APT-Hunter

APT-Hunter Windowsイベントログのための脅威ハンティング、パープルチームの視点で構築。 APT-HunterはWindowsイベントログのための脅威ハンティングツールです。事前定義された検出ルールとログ統計を使用して、大量のイベントの中に隠れたAPT活動を浮かび上がらせ、不審な挙動を発見するために必要な時間を短縮します。侵害評価において特に効果を発揮します。 結果はタイムラインとして出力され、Excel、Timeline...

ACE

自動収集とエンリッチメント Automated Collection and Enrichment ACE プラットフォームは、脅威ハンターがネットワーク内の多数のエンドポイントからデータを収集し、自動的にエンリッチメントするためのツールスイートです。データは、ターゲットにソフトウェアをインストールすることなく、各コンピュータでスクリプトを実行して収集されます。ACEはWindows、macOS、Linuxホストからの収集をサポートしています。...

Onapsis-Mandiant-CVE-2025-31324-Vuln-Compromise-Assessment

CVE-2025-31324 零日 SAP 漏洞与失陷评估工具 Onapsis 与 Mandiant 联合发布 Onapsis 与 Mandiant 合作发布了一款开源工具，帮助 SAP 客户识别与 CVE-2025-31324 和 CVE-2025-42999 相关的潜在失陷，这是 SAP NetWeaver Java 系统中的一个严重 0-day 漏洞。 该工具面向可访问潜在受影响环境的系统管理员，用于本地、白盒执行 。它支持漏洞评估、简单失陷评估和工件收集。 功能 该工具目前支持以下功能： 检测系统是否易受 CVE-2025-31324 和 CVE-2025-42999 攻击...

Missed incidents, persistent threats, and response gaps: Insights from compromise assessment projects

The following analysis presents the key findings from Kaspersky Compromise Assessment engagements performed in 2025. A compromise assessment is an independent, expert-driven service that examines whether a target network has been compromised. The service combines threat intelligence analysis...

Anatomy of a Cyber World Global Report 2026

Kaspersky Security Services provide a comprehensive cybersecurity ecosystem, taking enterprise threat protection to another level. Services like Kaspersky Managed Detection and Response and Compromise Assessment allow for timely detection of threats and cyberattacks. SOC Consulting provides a...

Risk reduction redefined: How compromise assessment helps strengthen cyberdefenses

Introduction Organizations often rely on a layered defense strategy, yet breaches still occur, slipping past multiple levels of protection unnoticed. This is where compromise assessment enters the game. The primary objective of these services is risk reduction. They help discover active...

MAL-2024-457 Malicious code in wlwz-2312-3108 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ed6225519b30910e9d338004733e5d96e63a80953ce35fd0838bbe7b5ad6ed38 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

What is threat hunting?

Many organizations are curious about the idea of threat hunting, but what does this really entail? What should you be hunting for? And what do you need to put in place to threat hunt properly? Four experienced security professionals from across Cisco recently sat down to discuss the basics of...

RSA Enterprise Compromise Assessment Tool (ECAT) 4.1.0.1 XXE Injection

SEC Consult Vulnerability Lab Security Advisory ======================================================================= title: XML External Entity Injection XXE product: RSA Enterprise Compromise Assessment Tool ECAT vulnerable version: 4.1.0.1 fixed version: 4.1.2.0 CVE Number: - impact: Medium...