Threat Investigation Canvas

Over the last few days, I observed targeted campaigns against Microsoft brand. With multiple feed sources, found 447 unique malicious domains.

Here’s the investigation canvas for one of the malicious domains mapped to a diamond 💎 model -update[.]microsoftlab[.]top

Let’s help cyber defenders visually investigate and collect critical intelligence on malicious infrastructure. 🕵️‍♀️🕵️‍♂️