
Weird & Wacky Researcher Summer: The Artifacts & Detections Edition
DISCARDED: Tales From the Threat Research Trenches
00:00
The Wacky LNK Build Artifacts
LNKs have been a mainstay since the macros got taken off the board for them. LNKs can just sort of be whatever you want them to be in the same like, like kind of like what can you describe if as long as it has like a very small amount of headers, it's a valid LNK. Two pretty prominent actors in the North Green space TA 409 and APT 37 both really like to use LNK files. And so we're starting to see some more a commoditization in that space.
Transcript
Play full episode