splunk Archives

Anton Ovrutsky
April 2, 2021
No Comments

Emails and Malicious Macros – What Can Go Wrong?

Emails and Malicious Macros – What Can Go Wrong? https://www.lares.com/wp-content/uploads/2021/04/joshua-aragon-BMnhuwFYr7w-unsplash-scaled.jpg 2048 1365 Anton Ovrutsky Anton Ovrutsky https://secure.gravatar.com/avatar/ba20a53800565e497a2e9e70253bfe87?s=96&d=mm&r=g April 2, 2021 April 2, 2021

Intro A few months ago, we published a blog post that examined the telemetry available through Office 365, including email visibility. If you read the blog and thought to yourself,…

Anton Ovrutsky
November 23, 2020
No Comments

Taking a Look at Office 365 Logs

Taking a Look at Office 365 Logs https://www.lares.com/wp-content/uploads/2020/11/oskars-sylwan-Xjg8t1KO26o-unsplash-jpg.jpg 1090 727 Anton Ovrutsky Anton Ovrutsky https://secure.gravatar.com/avatar/ba20a53800565e497a2e9e70253bfe87?s=96&d=mm&r=g November 23, 2020 November 24, 2020

Intro Office 365 enables productivity and collaboration among teams and business units. As it’s utilization grows in popularity, productivity tools become increasingly attractive targets to attackers. So often attack chains…

Anton Ovrutsky
October 5, 2020
No Comments

WFH Lateral Movement TTPs

WFH Lateral Movement TTPs https://www.lares.com/wp-content/uploads/2020/10/hybrid-8iN-YTPHAEw-unsplash.jpg 800 533 Anton Ovrutsky Anton Ovrutsky https://secure.gravatar.com/avatar/ba20a53800565e497a2e9e70253bfe87?s=96&d=mm&r=g October 5, 2020 October 6, 2020

WFH Lateral Movement TTPs With the increase of remote working arrangements due to the ongoing pandemic, corporate endpoints are now located far beyond the standard corporate perimeter. This presents attackers…

Anton Ovrutsky
July 14, 2020
No Comments

Hunt Fast: Splunk and tstats

Hunt Fast: Splunk and tstats https://www.lares.com/wp-content/uploads/2020/07/fabio-oyXis2kALVg-unsplash.jpg 1090 818 Anton Ovrutsky Anton Ovrutsky https://secure.gravatar.com/avatar/ba20a53800565e497a2e9e70253bfe87?s=96&d=mm&r=g July 14, 2020 July 14, 2020

Intro One of the aspects of defending enterprises that humbles me the most is scale. Enabling different logging and sending those logs to some kind of centralized SIEM device sounds…

splunk

Emails and Malicious Macros – What Can Go Wrong?

Taking a Look at Office 365 Logs

WFH Lateral Movement TTPs

Hunt Fast: Splunk and tstats

Call Us

Email Us

©2019 Lares, LLC | All rights reserved.

splunk

Emails and Malicious Macros – What Can Go Wrong?

Taking a Look at Office 365 Logs

WFH Lateral Movement TTPs

Hunt Fast: Splunk and tstats

Privacy Preferences