
Threat Hunting Case Study: The Gentlemen
Analyzing The Gentlemen ransomware group's attack chain and how to hunt for their privileged group manipulation technique before they spread through the NETLOGON share folder on Windows domain controllers.

The HUNTER Platform streamlines organizations’ threat hunting operations and processes. Whether you are a mature, battle-hardened, hunt team, or just getting started, the HUNTER threat hunting content platform will get you hunting faster and more repeatable. HUNTER isn’t just for threat hunters though – it can upskill and reskill existing SOC teams into threat hunters and extend scarce content and SIEM engineering resources!
Check out some of the ways Cyborg Security’s customers and partners are using the HUNTER threat hunting content platform!
The HUNTER Platform helps security teams recognize and increase the ROI of their existing security tools. HUNTER enables security teams to significantly enhance the capabilities of organizations’ existing SIEM, EDR, NDR, and XDR toolsets without the need to rip and replace another appliance or agent. Instead, the HUNTER Platform can deliver best-in-class threat hunting content while allowing organizations to continue to use their existing tools and platforms.

Analyzing The Gentlemen ransomware group's attack chain and how to hunt for their privileged group manipulation technique before they spread through the NETLOGON share folder on Windows domain controllers.

Scattered Spider skips malware and breaks in with a phone call and a legitimate remote access tool, here's how to hunt for it.

FileFix bypasses Mark of the Web (MotW) protections by hijacking the Windows File Explorer address bar. Here is how to hunt for it.