Drawing on insights from 582 full-spectrum DFIR investigations, Mjolnir Security reveals the uncharted forensic landscape of Windows 11. This intelligence briefing moves beyond legacy artifacts to expose the critical evidence sources modern adversaries leverage, including the Windows Subsystem for Android (WSA), covert channels in Microsoft Teams, and the persistent ledger [...]
APT28, also known as Fancy Bear, has returned with a global espionage campaign that security researchers have dubbed “RoundPress.” Operating under the Russian GRU’s cyber unit (often linked to military intelligence), APT28 has a long history of high-impact intrusions — from the 2016 U.S. election interference to attacks on NATO ...
Welcome to Skuggaheimar — the shadow worlds where threat actors dwell, and malware spreads like mythic poison through unseen paths. In this series, Mjolnir Security unearths the cultural patterns, motivations, and behaviors behind modern cyber adversaries. Through the lens of digital anthropology, we map the stories, tactics, and symbolic codes ...
Drawing on insights from 582 full-spectrum DFIR investigations, Mjolnir Security reveals the uncharted forensic landscape of Windows 11. This intelligence briefing moves beyond legacy artifacts to expose the critical evidence sources modern adversaries leverage, including the Windows Subsystem for Android (WSA), covert channels in Microsoft Teams, and the persistent ledger [...]
