Riccardo Ancarani - Red Team Adventures · Scour

Attacking an EDR - Part 3

riccardoancarani.github.io·117w

Attacking an EDR - Part 2

riccardoancarani.github.io·125w

Attacking an EDR - Part 1

riccardoancarani.github.io·131w

Mockingjay - What is old is new again

riccardoancarani.github.io·131w

Random Notes on Task Scheduler Lateral Movement

riccardoancarani.github.io·262w

Following Donut Crumbs

riccardoancarani.github.io·278w

Hunting for Skeleton Key Implants

riccardoancarani.github.io·287w

Hunting for Impacket

riccardoancarani.github.io·299w

Attacking Insecure ELK Deployments

riccardoancarani.github.io·307w

Extending BloodHound

riccardoancarani.github.io·313w

Hunting for SCShell Usage Using ELK

riccardoancarani.github.io·320w

Streamlining BloodHound Analytics

riccardoancarani.github.io·321w

Not All Paths are Created Equal

riccardoancarani.github.io·326w

Hunting for Anomalous Usage of MSBuild and Covenant

riccardoancarani.github.io·329w

Hunting for Suspicious LDAP Activity with SilkETW and Yara

riccardoancarani.github.io·329w

Lateral Movement

riccardoancarani.github.io·331w

Modern C2 Infrastructure with Terraform, DigitalOcean, Covenant and Cloudflare

riccardoancarani.github.io·332w