Posts
1.20.21
Sunburst Origin Story Part 2: A Forensic Examination of SUNBURST After Detection
The SolarWinds Orion SUNBURST supply chain attack has rocked the confidence of many security teams across industries. This blog reconstructs the timeline of the attack and provides insights on how to improve threat detection in the future.
Todd Kemmerling
1.6.21
SUNBURST: An Origin Story
Get a forensic examination of the Sunburst attack from ExtraHop and learn how the attack went undetected for so long.
Todd Kemmerling
12.18.20
Analyzing the SUNBURST SolarWinds Attack Campaign For Threat Intelligence
SolarWinds attack: ExtraHop is sharing 1700+ suspicious IP addresses (for threat hunters and data scientists) that were associated with the Sunburst backdoor attack.
Todd Kemmerling