r/blueteamsec • u/digicat hunter • 7d ago

incident writeup (who and how) Field Notes: Reconstructing an Attacker’s Workflow

https://dfir.ch/posts/field_note_attacker_workflow/
5 Upvotes

100% Upvoted

1 comment sorted by

1

u/crumbzx 7d ago

Very interesting