Pivoting 101: from one observable to a defensible cluster
A professional, hypothesis-driven CTI pivoting guide covering evidence models, infrastructure and malware pivots, active-recon OPSEC, temporal analysis, clustering, co...
Tag
phishing
2 related publications.
UNIPARK Smishing: One Domain, a Much Larger Phishing Kit
A full CTI investigation into an UNIPARK smishing lure: domain rotation, exact-hash pivots, 126 related hosts, card and PIN collection, and an NKSC sinkhole.