Threat detection

Getting started with Microsoft email headers for security

DOUBLOON DREDGER token harvesting: Notion abuse, EvilTokens, and a side of Tycoon2FA

FlowerStorm unleashes the KrakVM: PhaaS operators turn to VM-based obfuscation

Using AI signals within malicious email for attack detection and threat hunting

Keitaro TDS abused to deliver AutoIT-based loader targeting German speakers

Community Spotlight: Email Detection Rules built by the Sublime Community

TROX Stealer: A deep dive into a new Malware as a Service (MaaS) attack campaign

Xloader deep dive: Link-based malware delivery via SharePoint impersonation

Detecting malicious AnonymousFox email messages sent from compromised sites

Correlate Sublime Logs in Panther for Centralized Threat Detection

Gotta Catch 'Em All: Detecting PikaBot Delivery Techniques

QR Code Phishing: Decoding Hidden Threats

Call Me Maybe? The Rise of Callback Phishing Emails

Detecting QakBot: WSF attachments, OneNote files, and generic attack surface reduction

Introduction to Message Query Language (MQL)