
Jon Hencinski
@jhencinski
VP, MDR @rapid7 | Servant Leader | Capacity Builder | SOC Innovator | Here to learn, share what I know, and help others.
ID: 780589259912720384
https://capacitybuilders.substack.com/ 27-09-2016 02:05:57
2,2K Tweet
8,8K Followers
1,1K Following

Jon Hencinski AiTM phishing is def the rule more than the exception now over the last 2 years. Excellent tips. I'd also add to pull an Purview search on MailItemsAccessed if you have it enabled. Gives you good scope of what messages TA may have accessed. For info here learn.microsoft.com/en-us/purview/…










A statement from Christiaan Beek, Rapid7 Senior Director, Threat Analytics, regarding the #LockBit ransomware group ⤵️
