Google SecOps Integration: New Detection Pipeline Connects Chronicle to Sentinel
Microsoft Sentinel gains visibility into Google Chronicle security detections through new connector and parsers. Read More →
T1055
Defender for Endpoint: Cryptographic Identity Baselining Hunting Query for Process Network Anomalies
New hunting query detects first-time network connections by processes using cryptographic signer baselining to defeat DLL sideloading and BYOTA attacks. Read More →
ETW-Resistant .NET Fileless Injection Detection via Kernel-Level CLR Loading
New hunting query detects fileless .NET execution even when attackers patch ETW by monitoring kernel-level .NET runtime DLL loading in native processes and untrusted paths. Read More →