CrowdStrikePDF
2022OverWatchThreatHuntingReport.pdf
Excerpt
NOWHERE
TO HIDE
2022 Falcon OverWatch Threat Hunting Report
Nowhere to Hide: 2022 Falcon OverWatch Threat Hunting Report CrowdStrike 2 Executive Summary� 3
Interactive Intrusion Trends� 6
Intrusion Campaign Numbers� 6
Intrusions by Threat Type� 7
Intrusions by Industry Vertical� 8
Adversary Activity� 10
Adversary Technique Insights� 13
Looking Back: Adversary Trends� 17
Looking Beyond the CVE� 18
LockBit and Its Technicolor Affiliate Program:
� How One RaaS Offering Has Spawned Diverse Tradecraft� 22
Tooling Deep Dive: Emerging, Trending and Mainstay Tools� 29 Better Together: OverWatch and Falcon Complete
� Team Up to Deliver Immediate Time-to-Value� 36
Looking Deeper: Interesting Tradecraft� 38
AQUATIC PANDA Demonstrates Deep Familiarity in Victim Network� 39…
The opening of the report, shown for reference. The full report, with its figures and indicators, is published by CrowdStrike on go.crowdstrike.com.
Mentioned in the excerpt
More from CrowdStrike5
- How CrowdStrike Analyzes macOS Malware to Optimize Automated DetectionCrowdStrike · Published 6 May 2022
- Blurring of Commodity and Targeted Attack MalwareCrowdStrike · Added 10 Jun
- Response When Minutes Matter: Rising Up Against RansomwareCrowdStrike · Added 29 Apr
- What is a Downgrade Attack?CrowdStrike · Added 29 Apr
