https://www.sentinelone.com/labs/about/ 2026-10-14T16:30:58.475Z https://www.sentinelone.com/labs/contact/ 2026-10-14T16:29:51.763Z https://www.sentinelone.com/labs/ 2026-09-29T20:42:13.908Z https://www.sentinelone.com/labs/dont-call-us-well-call-your-apis-tradertraitor-backdoors-resurface-on-victim-with-no-crypto-ties/ 2026-09-21T16:03:52.000Z https://www.sentinelone.com/labs/agents-at-large-tracing-illicit-openai-agent-activity-on-hugging-face/ 2026-09-17T12:34:37.000Z https://www.sentinelone.com/labs/deep-insight-into-fin7-malware-chain-from-office-macro-malware-to-lightweight-js-loader/ 2026-09-16T15:48:31.000Z https://www.sentinelone.com/labs/trickbot-update-brief-analysis-of-a-recent-trickbot-payload/ 2026-09-03T14:04:58.000Z https://www.sentinelone.com/labs/the-model-is-the-malware-what-four-agentic-intrusions-tell-defenders/ 2026-08-13T13:00:40.000Z https://www.sentinelone.com/labs/a-guide-to-ghidra-scripting-development-for-malware-researchers/ 2026-08-08T05:40:10.000Z https://www.sentinelone.com/labs/introducing-sentinelones-ghidra-plugin-for-virustotal/ 2026-08-08T05:39:36.000Z https://www.sentinelone.com/labs/resourceful-macos-malware-hides-in-named-fork/ 2026-08-08T05:23:31.000Z https://www.sentinelone.com/labs/evasive-maneuvers-massive-icedid-campaign-aims-for-stealth-with-benign-macros/ 2026-08-08T05:18:16.000Z https://www.sentinelone.com/labs/socgholish-diversifies-and-expands-its-malware-staging-infrastructure-to-counter-defenders/ 2026-08-08T03:58:41.000Z https://www.sentinelone.com/labs/macos-gaslight-rust-backdoor-turns-prompt-injection-on-the-analyst-not-the-sandbox/ 2026-08-04T16:52:33.000Z https://www.sentinelone.com/labs/inside-the-llm-understanding-ai-the-mechanics-of-modern-attacks/ 2026-07-28T07:56:04.000Z https://www.sentinelone.com/labs/freedrain-unmasked-uncovering-an-industrial-scale-crypto-theft-network/ 2026-07-28T07:51:29.000Z https://www.sentinelone.com/labs/exploring-the-virustotal-dataset-an-analysts-guide-to-effective-threat-research/ 2026-07-28T07:50:22.000Z https://www.sentinelone.com/labs/cyber-soft-power-chinas-continental-takeover/ 2026-07-28T07:44:27.000Z https://www.sentinelone.com/labs/chinas-cyber-revenge-why-the-prc-fails-to-back-its-claims-of-western-espionage/ 2026-07-28T07:37:39.000Z https://www.sentinelone.com/labs/a-glimpse-into-future-scarcruft-campaigns-attackers-gather-strategic-intelligence-and-target-cybersecurity-professionals/ 2026-07-28T07:32:01.000Z https://www.sentinelone.com/labs/frontier-models-tackle-autonomous-long-horizon-malware-analysis/ 2026-07-22T18:32:14.000Z https://www.sentinelone.com/labs/fast16-mystery-shadowbrokers-reference-reveals-high-precision-software-sabotage-5-years-before-stuxnet/ 2026-07-22T18:05:52.000Z https://www.sentinelone.com/labs/writing-malware-configuration-extractors-for-isfb-ursnif/ 2026-07-22T06:46:44.000Z https://www.sentinelone.com/labs/cve-2021-21551-hundreds-of-millions-of-dell-computers-at-risk-due-to-multiple-bios-driver-privilege-escalation-flaws/ 2026-07-22T06:45:19.000Z https://www.sentinelone.com/labs/an-inside-look-at-how-ryuk-evolved-its-encryption-and-evasion-techniques/ 2026-07-22T06:44:20.000Z https://www.sentinelone.com/labs/deep-dive-into-trickbot-executor-module-mexec-hidden-anchor-bot-nexus-operations/ 2026-07-22T06:43:07.000Z https://www.sentinelone.com/labs/meet-nemty-successor-nefilim-nephilim-ransomware/ 2026-07-22T06:41:52.000Z https://www.sentinelone.com/labs/hermetic-wiper-ukraine-under-attack/ 2026-07-22T06:40:44.000Z https://www.sentinelone.com/labs/chamelgang-attacking-critical-infrastructure-with-ransomware/ 2026-07-22T06:39:31.000Z https://www.sentinelone.com/labs/follow-the-smoke-china-nexus-threat-actors-hammer-at-the-doors-of-top-tier-targets/ 2026-07-22T06:38:22.000Z https://www.sentinelone.com/labs/chinese-entanglement-dll-hijacking-in-the-asian-gambling-sector/ 2026-07-22T06:36:21.000Z https://www.sentinelone.com/labs/revealing-the-trick-a-deep-dive-into-trickloader-obfuscation/ 2026-07-22T06:33:39.000Z https://www.sentinelone.com/labs/bloated-binaries-how-to-detect-and-analyze-large-macos-malware-files/ 2026-07-22T06:32:42.000Z https://www.sentinelone.com/labs/labscon25-replay-how-to-bug-hotel-rooms-v2-0/ 2026-07-22T06:31:24.000Z https://www.sentinelone.com/labs/labscon25-replay-are-your-chinese-cameras-spying-for-you-or-on-you/ 2026-07-22T06:30:04.000Z https://www.sentinelone.com/labs/iran-war-cyber-threat-landscape-a-midyear-assessment-on-what-matters/ 2026-07-21T13:00:21.000Z https://www.sentinelone.com/labs/wading-through-muddy-waters-recent-activity-of-an-iranian-state-sponsored-threat-actor/ 2026-07-21T12:11:13.000Z https://www.sentinelone.com/labs/another-brick-in-the-wall-uncovering-smm-vulnerabilities-in-hp-firmware/ 2026-07-21T10:58:08.000Z https://www.sentinelone.com/labs/cve-2021-3437-hp-omen-gaming-hub-privilege-escalation-bug-hits-millions-of-gaming-devices/ 2026-07-20T08:43:24.000Z https://www.sentinelone.com/labs/malvirt-net-virtualization-thrives-in-malvertising-attacks/ 2026-07-20T08:42:27.000Z https://www.sentinelone.com/labs/phishing-on-x-high-profile-account-targeting-campaign-returns/ 2026-07-20T08:40:57.000Z https://www.sentinelone.com/labs/building-an-adversarial-consensus-engine-multi-agent-llms-for-automated-malware-analysis/ 2026-07-20T08:35:58.000Z https://www.sentinelone.com/labs/writing-malware-traffic-decrypters-for-isfb-ursnif/ 2026-07-17T08:44:42.000Z https://www.sentinelone.com/labs/maze-ransomware-update-extorting-and-exposing-victims/ 2026-07-17T08:25:16.000Z https://www.sentinelone.com/labs/how-adload-macos-malware-continues-to-adapt-evade/ 2026-07-17T08:23:12.000Z https://www.sentinelone.com/labs/gootkit-banking-trojan-part-3-retrieving-the-final-payload/ 2026-07-17T08:21:25.000Z https://www.sentinelone.com/labs/gootkit-banking-trojan-part-2-persistence-other-capabilities/ 2026-07-17T08:15:33.000Z https://www.sentinelone.com/labs/detecting-macos-gmera-malware-through-behavioral-inspection/ 2026-07-17T08:08:53.000Z https://www.sentinelone.com/labs/cybercrime-groups-behind-banload-banking-malware-implement-new-techniques/ 2026-07-17T06:43:39.000Z https://www.sentinelone.com/labs/20-common-tools-techniques-used-by-macos-threat-actors-malware/ 2026-07-17T06:26:56.000Z https://www.sentinelone.com/labs/moving-from-common-sense-knowledge-about-uefi-to-actually-dumping-uefi-firmware/ 2026-07-17T06:02:35.000Z https://www.sentinelone.com/labs/threat-intel-cyber-attacks-leveraging-the-covid-19-coronavirus-pandemic/ 2026-07-15T08:49:47.000Z https://www.sentinelone.com/labs/nokoyawa-ransomware-new-karma-nemty-variant-wears-thin-disguise/ 2026-07-15T08:42:55.000Z https://www.sentinelone.com/labs/the-israel-hamas-war-cyber-domain-state-sponsored-activity-of-interest/ 2026-07-15T08:23:36.000Z https://www.sentinelone.com/labs/decoding-the-past-securing-the-future-enhancing-cyber-defense-with-historical-threat-intelligence/ 2026-07-15T08:16:14.000Z https://www.sentinelone.com/labs/black-basta-ransomware-attacks-deploy-custom-edr-evasion-tools-tied-to-fin7-threat-actor/ 2026-07-15T08:14:01.000Z https://www.sentinelone.com/labs/one-target-china-india-espionage-converge-on-pakistani-law-enforcement/ 2026-07-09T12:55:00.000Z https://www.sentinelone.com/labs/building-a-custom-malware-analysis-lab-environment/ 2026-07-02T13:04:20.000Z https://www.sentinelone.com/labs/context-engineering-compaction-agent-memory-for-automated-malware-analysis/ 2026-07-02T13:00:02.000Z https://www.sentinelone.com/labs/labscon-replay-the-cyber-arm-of-chinas-soft-power-reshaping-a-continent/ 2026-06-25T00:20:07.000Z https://www.sentinelone.com/labs/apt32-multi-stage-macos-trojan-innovates-on-crimeware-scripting-technique/ 2026-06-25T00:15:39.000Z https://www.sentinelone.com/labs/lazarus-apt-targets-mac-users-with-poisoned-word-document/ 2026-06-25T00:14:56.000Z https://www.sentinelone.com/labs/labscon25-replay-keynote-steps-to-an-ecology-of-cyber/ 2026-06-11T13:00:59.000Z https://www.sentinelone.com/labs/labscon25-replay-gamaredon-x-turla-unveiling-a-2025-espionage-alliance-targeting-ukraine/ 2026-06-02T13:00:58.000Z https://www.sentinelone.com/labs/labscon25-replay-breach-alpha-trading-on-cyber-fallout/ 2026-05-14T13:00:44.000Z https://www.sentinelone.com/labs/cloud-worm-evicts-teampcp-and-steals-credentials-at-scale/ 2026-05-07T10:00:17.000Z https://www.sentinelone.com/labs/labscon25-replay-please-connect-to-the-foreign-entity-to-enhance-your-user-experience/ 2026-05-06T13:00:29.000Z https://www.sentinelone.com/labs/labscon25-replay-hacktivism-and-war-a-clarifying-discussion/ 2026-04-23T16:58:15.000Z https://www.sentinelone.com/labs/labscon25-replay-your-apps-may-be-gone-but-the-hackers-made-9-billion-and-theyre-still-here/ 2026-04-23T16:55:23.000Z https://www.sentinelone.com/labs/llms-ransomware-an-operational-accelerator-not-a-revolution/ 2026-03-16T15:46:48.000Z https://www.sentinelone.com/labs/labscon25-replay-simulation-meets-reality-how-chinas-cyber-ranges-fuel-cyber-operations/ 2026-03-11T13:14:00.000Z https://www.sentinelone.com/labs/labscon25-replay-llm-enabled-malware-in-the-wild/ 2026-03-11T13:13:28.000Z https://www.sentinelone.com/labs/from-narrative-to-knowledge-graph-llm-driven-information-extraction-in-cyber-threat-intelligence/ 2026-03-09T10:27:58.000Z https://www.sentinelone.com/labs/prompts-as-code-embedded-keys-the-hunt-for-llm-enabled-malware/ 2026-03-06T10:53:28.000Z https://www.sentinelone.com/labs/llms-in-the-soc-part-1-why-benchmarks-fail-security-operations-teams/ 2026-03-06T10:51:14.000Z https://www.sentinelone.com/labs/silent-brothers-ollama-hosts-form-anonymous-ai-network-beyond-platform-guardrails/ 2026-03-06T10:50:35.000Z https://www.sentinelone.com/labs/greywares-anatomy-the-potentially-unwanted-are-upping-their-game/ 2026-01-27T06:21:07.000Z https://www.sentinelone.com/labs/caught-in-the-cloud-how-a-monero-cryptominer-exploits-docker-containers/ 2026-01-27T06:20:49.000Z https://www.sentinelone.com/labs/malicious-apprentice-how-two-hackers-went-from-cisco-academy-to-cisco-cves/ 2025-12-10T16:55:08.000Z https://www.sentinelone.com/labs/threat-hunting-power-up-enhance-campaign-discovery-with-validin-and-synapse/ 2025-11-19T11:46:00.000Z https://www.sentinelone.com/labs/labscon-replay-a-look-at-chinese-vulnerability-discovery-and-disclosure/ 2025-11-18T09:06:44.000Z https://www.sentinelone.com/labs/kryptina-raas-from-unsellable-cast-off-to-enterprise-ransomware/ 2025-11-11T07:55:30.000Z https://www.sentinelone.com/labs/labscon25-replay-auto-poking-the-bear-analytical-tradecraft-in-the-ai-age/ 2025-10-31T16:32:16.000Z https://www.sentinelone.com/labs/phantomcaptcha-multi-stage-websocket-rat-targets-ukraine-in-single-day-spearphishing-operation/ 2025-10-22T10:47:35.000Z https://www.sentinelone.com/labs/aoqin-dragon-newly-discovered-chinese-linked-apt-has-been-quietly-spying-on-organizations-for-10-years/ 2025-10-09T16:46:01.000Z https://www.sentinelone.com/labs/contagious-interview-threat-actors-scout-cyber-intel-platforms-reveal-plans-and-ops/ 2025-09-04T10:30:13.000Z https://www.sentinelone.com/labs/smart-contract-scams-ethereum-drainers-pose-as-trading-bots-to-steal-crypto/ 2025-08-05T10:00:12.000Z https://www.sentinelone.com/labs/ghost-in-the-zip-new-pxa-stealer-and-its-telegram-powered-ecosystem/ 2025-08-04T10:00:23.000Z https://www.sentinelone.com/labs/chinas-covert-capabilities-silk-spun-from-hafnium/ 2025-07-30T10:00:31.000Z https://www.sentinelone.com/labs/macos-nimdoor-dprk-threat-actors-target-web3-and-crypto-platforms-with-nim-based-malware/ 2025-07-02T14:50:27.000Z https://www.sentinelone.com/labs/meteorexpress-mysterious-wiper-paralyzes-iranian-trains-with-epic-troll/ 2025-06-18T14:24:31.000Z https://www.sentinelone.com/labs/labscon-replay-the-mystery-of-metador/ 2025-06-17T07:58:45.000Z https://www.sentinelone.com/labs/labscon-replay-malshare-10-years-of-running-a-public-malware-repository/ 2025-06-17T07:58:31.000Z https://www.sentinelone.com/labs/labscon-replay-inkysquid-the-missing-arsenal/ 2025-06-17T07:57:02.000Z https://www.sentinelone.com/labs/labscon-replay-does-this-look-infected-2-apt41/ 2025-06-17T07:55:37.000Z https://www.sentinelone.com/labs/labscon-replay-demystifying-threats-to-satellite-communications-in-critical-infrastructure/ 2025-06-17T07:55:04.000Z https://www.sentinelone.com/labs/labscon-replay-breaking-firmware-trust-from-the-other-side-exploiting-early-boot-phases-pre-efi/ 2025-06-17T07:54:16.000Z https://www.sentinelone.com/labs/are-digital-technologies-eroding-the-principle-of-distinction-in-war/ 2025-06-17T07:53:09.000Z https://www.sentinelone.com/labs/labscon-replay-blasting-event-driven-cornucopia-wmi-based-user-space-attacks-blind-siems-and-edrs/ 2025-06-17T07:51:53.000Z https://www.sentinelone.com/labs/new-macos-malware-xcodespy-targets-xcode-developers-with-eggshell-backdoor/ 2025-06-10T10:52:50.000Z https://www.sentinelone.com/labs/alphagolang-a-step-by-step-go-malware-reversing-methodology-for-ida-pro/ 2025-06-05T07:41:24.000Z https://www.sentinelone.com/labs/crimeware-trends-ransomware-developers-turn-to-intermittent-encryption-to-evade-detection/ 2025-05-06T21:34:52.000Z https://www.sentinelone.com/labs/top-tier-target-what-it-takes-to-defend-a-cybersecurity-company-from-todays-adversaries/ 2025-04-28T09:55:19.000Z https://www.sentinelone.com/labs/the-mystery-of-metador-an-unattributed-threat-hiding-in-telcos-isps-and-universities/ 2025-04-11T15:16:35.000Z https://www.sentinelone.com/labs/wip19-espionage-new-chinese-apt-targets-it-service-providers-and-telcos-with-signed-malware/ 2025-04-11T15:11:02.000Z https://www.sentinelone.com/labs/noname05716-the-pro-russian-hacktivist-group-targeting-nato/ 2025-04-11T15:08:35.000Z https://www.sentinelone.com/labs/dragonspark-attacks-evade-detection-with-sparkrat-and-golang-source-code-interpretation/ 2025-04-11T15:08:09.000Z https://www.sentinelone.com/labs/cl0p-ransomware-targets-linux-systems-with-flawed-encryption-decryptor-available/ 2025-04-11T15:06:26.000Z https://www.sentinelone.com/labs/wip26-espionage-threat-actors-abuse-cloud-infrastructure-in-targeted-telco-attacks/ 2025-04-11T15:05:33.000Z https://www.sentinelone.com/labs/icefire-ransomware-returns-now-targeting-linux-enterprise-networks/ 2025-04-11T15:05:01.000Z https://www.sentinelone.com/labs/winter-vivern-uncovering-a-wave-of-global-espionage/ 2025-04-11T15:04:22.000Z https://www.sentinelone.com/labs/operation-tainted-love-chinese-apts-target-telcos-in-new-attacks/ 2025-04-11T15:03:48.000Z https://www.sentinelone.com/labs/the-life-and-times-of-sysinternals-how-one-developer-changed-the-face-of-malware-analysis/ 2025-04-11T15:03:02.000Z https://www.sentinelone.com/labs/dissecting-alienfox-the-cloud-spammers-swiss-army-knife/ 2025-04-11T15:02:25.000Z https://www.sentinelone.com/labs/transparent-tribe-apt36-pakistan-aligned-threat-actor-expands-interest-in-indian-education-sector/ 2025-04-11T15:01:44.000Z https://www.sentinelone.com/labs/kimsuky-evolves-reconnaissance-capabilities-in-new-global-campaign/ 2025-04-11T15:01:05.000Z https://www.sentinelone.com/labs/hypervisor-ransomware-multiple-threat-actor-groups-hop-on-leaked-babuk-code-to-build-esxi-lockers/ 2025-04-11T14:59:51.000Z https://www.sentinelone.com/labs/kimsuky-ongoing-campaign-using-tailored-reconnaissance-toolkit/ 2025-04-11T14:58:56.000Z https://www.sentinelone.com/labs/operation-magalenha-long-running-campaign-pursues-portuguese-credentials-and-pii/ 2025-04-11T14:58:29.000Z https://www.sentinelone.com/labs/kimsuky-new-social-engineering-campaign-aims-to-steal-credentials-and-gather-strategic-intelligence/ 2025-04-11T14:58:02.000Z https://www.sentinelone.com/labs/cloudy-with-a-chance-of-credentials-aws-targeting-cred-stealer-expands-to-azure-gcp/ 2025-04-11T14:57:18.000Z https://www.sentinelone.com/labs/comrades-in-arms-north-korea-compromises-sanctioned-russian-missile-engineering-company/ 2025-04-11T14:56:48.000Z https://www.sentinelone.com/labs/capratube-transparent-tribes-caprarat-mimics-youtube-to-hijack-android-phones/ 2025-04-11T14:55:26.000Z https://www.sentinelone.com/labs/sandman-apt-a-mystery-group-targeting-telcos-with-a-luajit-toolkit/ 2025-04-11T14:54:08.000Z https://www.sentinelone.com/labs/arid-viper-apts-nest-of-spyc23-malware-continues-to-target-android-devices/ 2025-04-11T14:53:15.000Z https://www.sentinelone.com/labs/predator-ai-chatgpt-powered-infostealer-takes-aim-at-cloud-platforms/ 2025-04-11T14:52:42.000Z https://www.sentinelone.com/labs/sandman-apt-china-based-adversaries-embrace-lua/ 2025-04-11T14:51:24.000Z https://www.sentinelone.com/labs/gaza-cybergang-unified-front-targeting-hamas-opposition/ 2025-04-11T14:50:33.000Z https://www.sentinelone.com/labs/sns-sender-active-campaigns-unleash-messaging-spam-through-the-cloud/ 2025-04-11T14:48:28.000Z https://www.sentinelone.com/labs/doppelganger-russia-aligned-influence-operation-targets-germany/ 2025-04-11T14:47:54.000Z https://www.sentinelone.com/labs/acidpour-new-embedded-wiper-variant-of-acidrain-appears-in-ukraine/ 2025-04-11T14:47:21.000Z https://www.sentinelone.com/labs/capratube-remix-transparent-tribes-android-spyware-targeting-gamers-weapons-enthusiasts/ 2025-04-11T14:45:39.000Z https://www.sentinelone.com/labs/nullbulge-threat-actor-masquerades-as-hacktivist-group-rebelling-against-ai/ 2025-04-11T14:43:32.000Z https://www.sentinelone.com/labs/fin7-reboot-cybercrime-gang-enhances-ops-with-new-edr-bypasses-and-automated-attacks/ 2025-04-11T14:42:51.000Z https://www.sentinelone.com/labs/chinas-influence-ops-twisting-tales-of-volt-typhoon-at-home-and-abroad/ 2025-04-11T14:41:04.000Z https://www.sentinelone.com/labs/bluenoroff-hidden-risk-threat-actor-targets-macs-with-fake-crypto-news-and-novel-persistence/ 2025-04-11T14:40:07.000Z https://www.sentinelone.com/labs/dprk-it-workers-a-network-of-active-front-companies-and-their-links-to-china/ 2025-04-11T14:38:34.000Z https://www.sentinelone.com/labs/cybervolk-a-deep-dive-into-the-hacktivists-tools-and-ransomware-fueling-pro-russian-cyber-attacks/ 2025-04-11T14:37:14.000Z https://www.sentinelone.com/labs/operation-digital-eye-chinese-apt-compromises-critical-digital-infrastructure-via-visual-studio-code-tunnels/ 2025-04-11T14:36:36.000Z https://www.sentinelone.com/labs/akirabot-ai-powered-bot-bypasses-captchas-spams-websites-at-scale/ 2025-04-09T15:00:36.000Z https://www.sentinelone.com/labs/labscon24-replay-a-walking-red-flag-with-yellow-stars/ 2025-03-31T13:00:23.000Z https://www.sentinelone.com/labs/labscon24-replay-kryptina-raas-from-unsellable-cast-off-to-enterprise-ransomware/ 2025-03-26T13:00:16.000Z https://www.sentinelone.com/labs/labscon24-replay-resilience-and-protection-in-the-windows-ecosystem/ 2025-03-12T15:56:53.000Z https://www.sentinelone.com/labs/labscon24-replay-farmyard-gossip-the-foreign-footprint-in-us-agriculture/ 2025-03-05T23:00:00.000Z https://www.sentinelone.com/labs/ghostwriter-new-campaign-targets-ukrainian-government-and-belarusian-opposition/ 2025-02-28T10:31:52.000Z https://www.sentinelone.com/labs/censorship-as-a-service-leak-reveals-public-private-collaboration-to-monitor-chinese-cyberspace/ 2025-02-21T10:55:35.000Z https://www.sentinelone.com/labs/labscon24-replay-follow-the-money-uncovering-the-incorporation-and-the-ccps-ownership-of-chinese-firms-investing-in-the-usa/ 2025-01-30T14:00:32.000Z https://www.sentinelone.com/labs/anchor-project-for-trickbot-adds-icmp/ 2025-01-14T11:07:04.000Z https://www.sentinelone.com/labs/how-trickbot-malware-hooking-engine-targets-windows-10-browsers/ 2025-01-14T11:05:49.000Z https://www.sentinelone.com/labs/labscon24-replay-the-real-ai-race-disinformation-in-the-taiwanese-election/ 2025-01-09T16:15:52.000Z https://www.sentinelone.com/labs/zen-and-the-art-of-smm-bug-hunting-finding-mitigating-and-detecting-uefi-vulnerabilities/ 2025-01-09T11:16:30.000Z https://www.sentinelone.com/labs/leveraging-ld_audit-to-beat-the-traditional-linux-library-preloading-technique/ 2025-01-09T11:08:14.000Z https://www.sentinelone.com/labs/purple-fox-ek-new-cves-steganography-and-virtualization-added-to-attack-flow/ 2025-01-09T10:05:11.000Z https://www.sentinelone.com/labs/moving-from-dynamic-emulation-of-uefi-modules-to-coverage-guided-fuzzing-of-uefi-firmware/ 2025-01-09T10:02:48.000Z https://www.sentinelone.com/labs/adventures-from-uefi-land-the-hunt-for-the-s3-boot-script/ 2025-01-09T10:01:57.000Z https://www.sentinelone.com/labs/acidrain-a-modem-wiper-rains-down-on-europe/ 2025-01-09T09:57:52.000Z https://www.sentinelone.com/labs/fin6-frameworkpos-point-of-sale-malware-analysis-internals/ 2025-01-09T09:53:38.000Z https://www.sentinelone.com/labs/thundercats-hack-the-fsb-your-taxes-didnt-pay-for-this-op/ 2025-01-09T09:51:42.000Z https://www.sentinelone.com/labs/the-anatomy-of-an-apt-attack-and-cobaltstrike-beacons-encoded-configuration/ 2025-01-09T09:49:17.000Z https://www.sentinelone.com/labs/info-stealers-how-malware-hacks-private-user-data/ 2025-01-09T09:47:11.000Z https://www.sentinelone.com/labs/egomaniac-an-unscrupulous-turkish-nexus-threat-actor/ 2025-01-09T09:46:21.000Z https://www.sentinelone.com/labs/modifiedelephant-apt-and-a-decade-of-fabricating-evidence/ 2025-01-09T09:39:27.000Z https://www.sentinelone.com/labs/shadowpad-a-masterpiece-of-privately-sold-malware-in-chinese-espionage/ 2025-01-09T09:24:58.000Z https://www.sentinelone.com/labs/11-problems-chatgpt-can-solve-for-reverse-engineers-and-malware-analysts/ 2025-01-09T09:22:13.000Z https://www.sentinelone.com/labs/anchor-project-the-deadly-planeswalker-how-the-trickbot-group-united-high-tech-crimeware-apt/ 2025-01-09T09:16:24.000Z https://www.sentinelone.com/labs/labscon24-replay-the-ransomware-trust-paradox/ 2024-12-19T14:00:12.000Z https://www.sentinelone.com/labs/labscon24-replay-let-them-eat-cake-secure-by-upgrade-software-is-a-national-security-threat/ 2024-12-18T14:53:24.000Z https://www.sentinelone.com/labs/labscon24-replay-a-30-year-journey-from-compilation-student-to-decompilation-pioneer/ 2024-12-10T14:50:39.000Z https://www.sentinelone.com/labs/labscon24-replay-pkfail-supply-chain-failures-in-secure-boot-key-management/ 2024-12-03T16:15:30.000Z https://www.sentinelone.com/labs/labscon23-replay-they-spilled-oil-in-my-health-boosting-smoothie/ 2024-11-26T14:01:55.000Z https://www.sentinelone.com/labs/cloud-malware-a-threat-hunters-guide-to-analysis-techniques-and-delivery/ 2024-10-24T15:17:35.000Z https://www.sentinelone.com/labs/labscon23-replay-black-magic-influence-operations-in-the-open-and-at-scale-in-hungary/ 2024-08-21T16:10:02.000Z https://www.sentinelone.com/labs/xeon-sender-sms-spam-shipping-multi-tool-targeting-saas-credentials/ 2024-08-19T09:55:19.000Z https://www.sentinelone.com/labs/cve-2021-3438-16-years-in-hiding-millions-of-printers-worldwide-vulnerable/ 2024-08-10T15:28:23.000Z https://www.sentinelone.com/labs/driving-through-defenses-targeted-attacks-leverage-signed-malicious-microsoft-drivers/ 2024-08-09T17:37:14.000Z https://www.sentinelone.com/labs/labscon23-replay-macos-components-used-in-north-korean-crypto-heists/ 2024-05-08T10:00:18.000Z https://www.sentinelone.com/labs/labscon23-replay-from-vulkan-to-ryazan-investigative-reporting-from-the-frontlines-of-infosec/ 2024-04-30T16:12:09.000Z https://www.sentinelone.com/labs/labscon23-replay-meet-the-iranian-company-powering-russias-drone-war-on-ukraine/ 2024-04-23T20:59:47.000Z https://www.sentinelone.com/labs/wastedlocker-ransomware-abusing-ads-and-ntfs-file-attributes/ 2024-03-29T08:46:31.000Z https://www.sentinelone.com/labs/solarwinds-understanding-detecting-the-supernova-webshell-trojan/ 2024-03-29T05:16:25.000Z https://www.sentinelone.com/labs/misusing-msvsmon-and-the-windows-remote-debugger/ 2024-03-29T05:08:01.000Z https://www.sentinelone.com/labs/egregor-raas-continues-the-chaos-with-cobalt-strike-and-rclone/ 2024-03-29T04:58:21.000Z https://www.sentinelone.com/labs/conti-unpacked-understanding-ransomware-development-as-a-response-to-detection/ 2024-03-29T04:55:10.000Z https://www.sentinelone.com/labs/case-study-catching-a-human-operated-maze-ransomware-attack-in-action/ 2024-03-29T04:54:25.000Z https://www.sentinelone.com/labs/netwalker-ransomware-no-respite-no-english-required/ 2024-03-29T04:52:54.000Z https://www.sentinelone.com/labs/avaddon-raas-breaks-public-decryptor-continues-on-rampage/ 2024-03-29T04:44:12.000Z https://www.sentinelone.com/labs/a-deep-dive-into-zebrocys-dropper-docs/ 2024-03-29T04:32:20.000Z https://www.sentinelone.com/labs/deep-dive-into-trickbot-executor-module-mexec-reversing-the-dropper-variant/ 2024-03-28T05:25:53.000Z https://www.sentinelone.com/labs/moving-from-manual-reverse-engineering-of-uefi-modules-to-dynamic-emulation-of-uefi-firmware/ 2024-03-22T12:20:14.000Z https://www.sentinelone.com/labs/enter-the-maze-demystifying-an-affiliate-involved-in-maze-snow/ 2024-03-22T09:52:40.000Z https://www.sentinelone.com/labs/multi-platform-smaug-raas-aims-to-see-off-competitors/ 2024-03-22T08:46:15.000Z https://www.sentinelone.com/labs/inside-a-trickbot-cobalt-strike-attack-server/ 2024-03-22T08:42:03.000Z https://www.sentinelone.com/labs/top-tier-russian-organized-cybercrime-group-unveils-fileless-stealthy-powertrick-backdoor-for-high-value-targets/ 2024-03-21T09:48:20.000Z https://www.sentinelone.com/labs/the-fonix-raas-new-low-key-threat-with-unnecessary-complexities/ 2024-03-21T09:37:21.000Z https://www.sentinelone.com/labs/bypassing-macos-tcc-user-privacy-protections-by-accident-and-design/ 2024-03-07T11:57:45.000Z https://www.sentinelone.com/labs/unmasking-i-soon-the-leak-that-revealed-chinas-cyber-operations/ 2024-02-22T20:41:54.000Z https://www.sentinelone.com/labs/labscon-replay-chasing-shadows-the-rise-of-a-prolific-espionage-actor/ 2024-02-22T12:31:39.000Z https://www.sentinelone.com/labs/top-15-essential-malware-analysis-tools/ 2024-01-19T08:52:54.000Z https://www.sentinelone.com/labs/labscon-replay-send-lawyers-garchs-and-money/ 2024-01-18T16:48:19.000Z https://www.sentinelone.com/labs/exploring-fbot-python-based-malware-targeting-cloud-and-payment-services/ 2024-01-11T13:55:59.000Z https://www.sentinelone.com/labs/labscon-replay-spectre-strikes-again-introducing-the-firmware-edition/ 2023-12-28T16:00:55.000Z https://www.sentinelone.com/labs/labscon-replay-intellexa-and-cytrox-from-fixer-upper-to-intel-agency-grade-spyware/ 2023-12-26T17:00:12.000Z https://www.sentinelone.com/labs/elephant-hunting-inside-an-indian-hack-for-hire-group/ 2023-12-22T19:16:44.000Z https://www.sentinelone.com/labs/hacking-smart-devices-for-fun-and-profit/ 2023-11-27T20:27:53.000Z https://www.sentinelone.com/labs/11-ways-to-tweak-radare2-for-faster-and-easier-macos-malware-analysis/ 2023-11-02T09:55:20.000Z https://www.sentinelone.com/labs/techniques-for-string-decryption-in-macos-malware-with-radare2/ 2023-09-18T14:20:08.000Z https://www.sentinelone.com/labs/pwning-microsoft-azure-defender-for-iot-multiple-flaws-allow-remote-code-execution-for-all/ 2023-09-10T19:13:31.000Z https://www.sentinelone.com/labs/jumpcloud-intrusion-attacker-infrastructure-links-compromise-to-north-korean-apt-activity/ 2023-07-21T10:16:48.000Z https://www.sentinelone.com/labs/automating-string-decryption-and-other-reverse-engineering-tasks-in-radare2-with-r2pipe/ 2023-06-26T15:03:58.000Z https://www.sentinelone.com/labs/labscon-replay-quiver-using-cutting-edge-ml-to-detect-interesting-command-lines-for-hunters/ 2023-06-26T13:34:55.000Z https://www.sentinelone.com/labs/radare2-power-ups-delivering-faster-macos-malware-analysis-with-r2-customization/ 2023-06-21T15:26:57.000Z https://www.sentinelone.com/labs/fade-dead-adventures-in-reversing-malicious-run-only-applescripts/ 2023-06-20T17:08:48.000Z https://www.sentinelone.com/labs/labscon-replay-star-gazing-using-a-full-galaxy-of-yara-methods-to-pursue-an-apex-actor/ 2023-06-12T15:03:27.000Z https://www.sentinelone.com/labs/the-art-and-science-of-macos-malware-hunting-with-radare2-leveraging-xrefs-yara-and-zignatures/ 2023-05-31T15:33:58.000Z https://www.sentinelone.com/labs/custom-branded-ransomware-the-vice-society-group-and-the-threat-of-outsourced-development/ 2023-01-10T18:55:21.000Z https://www.sentinelone.com/labs/the-mystery-of-metador-unpicking-mafaldas-anti-analysis-techniques/ 2022-12-01T14:19:42.000Z https://www.sentinelone.com/labs/gootkit-banking-trojan-deep-dive-into-anti-analysis-features/ 2022-09-23T21:08:29.000Z https://www.sentinelone.com/labs/robinhood-ransomware-coolmaker-functions-not-so-cool/ 2022-09-23T21:04:00.000Z https://www.sentinelone.com/labs/the-sprawling-infrastructure-of-a-careless-mercenary/ 2022-09-22T23:55:34.000Z https://www.sentinelone.com/labs/pypi-phishing-campaign-juiceledger-threat-actor-pivots-from-fake-apps-to-supply-chain-attacks/ 2022-09-02T01:14:05.000Z https://www.sentinelone.com/labs/who-needs-macros-threat-actors-pivot-to-abusing-explorer-and-other-lolbins-via-windows-shortcuts/ 2022-08-04T15:10:08.000Z https://www.sentinelone.com/labs/lockbit-3-0-update-unpicking-the-ransomwares-latest-anti-analysis-and-evasion-techniques/ 2022-07-21T16:55:21.000Z https://www.sentinelone.com/labs/inside-malicious-windows-apps-for-malware-deployment/ 2022-07-14T13:41:53.000Z https://www.sentinelone.com/labs/targets-of-interest-russian-organizations-increasingly-under-attack-by-chinese-apts/ 2022-07-07T10:58:37.000Z https://www.sentinelone.com/labs/use-of-obfuscated-beacons-in-pymafka-supply-chain-attack-signals-a-new-trend-in-macos-attack-ttps/ 2022-05-27T12:38:33.000Z https://www.sentinelone.com/labs/cratedepression-rust-supply-chain-attack-infects-cloud-ci-pipelines-with-go-malware/ 2022-05-19T18:25:13.000Z https://www.sentinelone.com/labs/putting-things-in-context-timelining-threat-campaigns/ 2022-05-11T16:11:34.000Z https://www.sentinelone.com/labs/vulnerabilities-in-avast-and-avg-put-millions-at-risk/ 2022-05-05T13:43:10.000Z https://www.sentinelone.com/labs/moshen-dragons-triad-and-error-approach-abusing-security-software-to-sideload-plugx-and-shadowpad/ 2022-05-03T07:46:54.000Z https://www.sentinelone.com/labs/lockbit-ransomware-side-loads-cobalt-strike-beacon-with-legitimate-vmware-utility/ 2022-04-29T22:07:24.000Z https://www.sentinelone.com/labs/inside-the-black-box-how-we-fuzzed-microsoft-defender-for-iot-and-found-multiple-vulnerabilities/ 2022-04-13T17:12:45.000Z https://www.sentinelone.com/labs/chinese-threat-actor-scarab-targeting-ukraine/ 2022-03-25T04:32:41.000Z https://www.sentinelone.com/labs/sanctions-be-damned-from-dridex-to-macaw-the-evolution-of-evil-corp/ 2022-02-23T19:08:09.000Z https://www.sentinelone.com/labs/log4j2-in-the-wild-iranian-aligned-threat-actor-tunnelvision-actively-exploiting-vmware-horizon/ 2022-02-17T17:31:57.000Z https://www.sentinelone.com/labs/firefox-jit-use-after-frees-exploiting-cve-2020-26950/ 2022-02-03T16:30:06.000Z https://www.sentinelone.com/labs/blackcat-ransomware-highly-configurable-rust-driven-raas-on-the-prowl-for-victims/ 2022-01-19T02:35:45.000Z https://www.sentinelone.com/labs/cve-2021-45608-netusb-rce-flaw-in-millions-of-end-user-routers/ 2022-01-11T11:56:45.000Z https://www.sentinelone.com/labs/tipc-remote-linux-kernel-heap-overflow-allows-arbitrary-code-execution/ 2022-01-11T08:58:38.000Z https://www.sentinelone.com/labs/a-threat-hunters-guide-to-the-macs-most-prevalent-adware-infections-2022/ 2022-01-08T07:50:15.000Z https://www.sentinelone.com/labs/new-rook-ransomware-feeds-off-the-code-of-babuk/ 2021-12-24T13:35:11.000Z https://www.sentinelone.com/labs/usb-over-ethernet-multiple-privilege-escalation-vulnerabilities-in-aws-and-other-major-cloud-services/ 2021-12-07T15:48:10.000Z https://www.sentinelone.com/labs/massive-new-adload-campaign-goes-entirely-undetected-by-apples-xprotect/ 2021-11-30T14:07:11.000Z https://www.sentinelone.com/labs/infect-if-needed-a-deeper-dive-into-targeted-backdoor-macos-macma/ 2021-11-23T19:50:03.000Z https://www.sentinelone.com/labs/gsoh-no-hunting-for-vulnerabilities-in-virtualbox-network-offloads/ 2021-11-23T15:30:46.000Z https://www.sentinelone.com/labs/hide-and-seek-new-zloader-infection-chain-comes-with-improved-stealth-and-evasion-mechanisms/ 2021-11-15T20:13:36.000Z https://www.sentinelone.com/labs/spook-ransomware-prometheus-derivative-names-those-that-pay-shames-those-that-dont/ 2021-10-28T16:12:31.000Z https://www.sentinelone.com/labs/karma-ransomware-an-emerging-threat-with-a-hint-of-nemty-pedigree/ 2021-10-18T16:43:26.000Z https://www.sentinelone.com/labs/defeating-macos-malware-anti-analysis-tricks-with-radare2/ 2021-10-13T16:49:59.000Z https://www.sentinelone.com/labs/new-version-of-apostle-ransomware-reemerges-in-targeted-attack-on-higher-education/ 2021-10-01T10:52:18.000Z https://www.sentinelone.com/labs/6-pro-tricks-for-rapid-macos-malware-triage-with-radare2/ 2021-09-22T15:11:14.000Z https://www.sentinelone.com/labs/macos-incident-response-part-1-collecting-device-file-system-data/ 2021-09-02T23:24:34.000Z https://www.sentinelone.com/labs/macos-incident-response-part-2-user-data-activity-and-behavior/ 2021-09-02T23:17:25.000Z https://www.sentinelone.com/labs/macos-incident-response-part-3-system-manipulation/ 2021-09-02T23:11:07.000Z https://www.sentinelone.com/labs/rig-exploit-kit-chain-internals/ 2021-09-02T23:00:41.000Z https://www.sentinelone.com/labs/privilege-escalation-macos-malware-the-path-to-root-part-1/ 2021-09-02T22:23:17.000Z https://www.sentinelone.com/labs/new-snake-ransomware-adds-itself-to-the-increasing-collection-of-golang-crimeware/ 2021-09-02T22:15:21.000Z https://www.sentinelone.com/labs/pro-russian-cyberspy-gamaredon-intensifies-ukrainian-security-targeting/ 2021-09-02T22:13:55.000Z https://www.sentinelone.com/labs/dprk-hidden-cobra-update-north-korean-malicious-cyber-activity/ 2021-09-02T22:13:27.000Z https://www.sentinelone.com/labs/breaking-ta505s-crypter-with-an-smt-solver/ 2021-09-02T22:10:45.000Z https://www.sentinelone.com/labs/icedid-botnet-the-iceman-goes-phishing-for-us-tax-returns/ 2021-09-02T22:07:34.000Z https://www.sentinelone.com/labs/sarwent-malware-continues-to-evolve-with-updated-command-functions/ 2021-09-02T22:03:13.000Z https://www.sentinelone.com/labs/valak-malware-and-the-connection-to-gozi-loader-confcrew/ 2021-09-02T21:57:29.000Z https://www.sentinelone.com/labs/a-click-from-the-backyard-analysis-of-cve-2020-9332-a-vulnerable-usb-redirection-software/ 2021-09-02T21:46:30.000Z https://www.sentinelone.com/labs/thanos-ransomware-riplace-bootlocker-and-more-added-to-feature-set/ 2021-09-02T21:43:15.000Z https://www.sentinelone.com/labs/living-off-windows-land-a-new-native-file-downldr/ 2021-09-02T21:42:23.000Z https://www.sentinelone.com/labs/breaking-evilquest-reversing-a-custom-macos-ransomware-file-encryption-routine/ 2021-09-02T21:40:53.000Z https://www.sentinelone.com/labs/agent-tesla-old-rat-uses-new-tricks-to-stay-on-top/ 2021-09-02T21:26:46.000Z https://www.sentinelone.com/labs/case-study-why-you-shouldnt-trust-ntdll-from-kernel-image-load-callbacks/ 2021-09-02T21:22:27.000Z https://www.sentinelone.com/labs/ranzy-ransomware-better-encryption-among-new-features-of-thunderx-derivative/ 2021-09-02T20:40:31.000Z https://www.sentinelone.com/labs/solarwinds-sunburst-backdoor-inside-the-apt-campaign/ 2021-09-02T20:35:44.000Z https://www.sentinelone.com/labs/zeoticus-2-0-ransomware-with-no-c2-required/ 2021-09-02T20:00:41.000Z https://www.sentinelone.com/labs/cve-2021-24092-12-years-in-hiding-a-privilege-escalation-vulnerability-in-windows-defender/ 2021-09-02T20:00:22.000Z https://www.sentinelone.com/labs/hellokitty-ransomware-lacks-stealth-but-still-strikes-home/ 2021-09-02T19:51:36.000Z https://www.sentinelone.com/labs/keep-malware-off-your-disk-with-sentinelones-ida-pro-memory-loader-plugin/ 2021-09-02T19:34:55.000Z https://www.sentinelone.com/labs/relaying-potatoes-another-unexpected-privilege-escalation-vulnerability-in-windows-rpc-protocol/ 2021-09-02T18:13:50.000Z https://www.sentinelone.com/labs/from-wiper-to-ransomware-the-evolution-of-agrius/ 2021-09-02T18:05:02.000Z https://www.sentinelone.com/labs/noblebaron-new-poisoned-installers-could-be-used-in-supply-chain-attacks/ 2021-09-02T18:03:04.000Z https://www.sentinelone.com/labs/gootloader-initial-access-as-a-service-platform-expands-its-search-for-high-value-targets/ 2021-09-02T15:32:06.000Z https://www.sentinelone.com/labs/hotcobalt-new-cobalt-strike-dos-vulnerability-that-lets-you-halt-operations/ 2021-09-02T15:23:36.000Z https://www.sentinelone.com/labs/hive-attacks-analysis-of-the-human-operated-ransomware-targeting-healthcare/ 2021-09-02T15:23:00.000Z