The DFIR Report
thedfirreport.bsky.social
Real Intrusions by Real Attackers, the Truth Behind the Intrusion. https://thedfirreport.com
👤 Joined on 14 August 2023
1258
Followers
0
Following
181
Total Posts
📜 Kullanıcı Geçmişi
- 14 Ağu 2023, 12:15
🎉 Bluesky'e katıldı - İlk kullanıcı adı:
@thedfirreport.bsky.social - 10 Kas 2023, 01:39
🔄 Profil bilgileri güncellendi
🚫 Blokladığı Kullanıcılar
❤️ Beğendiği Gönderiler
Extracting VNC screenshots and keylog data from #Latrodectus 🕷️ BackConnect netresec.com?b=25Cfd08
Show Post
RDP! 😖 @thedfirreport.bsky.social 'Initial access was via a password spray attack against an ***exposed RDP server*** targeting numerous accounts over a four-hour period.' thedfirreport.com/2025/06/30/h... #cybersecurity #ransomware @gate15.bsky.social
Show Post
There are two primary users of the Atlassian suite.... Large software teams with an appetite for overhead++, and threat actors looking to get shells... ...sometimes both at the same time! Another excellent writeup by @thedfirreport.bsky.social 🔥 thedfirreport.com/2025/05/19/a... #DFIR
Show Post
thedfirreport.com/2025/05/19/a... It was fun working on this Report with @pcsc0ut.bsky.social && 0xtornado. I hope my #threathunting friends will find it helpful. We came up with a new detection for Impacket tools in this investigation
Show Post
In my Azure class on Day 2 I explain why network security is such a powerful way to prevent and detect attacks. Read those slides. Then read this and figure out all the ways you could spot this attack after the attacker disabled Windows Defender. thedfirreport.com/2025/01/27/c...
Show Post