Defending Against Cable: Prevent Malicious Use of Post-Exploitation Tool

SpecterOps argues identity risk now extends beyond Tier Zero, as attackers increasingly use legitimate credentials and trusted relationships to reach backups, regulated data, and other critical workloads.

With rising macOS threats, many security controls fail. Learn how to validate your detective controls and close the Mac detection gap to mitigate business risk.

How Wiz's 'Zero Noise' approach cuts cloud alert fatigue: attacker-focused detections, continuous feedback loops, and 'no alert left behind' discipline—as shown in a financial-sector incident case.

PowerUpSQL's core capabilities land in Empire as six modules, from SPN-based SQL Server discovery to xp_cmdshell OS command execution for lateral movement.

Surveys administrative WMI classes such as Win32_Service for remote service creation and system changes, positioning WMI as a quieter alternative channel for post-exploitation administration.

Explains how Microsoft LAPS stores local admin passwords in LDAP, and how incorrect delegation on ms-MCS-AdmPwd can expose cleartext credentials that aid lateral movement.