The newest Supply Chain Security resources are on the Supply Chain Security page. For a reading order instead of a date order, see the Supply Chain Security learning path.
| Date Added | Link | Excerpt |
|---|---|---|
| 2021-05-18 2021 | Colonial Pipeline Darkside and Models news 4 min read | Analysis comparing incident response models from Sophos and Mandiant for the Darkside ransomware attack. It highlights differences in kill chain stages, such as Sophos categorizing at least two steps Mandiant omits, and discrepancies in specific techniques listed for "move laterally," with Mandiant citing Beacon and plink while Sophos lists PSExec and SSH. The entry emphasizes the need for defenders to critically evaluate and unionize such data due to variations in observed post-exploitation actions, referencing CVE-2021-20016. |