Thank you very much The DFIR Report ! Looks really awesome.

Behold the latest addition to the Marvel cinematic universe: IRQL_NOT_LESS_OR_EQUAL man

Anonymous Sudan: most likely Russia disrupting Swedens🇸🇪 NATO-application. Today, Truesec’s #ThreatIntelligence Unit released a report which explains how the "Anonymous Sudan" has nothing to do with the online activists collectively known as Anonymous. truesec.com/hub/blog/what-…

Best read of the day! Amazing report with a lot of great insight for all defenders out there.

I had the absolute pleasure to speak at the SANS CTI Summit about cracking ransomware tooling. It is now available at SANS DFIR YouTube channel. m.youtube.com/watch?v=uQQxdu… SANS DFIR

Time for a quick visit on the #DarkWeb? 💻 Join our #ThreatIntelligence specialists Christoffer S (@[email protected]) and Jolina Pettersson for our webinar to learn about: ✔️ Infostealers: how they work ✔️ Demo: Dark Web marketplace ✔️ Signs to predict #cyberattacks Sign up:event.truesec.com/webinar-threat…

All good things most unfortunately come to an end. I have decided to retire from The DFIR Report to focus on other things. It has been an awesome time and I love what The DFIR Report do for the community. Thank you for everything!

New blog post based on a recent intrusion I observed with #Ursnif as the initial infection! Topics include: ✅ Detection opportunities ✅ TAs clipboard data ✅ Post-exploitation and more! The artifacts for this case: buff.ly/3NYx49v The blog: buff.ly/44QCSJ0

Jag beklagar djupt Nobelstiftelsens beslut från igår att bjuda in Rysslands och Vitrysslands ambassadörer till den kommande Nobelprisutdelningen den 10 december 2023. Jag har flera frågor till den ansedda Nobelstiftelsen – vad har förändrats sedan förra året, när er organisation

Did an investigation regarding DarkGate delivered by Teams together with my fantastic colleague Jakob Nordenlund at Truesec. A lot of good IoC for all defenders! truesec.com/hub/blog/darkg…

It is a first for me to be featured in BleepingComputer , so I am very to announce that @[email protected] and my work was featured there today. bleepingcomputer.com/news/security/…

CrowdStrike pushes the ultimate security update. All computers become unhackable.

I am glad and humble that BleepingComputer picked up the analysis I did with Mattias Wåhlén 🇪🇺🇺🇦🇨🇦 regarding Cicada 3301 ransomware and possible connections to AlphV/BlackCat.

Did a 10 minute lightning talk at SEC-T analyzing the an ESXi ransomware from the new group Cicada 3301 and how we see links to the debunked RaaS BlackCat. m.youtube.com/watch?v=E_WJ6C…

Hope to see you virtual there!