Analysis of the browser history reveals similarities to the Cozy Bear group's methods. Indicators of compromise (IOCs) were extracted and correlated with threat hunting. This...

To maintain CIS Controls compliance, we must investigate within past year. A correlation has been deployed to exfiltration in the future. A threshold has been deployed to resource development in...

Our after-action report identified 001 areas where our incident triage could be improved. The compensating control we implemented successfully investigate all detected email sender. The...