Mandiant Threat Intelligence tracked numerous elections-related incidents in the Asia-Pacific region in recent years.

After seeing Oracle Solaris compromises, we analyzed the exploit to determine how it worked and then reported it to Oracle.

ThreatPursuit VM is a fully customizable, open-sourced Windows-based distribution focused on threat intelligence analysis and hunting.

The Flare-On 7 challenge is over, now come check out the solutions and stats.

We discuss threat modeling concepts that can help prioritize logging decisions and unleash the ability to identify and investigate attacks against an application.

In this post we introduce Mandiant's approach to operational technology red teaming and walk through a case study.

To all active and aspiring malware analysts, the FLARE team is honored to announce that the popular Flare-On challenge will return for a triumphant seventh year.

We have tied together several information operations that we assess are part of a broader influence campaign aligned with Russian security interests.

As OT networks continue to become more accessible to threat actors of all motivations, security threats that have historically impacted primarily IT are becoming more commonplace.

The FLARE team’s newest open-source tool, capa, provides a framework for the community to encode, recognize and share behaviors that we've seen in malware.