• Unpacking Black Basta: A Practical Look at the Newest Ransomware’s Attack Actions and Mitigations
• Real-Time Analysis of Qakbot: A Detailed Look into the World’s Most Persevering Trojan

Webinar Library

• How to Detect Pass-the-Hash Attacks Blog Series
• Come meet Randy in Orlando at Microsoft Ignite at Quest's Booth #1818
• Detecting Pass-the-Hash with Honeypots
• Catch Malware Hiding in WMI with Sysmon
• For of all sad words of tongue or pen, the saddest are these: 'We weren’t logging’
• Experimenting with Windows Security: Controls for Enforcing Policies
• Sysmon Event IDs 1, 6, 7 Report All the Binary Code Executing on Your Network
• Yet Another Ransomware Can That Can be Immediately Detected with Process Tracking on Workstations
• Cracking AD Passwords with NTDSXtract, Dsusers.py and John the Ripper
• Cracking local windows passwords with Mimikatz, LSA dump and Hashcat