Research
Published work
Advisories, vulnerability research, and technical write-ups from our independent research. Available over RSS.
Red Team OPSEC: High-Stealth Tradecraft and Controls
A kill-chain-ordered taxonomy of 127 malware techniques rated by detection resistance, mapped to the defensive controls that degrade each OPSEC tier, and an argument that the lowest-OPSEC technique achieving the objective is usually the correct one in a red team engagement.
From a network foothold to the data center through one backup server
An internal engagement that began with an ordinary user account and ended with administrative control of the virtualization platform and an offline copy of the domain, through a Veeam Backup and Replication server that was two years behind on a critical patch.
External attack paths into Tier 0 infrastructure
The same few ordinary gaps compose into a route from an internet-facing service to Tier 0: the identity, virtualization and backup systems that decide whether an incident is recoverable.