to critical assets sitting outside the traditional network perimeter or simply get more efficient about what assets they should seek out once inside.
Read the post in full here.
