Toggle navigation

Labs References Blog

Connections

Favorites

▾ ⬡ detection.wiki

▾ Blog

Posts Tags TWINLOOT: Microsoft 365 as C2 When One Operator Isn't Enough Will Any of This Fire? Event catalog update: 17 March 2026 Tutorial to Set Up Free ADX Introduction

▾ Detection Labs

Labs ClickOnce Abuse Windows Screensaver Files and RMM Persistence Python Persistence via .pth Files BYOVD and KslD.sys DLL Sideloading with the Windows Bluetooth File Transfer Wizard ClickFix, Electron Script-jacking, and Mandatory User Profiles

Posts tagged “Threat-Analysis”

Title	Date	Author	Tags
TWINLOOT: Microsoft 365 as C2	2026-09-07	sonny	threat-analysis, tutorial