Brad Slaybaugh

My @FireEye friends @DavidPany and @deeemdee4 put out a badass blog on tunneled RDP. What is it? How is it used? What can you do to find it? Read more here: fireeye.com/blog/threat-re…

Check out our blog on identifying abuse of RDP by attackers! Lots of actionable prevention recommendations too! fireeye.com/blog/threat-re…

@Mandiant BUGJUICE == REDLEAVES HAYMAKER == CHCHES SNUGRIDE == amzn.to/2nifsvM

#APT29 part 2: I wrote up my favorite backdoor, POSHSPY, which I first discussed during our #noeasybreach talk. fireeye.com/blog/threat-re…

We released the @Mandiant #MTrends 2017 report today, including details on Russian APT email harvesting techniques bit.ly/2n5YOP7