Month: July 2017

Jul 28/2017 2 min read SIEM & EDR Historical Correlation by Ruslan Mikhalov Jul 27/2017 2 min read SIEM & EDR How to fix parsing issues in QRadar without technical support by Sergii Tyshchenko Jul 27/2017 1 min read CowerSnail – a three-megabyte backdoor by Eugene Tkachenko Jul 26/2017 2 min read SIEM & EDR Deliver TI feeds into ArcSight without false positive triggers by Aleks Bredikhin Jul 25/2017 2 min read SIEM & EDR Simple correlation scenario for Splunk using lookup tables by Alex Verbniak Jul 25/2017 1 min read The Trickbot Trojan moves into top gear by Eugene Tkachenko Jul 20/2017 2 min read Banking Trojan NukeBot: First Tests by Eugene Tkachenko Jul 18/2017 1 min read New phishing campaign using OSX/Dok by Eugene Tkachenko Jul 13/2017 1 min read RAT Adwind strikes again by Eugene Tkachenko Jul 11/2017 2 min read New Modifications of POS Malware by Eugene Tkachenko