T1588.003 on sentinelchangelog.nethttp://sentinelchangelog.net/tags/t1588.003/Recent content in T1588.003 on sentinelchangelog.netHugo -- 0.157.0enWed, 27 May 2026 08:59:01 +0000Hunting Query: Ephemeral Code Signing Certificates for Malware-Signing-as-a-Service Detectionhttp://sentinelchangelog.net/posts/2026-05-27-pr-14308/Wed, 27 May 2026 08:59:01 +0000http://sentinelchangelog.net/posts/2026-05-27-pr-14308/New hunting query identifies short-lived code signing certificates (≤14 days) on non-developer endpoints to detect Fox Tempest MSaaS operations.