Content Paint
Embee Research

Threat Intelligence

Combining Pivot Points to Identify Malware Infrastructure - Redline, Smokeloader and Cobalt Strike
Combining Pivot Points to Identify Malware Infrastructure - Redline, Smokeloader and Cobalt Strike

Identifying Malware infrastructure by combining weak pivot points.

Identifying Simple Pivot Points in Malware Infrastructure - RisePro Stealer
Identifying Simple Pivot Points in Malware Infrastructure - RisePro Stealer

Identifying Simple pivot points in RisePro Stealer Infrastructure using Censys.

Practical Queries for Identifying Malware Infrastructure - Part 2
Practical Queries for Identifying Malware Infrastructure - Part 2

Threat Intelligence Queries with Censys.

Threat Intelligence Query Examples - Real World Queries for Identifying Malware Infrastructure
Threat Intelligence Query Examples - Real World Queries for Identifying Malware Infrastructure

An informal page for storing Censys/Shodan queries

Shodan Query Guide - How To Track Amadey Bot Infrastructure With TLS Certificates and Russian Profanity
Shodan Query Guide - How To Track Amadey Bot Infrastructure With TLS Certificates and Russian Profanity

Identifying Amadey Bot Servers Using Shodan.

How To Track Malware Infrastructure - Identifying Laplas Infrastructure Using Hardcoded TLS Certificates
How To Track Malware Infrastructure - Identifying Laplas Infrastructure Using Hardcoded TLS Certificates

Identification of Laplas infrastructure with Shodan and Censys.

Your link has expired. Please request a new one.
Your link has expired. Please request a new one.
Your link has expired. Please request a new one.
Great! You've successfully signed up.
Great! You've successfully signed up.
Welcome back! You've successfully signed in.
Success! You now have access to additional content.