How to read a stealer log: the anatomy of one line
What sits inside an infostealer record, what each field tells you and in what order to triage it.
Blog
Notes from the team
Short answers to questions we meet in the field: reading stealer logs, catching typosquats, managing IOCs, closing cases. Research, operations and product notes.
Catching typosquatting domains from certificate logs
Most fake domains obtain a certificate before they go live. That is a window to see the campaign before its …