Ransomware Tool Matrix Update: Community Reports
Introduction The Ransomware Tool Matrix continues to be a useful passion project that I am happy to continue maintaining. One piece of common feedback I've received for the Ransomware Tool Matrix was that individuals would like to contribute their observations to it, but do not have public links they can cite (such as a formal blog post on a company website). Therefore, I came up with a plan to make a reporting template to help with this. What are Community Reports? Individuals can now share what tools they have seen various ransomware groups, affiliates, or initial access brokers (IABs) use via the new Community Report Template. The level of detail provided is the contributor's choice. The more verifiable information shared, the increased level of reliability and credibility. You can view the current list of Community Reports on GitHub here . Why the need for Community Reports? Most of the sources of CTI about ransomware TTPs comes from open source reports by organisation...