| 2019-03-06 | Detecting Powershell Empire shenanigans with Sysinternals | re4lity | 1472 | |
| 2019-03-06 | Detecting Malicious Behavior by Unmasking WebSockets | re4lity | 1593 | |
| 2019-03-05 | apt40-examining-a-china-nexus-espionage-actor | tolive | 2612 | |
| 2019-03-05 | 使用贝叶斯网络来识别0day攻击路径 | ourren | 2541 | |
| 2019-03-03 | Cisco Talos Honeypot Analysis Reveals Rise in Attacks on Elasticsearch Clusters | ourren | 1997 | |
| 2019-02-27 | defeating-compiler-level-obfuscations-used-in-apt10-malware | tolive | 1968 | |
| 2019-02-24 | 2018勒索病毒白皮书(政企篇) | ourren | 2211 | |
| 2019-02-20 | TikiTorch - 一款允许在任意进程中执行任意 ShellCode 的工具 | mimblewimble | 2304 | |
| 2019-02-20 | Proofpoint releases Q4 2018 Threat Report and Year in Review | tolive | 1557 | |
| 2019-02-18 | Malware PowerShell shellcode analysis | mimblewimble | 1897 | |
| 2019-02-18 | EDR检测持久化Persistence入门 | ourren | 2110 | |
| 2019-02-15 | APT detection based on machine learning | ourren | 1383 | |
| 2019-02-15 | 分析银行木马的恶意 LNK 快捷方式及由 ISESteroids 混淆的 Powershell Dropper | mimblewimble | 3285 | |
