Back in April of 2016, Zaid Arafeh, Clare Kearney, and I, recorded a 7 part series for the Microsoft Virtual…
Microsoft Exchange Servers are a high-value target for many adversaries, which makes the investigation of them during Incident Response vital.…
In the physical realm, a successful hunt ends with either a kill or a capture. While some might enjoy the thrill…
Public and private enterprises face the same threats, and yet often have different approaches to defense. What if you could…
The results are in, you’ve been breached. It’s officially the worst day of your career. How will you handle what…
Three years ago I wrote a document titled “Removing Exchange’s ability to impact Tier 0 and Tier 1” that was…
How fitting that 7 years after I started this blog I would relaunch it on a new platform (more on…
Microsoft Exchange Servers are a high value target, making investigation of them during Incident Response vital, but where do you…
I’ll be presenting a brand new session titled “Hunting Webshells on Microsoft Exchange Server” at the 2017 SANS Threat Hunting…
Ever since last month’s announcement that Microsoft SQL Server will be coming to Linux, quiet rumors have been floating around…