Find and neutralize the attackers
Joined May 2017
- Tweets82
- Following4
- Followers687
- Likes17
🎯 Happy 2026, Threat Hunters!
We compiled 12 battle-tested tips to hunt the unknown, no IOCs, just anomalies.
🔍 Windows/Linux
💥 Scaled to 10K+ endpoints
👉 blog.exatrack.com/Happy_2026…
#ThreatHunting #Cybersecurity #DFIR #UnknownThreats
ExaTrack retweeted
Analyse et recoupement de malwares avec #Exalyze By @ExaTrack
At OSSIR meeting
↘️
youtu.be/VWa447RdLmg
ExaTrack retweeted
Discover a new linux backdoor hidden for 10 YEARS in a critical HTTP server, waiting for a "magic packet" to wake up.
Undocumented TTP. Full report: blog.exatrack.com/Butoflex%2… #Malware #ThreatHunting #Cybersecurity @ExaTrack @LoginSecurite
ExaTrack retweeted
🚀 Take your malware analysis skills to the next level with Exalyze
Discover our unique capabilities to compare malware code with our entire database, identifying similar samples and uncovering hidden connections.
👉 exalyze.io
@Exalyze_io
3+ YEARS of stealth! We uncovered new tactics used by the perfctl malware, including a userland rootkit & an SSH backdoor (a single SPACE in /etc/passwd!). More insights: blog.exatrack.com/Perfctl-us… #cybersecurity #threat_hunting #linux #infosec #perfctl #rootkit #ssh #exatrack
ExaTrack retweeted
In our search for new forensic artifacts at @ExaTrack, we sometimes deep dive into Windows Internals.
This one is about COM and interacting with remote objects using a custom python LRPC Client.
STUBborn: Activate and call DCOM objects without proxy: blog.exatrack.com/STUBborn/
ExaTrack retweeted
After nearly 10 years of existence, years of use in production on 10k+ computers.
The new PythonForWindows release is 1.0.0 \o/
This release adds three important things: official python 3 support, full Unicode support for py2/py3 & CI testing on GitHub ! github.com/hakril/PythonForW…
ExaTrack retweeted
Kdrill, an open source tool to check if your kernel is rootkited🔥
A python tool to analyze memory dumps AND live kernel. No dep, py2/3, no symbols 💪
It rebuild on the fly kernel structs and check suspicious modifications (and if patchguard is running 👀)
github.com/ExaTrack/Kdrill
