We are proud to finally share some great research by Arnau Ortega on a 1-click #Azure tenant takeover attack. You can read all about it in our latest blog post. It explains how we could take over any Azure tenant; just by clicking one legitimate link 😨

falconforce.nl/arbitrary-1-cl…

In August 2024, we will host a new Advanced Detection Engineering in the Enterprise training at #bhusa ! Ticket sales have already started! Reserve your ticket before May 24th to get the best eary-bird rate: blackhat.com/us-24/training…

#detectionengineering #training

Next week, Olaf Hartong will present his talk on improving defenses by integrating #FalconHound during the SO-CON 2024 hosted by SpecterOps 🇺🇦. Learn how #BloodHound and #FalconHound can serve as extensions of your live monitoring capabilities. More info: specterops.io/so-con/

Have you ever been on the receiving end of a red team or advanced cyber attack and wished you had detected more of their activities? In our training at  #bhusa , we’ll teach you how to research and develop better detections🕵‍

blackhat.com/us-24/training…

Incredible work from FalconForce Official 🙌

#FalconHound has been updated to V.1.1.0

It now has #Splunk support, with one example action. Additional actions are most welcome in PRs!

We've also added a global debug flag and a lookback override for KQL actions.

github.com/FalconForceTea…

A couple of weeks ago we met our friends at PRODAFT and joined one of their Raven Calls. Enjoy this episode where FalconForce’s Olaf Hartong and PRODAFT’s Viktória Vargová discuss detection engineering and why collaboration in cyber security is crucial. youtube.com/watch?v=oBMrbl…

It is out! FalconHound is now public.
github.com/FalconForceTea…

A blue team multi-tool. It allows you to utilize and enhance the power of BloodHound in a more automated fashion

Yesterday I spoke about FalconHound Wild West Hackin' Fest, slides to the talk:
github.com/olafhartong/Pr…

Sponsor Spotlight | FalconForce Official

We would like to thank FalconForce for being a Silver Sponsor for Deadwood 2023! Check out all about their company and services here: falconforce.nl/?utm_campaign=…

In the 5th blog of the #MDE internals series, Olaf Hartong went down the rabbit hole to find telemetry for detecting abuse of the Live Response capability (and other actions). The blog includes the nifty #DefenderHarvester tool – available on GitHub!

falconforce.nl/microsoft-defe…

We are back with a new blog! Givan Kolster (linkedin.com/in/givankolste…) gives his insights in the role of “leg ups” during red teaming exercises. What is a leg up and is it a helping hand or red team failure? Enjoy!

falconforce.nl/leg-ups-helpin…

#redteaming #riskmanagement #tibereu

Join us at #mitre #attackcon 4.0 where Olaf Hartong will share the the key to unlock the power of detection engineering and how FalconForce has built a robust and flexible development and deployment process using cloud technologies.

Find out more: falconforce.nl/attackcon-4/

It was inspiring to see so many security enthusiasts and professionals come together. We are also happy to have received great feedback on our detection engineering training at #blackhat2023 . FalconForce also volunteered in the Blue Team Village at #defcon31 . See you next year!

We are hiring offensive specialists! Experienced consulting professionals who deliver high-quality offensive security services with the aim to helping our client's defensive teams become more resilient against digital attacks. Sounds like you?

Check out: falconforce.nl/falconforce-of…

Automation can play a huge role in CIR by enhancing the speed, accuracy, and efficiency of the process. In his first #FalconFriday blog, Nikolas (linkedin.com/in/nikos-manta…) shows how Azure Logic Apps and Live Response can help … and introduces ParrotForce!

falconforce.nl/falconfriday-a…