Navigation section
cloud forensics
About this tag
Cloud forensics on WindowsForum.com covers the investigation of post-compromise threat activity in Microsoft cloud environments. Discussions reference frameworks like MITRE ATT&CK and focus on detecting advanced persistent threat (APT) actors, analyzing initial access vectors such as SolarWinds Orion compromises, and identifying tactics used in enterprise cloud security incidents. The tag content emphasizes practical detection techniques for security professionals dealing with Microsoft cloud platforms.
-
AA21-008A: Detecting Post-Compromise Threat Activity in Microsoft Cloud Environments
Original release date: January 8, 2021 Summary This Advisory uses the MITRE Adversarial Tactics, Techniques, and Common Knowledge (ATT&CK®) framework. See the ATT&CK for Enterprise for all referenced threat actor tactics and techniques. This Alert is a companion alert to Link Removed...- News
- Thread
- advanced persistent threats api access azure security cisa cloud forensics cybersecurity data breach forensic tools hawk identity management malware microsoft 365 mitigation network oauth tokens privilege escalation security protocols software security sparrow tool threat detection
- Replies: 0
- Forum: Security Alerts