Identifying Rogue NBNS Spoofers

Kevin Robertson details Inveigh 1.4, his PowerShell LLMNR/mDNS/NBNS spoofer, adding ADIDNS attacks, relay improvements with multiple target handling and BloodHound integration, plus evasion options.

NetSPI's DCT team demonstrates seven code execution vectors on Azure VMs and Virtual Machine Scale Sets via Azure CLI, PowerShell, and REST APIs, with detection guidance for each.

With rising macOS threats, many security controls fail. Learn how to validate your detective controls and close the Mac detection gap to mitigate business risk.

Lessons from NetSPI's cloud attack simulations: default cloud logging alone is insufficient, SIEM rules need tuning, and breach and attack simulation (BAS) helps validate detective controls in Azure.

NetSPI explains crafting realistic red team scenarios: emulate industry-relevant threat tactics, blend technical and social-engineering vectors, and calibrate difficulty to security maturity.

Measures detection maturity across MITRE ATT&CK with a logging-detection-alerting-response-prevention pipeline, letting security teams map visibility gaps in their threat detection landscape.