- Threat Detection Report
- Trends
- Top trends
- Ransomware
- Initial access tradecraft
- Identity attacks
- Vulnerabilities
- Stealers
- Insider threats
- VPN abuse
- Cloud attacks
- Mac malware
- Threats
- Top 10 threats
- 1. SocGholish
- 2. Impacket
- 3. Scarlet Goldfinch
- 4. Mimikatz
- 5. Amber Albatross
- 6. LummaC2
- 7. Netsupport Manager
- 8. Gootloader
- 9. Gamarue
- 10. HijackLoader
- Featured: Field Guide to Color Birds
- Techniques
- Top 10 techniques
- 1. Cloud Accounts
- 2. Windows Command Shell
- 3. Email Forwarding Rule
- 4. PowerShell
- 5. Email Hiding Rules
- 6. Service Execution
- 7. Modify Registry
- 8. WMI
- 9. Mshta
- 10. Ingress Tool Transfer
- Featured: Cloud Service Hijacking
- Threat Index
- Soundtrack
Impair Defenses
Impair Defenses ranked 11th among ATT&CK Techniques, and we added it to the Threat Detection Report as a post-publication bonus technique in October 2022.
Impair Defenses
Impair Defenses ranked 11th among ATT&CK Techniques, and we added it to the Threat Detection Report as a post-publication bonus technique in October 2022.
Prevalent Sub-techniques
T1562.001 – Disable or Modify Tools
Security controls often prevent adversaries from performing the necessary malicious actions to accomplish their goals, giving them little choice but to disable or modify tools to conduct a successful attack.
See MoreSee Red Canary in action
Schedule your demo now
Security gaps? We got you.
Get curated insights on managed detection and response (MDR) services, threat intelligence, and security operations—delivered straight to your inbox every month.