Disrupting Contagious Interview

Platform-level threat intelligence on Contagious Interview, covering attacker infrastructure, tradecraft, and our efforts to disrupt the campaign. Includes 1,000+ IOCs.

Windows Dead Box (Disk Image) Forensics

My notes on finding and analyzing useful DFIR artifacts in a Windows disk image.

Reverse Engineering: Malware Analysis of Ursnif

Following an Ursnif sample from its first execution through unpacking and process injection.