Cyberattack, Detection, Adversary Engagement, Threat Intelligence, Threat Informed Defense.
analysis of system memory the adversary used the Ivanti help website as a staging area for data exfiltration. They made requests to /dana-na/help/ on the Ivanti appliance, where a base64 encoded logo.gif file was an exact copy of a log file on the system which the adversary exfiltrated. The