Posts
1.20.21
Sunburst Origin Story Part 2: A Forensic Examination of SUNBURST After Detection
The SolarWinds Orion SUNBURST supply chain attack has rocked the confidence of many security teams across industries. This blog reconstructs the timeline of the attack and provides insights on how to improve threat detection in the future.
Todd Kemmerling
1.6.21
SUNBURST: An Origin Story
The SolarWinds Orion SUNBURST supply chain attack has rocked the confidence of many security teams across industries. This blog examines the domains used in order to better understand how the attack went undetected for so long.
Todd Kemmerling
12.18.20
Analyzing the SUNBURST SolarWinds Attack Campaign For Threat Intelligence
SolarWinds attack: ExtraHop is sharing 1700+ suspicious IP addresses (for threat hunters and data scientists) that were associated with the Sunburst backdoor attack.
Todd Kemmerling