Threat Hunting//
Threat Hunting Case Study: FileFix
FileFix bypasses Mark of the Web (MotW) protections by hijacking the Windows File Explorer address bar. Here is how to hunt for it.
Component not found for block type:
video-embedAustralia holds regular attack simulation exercises to test the cyber resilience of the financial services sector. These exercises, called Cyber Operational Resilience Intelligence-led Exercises (CORIE), are designed to be as realistic as possible, drawing on targeted cyber threat intelligence to create attack scenarios. By using tactics, techniques and procedures (TTPs) that match active threat groups, organizations can learn their potential weak points and improve. In this Studio 471, two experts from the cybersecurity consultancy CyberCX discuss how these exercises are developed and executed.
Participants:
Diego Silva, Technical Principal, Cyber Threat Intelligence, CyberCX
Willem Mouton, Technical Director of Adversary Simulation, CyberCX
Jeremy Kirk, Executive Editor, Cyber Threat Intelligence, Intel 471
