lares Archives

Ben Goodman
May 11, 2022
No Comments

How I Compromised Your Complex Password from The Internet

How I Compromised Your Complex Password from The Internet https://www.lares.com/wp-content/uploads/2022/05/cloud_bg.png 1090 204 Ben Goodman Ben Goodman https://secure.gravatar.com/avatar/d364848daef7401bbcf6cc1992fe6571?s=96&d=mm&r=g May 11, 2022 May 11, 2022

How I Compromised Your Complex Password from The Internet One of an attacker’s first goals is to gain a foothold in a target environment. The role or permissions of an…

Anton Ovrutsky
January 6, 2022
No Comments

Kubernetes Hunting & Visibility

Kubernetes Hunting & Visibility https://www.lares.com/wp-content/uploads/2022/01/grid-ged8ced39f_1280.jpg 1280 905 Anton Ovrutsky Anton Ovrutsky https://secure.gravatar.com/avatar/ba20a53800565e497a2e9e70253bfe87?s=96&d=mm&r=g January 6, 2022 January 6, 2022

Intro Enterprise workloads are increasingly shifting to modern micro-service architectures. This shift can potentially mean that visibility, hunting, and defensive frameworks lag behind their traditional on-premises architectures and deployments. The…

Andrew Hay
January 3, 2022
No Comments

The Top 3 Security Program Tasks to Tackle in the New Year

The Top 3 Security Program Tasks to Tackle in the New Year https://www.lares.com/wp-content/uploads/2022/01/glenn-carstens-peters-RLw-UC03Gwc-unsplash-scaled-e1641230519651.jpg 1024 682 Andrew Hay Andrew Hay https://secure.gravatar.com/avatar/5fd5dfdab94084e661d5c80db05671d4?s=96&d=mm&r=g January 3, 2022 January 3, 2022

In the spirit of the New Year, it’s time to reflect on the past and make measurable resolutions for the future. Many people use this time to focus on personal…

Anton Ovrutsky
October 26, 2021
No Comments

Sysmon for Linux Test Drive

Sysmon for Linux Test Drive https://www.lares.com/wp-content/uploads/2021/10/adam-snow-qJIDBmk4l3Y-unsplash.jpeg 1090 727 Anton Ovrutsky Anton Ovrutsky https://secure.gravatar.com/avatar/ba20a53800565e497a2e9e70253bfe87?s=96&d=mm&r=g October 26, 2021 October 26, 2021

If you have been within planetary orbit of our Purple Team, you will know that we are huge fans of Sysmon. You can imagine our excitement when Microsoft announced that…

Andy Gill
July 2, 2021
No Comments

Detection and Mitigation Advice for PrintNightmare

Detection and Mitigation Advice for PrintNightmare https://www.lares.com/wp-content/uploads/2021/07/AdobeStock_221950214-scaled.jpeg 2048 1365 Andy Gill Andy Gill https://secure.gravatar.com/avatar/899ab1b66b1d68016a18f4f6f066d5d6?s=96&d=mm&r=g July 2, 2021 July 2, 2021

Introduction PrintNightmare(CVE-2021-34527) was released as a proof of concept this week on Github. This post highlights how the exploit PoCs released on Github work and how the specific vulnerability can…

Anton Ovrutsky
June 2, 2021
No Comments

Introducing Sysmon Config Pusher

Introducing Sysmon Config Pusher https://www.lares.com/wp-content/uploads/2021/05/sysmonconfig.jpg 1026 685 Anton Ovrutsky Anton Ovrutsky https://secure.gravatar.com/avatar/ba20a53800565e497a2e9e70253bfe87?s=96&d=mm&r=g June 2, 2021 June 2, 2021

Introducing Sysmon Config Pusher When providing various services to clients, including Purple, Blue, and Red Team engagements, the Lares team often recomends Sysmon to close detection gaps. Indeed, Sysmon is…

Andy Gill
April 28, 2021
No Comments

Social Profiling – OSINT for Red/Blue

Social Profiling – OSINT for Red/Blue https://www.lares.com/wp-content/uploads/2021/04/header.jpg 1280 822 Andy Gill Andy Gill https://secure.gravatar.com/avatar/899ab1b66b1d68016a18f4f6f066d5d6?s=96&d=mm&r=g April 28, 2021 April 30, 2021

One of the areas that I love when it comes to red/purple engagements is profiling organizations on LinkedIn and GitHub, looking for crucial information that can lead to more juicy…

Anton Ovrutsky
January 29, 2021
No Comments

Hunting in the Sysmon Call Trace

Hunting in the Sysmon Call Trace https://www.lares.com/wp-content/uploads/2021/01/chris-liverani-dBI_My696Rk-unsplash.jpg 1090 817 Anton Ovrutsky Anton Ovrutsky https://secure.gravatar.com/avatar/ba20a53800565e497a2e9e70253bfe87?s=96&d=mm&r=g January 29, 2021 January 29, 2021

Intro The Sysmon ProcessAccess event has been used in threat hunting and detection efforts in order to alert on techniques such as process injection and credential access. According to the…

Andrew Hay
November 30, 2020
No Comments

The Inaugural Lares Customer Summit

The Inaugural Lares Customer Summit https://www.lares.com/wp-content/uploads/2020/11/nesa-by-makers-IgUR1iX0mqM-unsplash-scaled.jpg 2048 1365 Andrew Hay Andrew Hay https://secure.gravatar.com/avatar/5fd5dfdab94084e661d5c80db05671d4?s=96&d=mm&r=g November 30, 2020 December 1, 2020

Lares® is providing an exclusive virtual online learning event on Wednesday, December 2nd 2020 starting at 9:30am EST and ending at 6:00pm EST for all of our loyal customers, contacts,…

Anton Ovrutsky
October 29, 2020
No Comments

Endpoint Hunting for UNC1878/KEGTAP TTPs

Endpoint Hunting for UNC1878/KEGTAP TTPs https://www.lares.com/wp-content/uploads/2020/10/jt-T-_SU1Gzqos-unsplash-scaled-e1603997027363.jpg 1024 683 Anton Ovrutsky Anton Ovrutsky https://secure.gravatar.com/avatar/ba20a53800565e497a2e9e70253bfe87?s=96&d=mm&r=g October 29, 2020 October 29, 2020

Intro On October 28th, the FireEye Threat Research team released the following threat report: https://www.fireeye.com/blog/threat-research/2020/10/kegtap-and-singlemalt-with-a-ransomware-chaser.html on the UNC1878 threat actor group and their KEGTAP/BEERBOT, SINGLEMALT/STILLBOT and WINEKEY/CORKBOT campaigns that deploy…

lares

How I Compromised Your Complex Password from The Internet

The Top 3 Security Program Tasks to Tackle in the New Year

Sysmon for Linux Test Drive

Detection and Mitigation Advice for PrintNightmare

Introducing Sysmon Config Pusher

Social Profiling – OSINT for Red/Blue

Hunting in the Sysmon Call Trace

The Inaugural Lares Customer Summit

Endpoint Hunting for UNC1878/KEGTAP TTPs

Call Us

Email Us

©2019 Lares, LLC | All rights reserved.

lares

How I Compromised Your Complex Password from The Internet

Kubernetes Hunting & Visibility

The Top 3 Security Program Tasks to Tackle in the New Year

Sysmon for Linux Test Drive

Detection and Mitigation Advice for PrintNightmare

Introducing Sysmon Config Pusher

Social Profiling – OSINT for Red/Blue

Hunting in the Sysmon Call Trace

The Inaugural Lares Customer Summit

Endpoint Hunting for UNC1878/KEGTAP TTPs

Privacy Preferences