Cyberattack, Detection, Adversary Engagement, Threat Intelligence, Threat Informed Defense.
December 31, 2023: First Evidence of Intrusion The adversary deployed the ROOTROT web shell (as described by Mandiant) on an external-facing Ivanti appliance, gaining initial access to NERVE, a MITRE prototyping network. This early intrusion leveraged multiple Ivanti Connect Secure zero-day