Wazuh detects Windows defense evasion techniques

Let's demystify the DCOM protocol together! 🪄 The DCOM protocol is increasingly used by attackers for lateral movement and privilege escalation on Windows. Understanding its weaknesses has become essential for effective defense. In our latest article, Kévin Tellier unveils the basic mechanisms of DCOM. The goal is to give you the keys to understanding the fundamentals of this powerful protocol. The article includes a practical network analysis, allowing you to see how remote processes are activated. https://lnkd.in/gCaNcKNw

A strong password is your first line of defense in the digital world. BBB has tips to help you create a secure password. https://lnkd.in/gmdGwfep

A strong password is your first line of defense in the digital world. BBB has tips to help you create a secure password. https://lnkd.in/gmdGwfep

The Varonis Threat Labs team has recently discovered ways that threat actors can steal and use your browser's cookies to bypass MFA. Read VTL's full story here: https://lnkd.in/efS5FrQD

Testing the abuse of the Windows Background Intelligent Transfer Service (BITS) to see what telemetry and SIEM artifacts are produced: MITRE ATT&CK ID: T1197 Tactics: Defense Evasion, Persistence BITS is designed for legitimate file transfers, but in the wrong hands it can be used for stealthy downloads and persistence. Observing how this technique behaves in practice highlights the importance of testing different adversary behaviors, including but not limited to: - Increase accuracy - Improve response speed - Enhance hunting https://lnkd.in/er6HuB9T

The Varonis Threat Labs team has recently discovered ways that threat actors can steal and use your browser's cookies to bypass MFA. Read VTL's full story here: https://lnkd.in/gJcyzWET

The Varonis Threat Labs team has recently discovered ways that threat actors can steal and use your browser's cookies to bypass MFA. Read VTL's full story here: https://lnkd.in/g5fw3EtM

The Varonis Threat Labs team has recently discovered ways that threat actors can steal and use your browser's cookies to bypass MFA. Read VTL's full story here: https://lnkd.in/esF5Jsg4

The Varonis Threat Labs team has recently discovered ways that threat actors can steal and use your browser's cookies to bypass MFA. Read VTL's full story here: https://lnkd.in/ehC5vVBc

The Varonis Threat Labs team has recently discovered ways that threat actors can steal and use your browser's cookies to bypass MFA. Read VTL's full story here: https://lnkd.in/exVBQ9Jm