vivek@kali:~/blog$ grep -r "threat-intel" ./posts/

#SOC

Security research, ethical hacking tutorials, cybercrime case studies, and threat intelligence from the field.

Salt Typhoon APT Analysis 2025: GhostSpider Malware, US Telecom Breach, and Threat Hunting Queries for SOC Teams CVE-2026-5190
Featured · 11 min read
Salt Typhoon APT Analysis 2025: GhostSpider Malware, US Telecom Breach, and Threat Hunting Queries for SOC Teams
Deep technical analysis of the Salt Typhoon APT campaign that breached nine US telecom carriers and accessed CALEA wiretap systems. Covers GhostSpider malware architecture, DEMODEX rootkit, Cisco IOS…
Jul 29, 2026 APT Analysis
CALEA Chinese APT Cisco IOS XE CVE-2023-20198
Read Full Post →
Volt Typhoon Threat Hunting in 2025: KQL, Splunk, and Sigma Detection Guide for Living-Off-the-Land APT CVE-2026-5188
APT Analysis
Volt Typhoon Threat Hunting in 2025: KQL, Splunk, and Sigma Detection Guide for Living-Off-the-Land APT
A complete threat hunting guide for detecting Volt Typhoon living-off-the-land techniques. Includes verified KQL queries for Microsoft Sentinel,…
14 min
Chinese APT CISA advisory critical infrastructure