Corelight
Detecting The Agent Tesla Malware Family
Learn how to detect Agent Tesla, which consistently trends at the top of Any.Run’s malware trends list
Featured
When the fuzzers come knocking on port 389: Hunting injection canaries in LDAP
Core protocols like LDAP are often left unmonitored. See how Zeek's ldap_search and DNS logs expose injection canaries and confirm whether attacks...