Uncovering Windows Events
https://posts.specterops.io/uncovering-windows-events-b4b9db7eac54

Medium

Uncovering Windows Events

Threat Intelligence ETW

Abusing Azure App Service Managed Identity Assignments

https://posts.specterops.io/abusing-azure-app-service-managed-identity-assignments-c3adefccff95

Medium

Abusing Azure App Service Managed Identity Assignments

Intro

Telemetry Layering

https://posts.specterops.io/telemetry-layering-89185b5348ba

Medium

Telemetry Layering

Introduction

At the Edge of Tier Zero: The Curious Case of the RODC
https://posts.specterops.io/at-the-edge-of-tier-zero-the-curious-case-of-the-rodc-ef5f1799ca06

Medium

At the Edge of Tier Zero: The Curious Case of the RODC

The read-only Domain Controller (RODC) is a solution that Microsoft introduced for physical locations that don’t have adequate security to host a Domain Controller but still require directory…

The Defender’s Guide to Windows Services (update)
https://posts.specterops.io/the-defenders-guide-to-windows-services-67c1711ecba7

Medium

The Defender’s Guide to Windows Services

It’s dangerous to find malicious services alone! Take this!

Passwordless Persistence and Privilege Escalation in Azure

https://posts.specterops.io/passwordless-persistence-and-privilege-escalation-in-azure-98a01310be3f

Medium

Passwordless Persistence and Privilege Escalation in Azure

Adversaries are always looking for stealthy means of maintaining long-term and stealthy persistence and privilege in a target environment…

Stalking inside of your Chromium Browser
https://posts.specterops.io/stalking-inside-of-your-chromium-browser-757848b67949

Medium

Stalking inside of your Chromium Browser

Okay, you got your favorite agent running on the target machine. You did a process listing, but nothing interesting popped out. You searched through every possible thing, even the trash bins to find…

Certificates and Pwnage and Patches, Oh My!
https://posts.specterops.io/certificates-and-pwnage-and-patches-oh-my-8ae0f4304c1d

Medium

Certificates and Pwnage and Patches, Oh My!

This post was written by Will Schroeder and Lee Christensen.

Uncovering Window Security Events
Part 1: TelemetrySource

https://posts.specterops.io/uncovering-window-security-events-ab72e1ec745c

Medium

Uncovering Windows Events

Part 1: TelemetrySource

The Defender’s Guide to the Windows Registry
https://posts.specterops.io/the-defenders-guide-to-the-windows-registry-febe241abc75

Medium

The Defender’s Guide to the Windows Registry

It’s dangerous to defend the registry alone! Take this!