A quiet suburban mom, a hard-drinking war correspondent and an Arctic researcher were hiding in plain sight, championed by the Kremlin’s No. 1 fan of spy fiction.

I’ve been asked a few times in the past month for tips that I use to troubleshoot YARA-L rules. As I thought about it, I realized this covers a lot of ground because when building detection logic, we ...

In early February 2022, notably just ahead of the Russian invasion of Ukraine, Volexity made a discovery that led to one of the most fascinating and complex incident investigations Volexity had ever w...

Chinese black market operators are openly recruiting government agency insiders, paying them for access to surveillance data and then reselling it online—no questions asked.

GLASSBRIDGE is an umbrella group of four different companies that operate networks of inauthentic news sites and newswire services.

We’ve previously looked at different functions that can be helpful when working with timestamps. For instance, timestamp.get_timestamp can provide various formats for dates and times to be displayed i...

Welcome to a new year, and with it comes a two-part blog on the Chronicle Security Operations platform alert graph. I thought I was going to be able to squeeze it all into a single post, but as I dug further and further, I realized we couldn’t do it justice in a single blog. So, in this first post w...