1 min read
Detect Exploitation Attempts on Linux Systems: Unpacking CVE-2024-1086
The recent identification of a significant exploit, CVE-2024-1086, which targets Linux systems for local privilege...
 |
 |
 |
 |
DFIR Lab
Latest Posts
2 min read
Proactive Forensics Against CVE-2024-3094
by Tim Thorne
Counter new and emerging threats with Binalyze AIR The discovery of CVE-2024-3094 within XZ Utils versions 5.6.0 and...
8 min read
Enhancing Threat Detection and Analysis during Investigations
by Tim Thorne
Harnessing AIR’s Automated compromise assessment and MITRE ATT&CK Integration At the risk of stating the obvious, in...
2 min read
Uncovering the IOCs: Ivanti Connect Secure VPN Exploitation
by Tim Thorne
In the ever-evolving landscape of cybersecurity, the recent exploitation of Ivanti Connect Secure VPN stands out as a...
4 min read
Dynamo Analyzer: When YARA isn’t enough!
by Tim Thorne
Enhanced Security Through Advanced Threat Detection In a landscape where rapid and precise threat detection across...
8 min read
Investigating a malware attack using Binalyze AIR’s Investigation Hub
by Tim Thorne
Navigating through a common incident use case. From the shadowed corners of cyberspace, a seemingly innocuous act such...
4 min read
Focus investigations with MITRE ATT&CK insights
by Ahmet Payaslioglu
Integrate automated evidence analysis and mapping to your investigations Understanding an attacker’s behavior and their...
6 min read
Automated Compromise Assessment with DRONE
by Tim Thorne
DRONE is AIR’s built-in automated compromise assessment technology which dramatically reduces the time required to...
4 min read
Offline collection with AIR
by Tim Thorne
The reality of modern incident response is that it’s not always possible to remotely connect with every one of your...
5 min read
The power of Auto Asset Tagging in DFIR
by Tim Thorne
When a breach occurs one of the first questions the investigating team leader will want answered is, ‘how many of our...
2 min read
The OneNote malware attack – A retrospective
by Djordje Lukic
At Binalyze we’re always actively monitoring for the latest exploits and attack vectors. We’re also in constant...
3 min read
MITRE ATT&CK scanning and mapping added to DRONE
by Ahmet Payaslioglu
The DFIR Lab team at Binalyze have their finger on the pulse of the cybersecurity ecosystem to ensure that our DRONE...
5 min read
Protect your chain of custody with content hashing and timestamping
by Tim Thorne
The awareness and practice of digital forensics has been with us for over 40 years and although often seen as a...
Get updates on DFIR
Drop your email to never miss any new update.