DISCARDED: Tales From the Threat Research Trenches cover image

Weird & Wacky Researcher Summer: The Artifacts & Detections Edition

DISCARDED: Tales From the Threat Research Trenches

00:00

The Wacky LNK Build Artifacts

LNKs have been a mainstay since the macros got taken off the board for them. LNKs can just sort of be whatever you want them to be in the same like, like kind of like what can you describe if as long as it has like a very small amount of headers, it's a valid LNK. Two pretty prominent actors in the North Green space TA 409 and APT 37 both really like to use LNK files. And so we're starting to see some more a commoditization in that space.

Transcript
Play full episode

The AI-powered Podcast Player

Save insights by tapping your headphones, chat with episodes, discover the best highlights - and more!
App store bannerPlay store banner
Get the app