Mandiant Threat Intelligence rates vulnerabilities based on the insight and experience of our analysts.

We demonstrate how we apply intelligence to help organizations assess risk and make informed decisions about vulnerability management and patching.

Our journey of statistical PDB analysis did not yield a magic malware classifier, but did yield a number of useful findings.

We present StringSifter, a utility that identifies and prioritizes strings according to their relevance for malware analysis.

We explore various threats to elections and offer a framework to sort these activities.

A financial services firm engaged a Mandiant red team to evaluate the effectiveness of its information security team’s detection, prevention and response capabilities.

Check out the second post in our four-part blog series on CARBANAK.

FireEye has observed multiple campaigns leveraging a WinRAR vulnerability.

The more common AI financial tools become, the more threat actors will exploit them.

We release ironstrings, a new IDAPython script to recover stackstrings from malware.