Unmasking Volt Typhoon: Tactics and Threats

This chapter examines the advanced techniques employed by the Chinese APT group Volt Typhoon, highlighting their 'living off the land' strategies that may facilitate sabotage of critical infrastructure. It also discusses methodologies for detecting their activities, focusing on port proxies, network traffic redirection, and the significance of logging for threat detection.