Living off the Land

Cozy Bear’s Playbook for Turning Workstations Into Proxies, and How to Prevent It

Unfortunately, Cozy Bear is one of the most innovative and creative APT groups out there. Instead of just adding more tools, let's see how they bypass the ones we have and how to counter them.

Flax Typhoon: Analysis and Mitigation of an Advanced Persistent Threat

All of our security tools, practices, and controls are based on a series of assumptions. What if those assumptions are wrong? Do our tools still protect our systems?

Salt Typhoon APT (Earth Estries/UNC2286): A Deep Technical Dive into Lateral Movement and How to Stop It

Attackers quietly living off the land is one of the most devastating threats to our systems. How do attackers manage it without detection?

Deploy Keystrike in 20 Minutes

Try Keystrike in Your Environment for 30 Days