LOLBINs – NetwerkLABS

Threat Hunting DETECT Detection Engineering

8 LOLBins Every Threat Hunter Should Know

🕵️‍♂️ 8 Key LOLBins and Hunting Them with Elastic Security 🎯 Attackers love tools that are already installed, already signed and already trusted. This post walks through the eight Windows binaries that showed up most often…

Bharath Narayanasamy LOLBINs

ATTACK Detection Engineering DETECT

Living Off the Land (LOTL) Resources

🌿 Living Off the Land (LOTL) Resources 🗺️ 🎯 Attackers don't always bring their own tools. Sometimes the best weapon is already sitting on the machine. This guide walks through a well-organized collection of Living Off…

Bharath Narayanasamy LOLBINs, LOTL

DETECT Purple Teaming Detection Engineering

Misbehaving binaries: Hunting LOLBins

🕵️‍♂️ Detection Engineering: Catching jsc.exe Abuse (T1127) 🟣 Technique: Trusted Developer Utilities Proxy Execution (MITRE ATT&CK T1127)🔵 Tool abused: jsc.exe, the Microsoft JScript .NET compiler🟢 Stack: Atomic Red Team ➜ Sysmon ➜ Elastic Agent ➜ Elastic…

Bharath Narayanasamy LOLBINs