Skip to main content
IOC Radar

Indicators are what attackers leave behind. Stolen credentials are what they arrive with.

Check Exposure
1 IOC

Catch them while you can

DCSO CyTec Blog
DCSO CyTec Blog
Published October 13, 2025Original Report

Malware Families

Excerpt

What if an attacker in your environment isn’t game over, but rather your chance to take control? This blog post explores the effectiveness of intercepting attackers early, using insights from an incident we, as DCSO Incident Response Team, responded to. It reveals why intercepting attackers early isn’t just ideal, it’s achievable. Furthermore, it introduces the concepts of Time to Detect (TTD) and Time to Respond (TTR), which are key elements of effective cyber security…

Read the original report →

Diamond Model

SOCIAL AXISTECHNOLOGY AXISADVERSARYunknownINFRASTRUCTUREunknownCAPABILITYImpacketMimikatzNetScanVICTIMunknown
Adversary
Infrastructure
Capability(5)
Victim

Attack Flow8 steps · MITRE ATT&CK mapped

Initial AccessTA0001T1078
1/8
Valid Accounts
ActionLog in with stolen credentials
Attacker logged into Citrix using stolen credentials.

Indicators of Compromise

Open the mindmap →

1 indicators

TypeIndicatorConfidenceScoreFirst Seen
MD5aad3b435b51404eeaad3b435b51404eeMediumScore 53/100First seen

IOC Relationship Graph

Building graph…