Other
Investigation into PostalFurious: a Chinese-speaking phishing gang targeting Singapore and Australia
How to investigate phishing campaigns
How to investigate phishing campaigns
In this blog, we’ll go on a short journey of how we dissected a vague Managed Antivirus alert and offer some ideas and methods for security analysts.
Incident response is a lot like a choose your own adventure exercise. We cover the ground rules and talk about some incidents we’ve helped partners with.
The Group-IB Incident Response Team investigated an incident related to a DeadBolt attack and analyzed a DeadBolt ransomware sample
We unravel an investigation that details one way threat actors are able to gather cleartext passwords via NPPSPY.
A digital forensics investigation can be tedious. Fortunately, there are some efficient ways that you can still achieve success as an investigator.
This blog dives into triangulation as a guiding concept during investigations and reporting.
Learn about our investigation regarding unauthorized access to our QA and product testing environment.
Learn manual malware analysis techniques used by threat researchers. Explore static & dynamic analysis, reverse engineering tools, and real-world investigation methods.
Top 11 books on digital forensics, incident response, and malware analysis
Useful feature that can help forensic analysts and incident responders to reconstruct user activities.
Windows Prefetch files were introduced in Windows XP and since that time have helped digital forensics analysts and incident responders find evidence of execution.
All about WhatsApp forensics and the wealth of data extracted from a device through forensic analysis.
Igor Mikhailov gave his review of the best software and hardware solutions for computer forensics.
When it comes to breaches, it’s hard to find a silver lining when the end result is customer down time, data theft, or damaged reputations. For Managed Service Providers with tens to hundreds (or even thousands) of clients, the stakes are even higher. In this MSP Moment, we’re highlighting how NTConnections, a Washington DC based MSP, responded to a database outage which quickly escalated into an incident response effort.