bourbonsec

3 ms·

1. 1.▲
   by bourbonsec 9mo ago

   According to CISA's joint advisory (AA24-038A), here's specifically how they stayed inside for 5 years: Valid credentials and stolen accounts. They repeatedly dumped NTDS.dit (the Active Directory database) from domain controllers
2. 2.▲
   America's Cyber Defense Agency Is Burning Down and Nobody's Coming to Put It Out(threathunter.ai)

   170 points by bourbonsec 9mo ago|177 comments
3. 3.▲
   Threathunter.ai Creates Thxai.ai and Then Announces Revolutionary Consolidation(twitter.com)

   2 points by bourbonsec 2y ago|0 comments