Application Security
Detecting and Mitigating Password Guessing (T1110.001)
Password guessing hits one account with many tries against SSH, RDP, SMB, cloud apps and more. See the log signals and the controls MITRE recommends.
Oct 18, 20264 min read
Resources
Supply Chain Security, in plain English.
Deep dives, practical guides, and incident analyses from engineers who build Safeguard. No fluff, no vendor FUD — just what you need to ship secure software.
Filter
Articles
RSS feedApplication Security
Detecting and Mitigating Brute Force Attacks (T1110)
Guessing, spraying, stuffing and cracking passwords all fall under brute force. Learn the four variants, the log signals to watch, and the controls that work.
Oct 18, 20265 min read
Application Security
Detecting and Mitigating Native API Abuse (T1106)
Attackers call low-level operating system APIs and syscalls to run code and dodge sensors. See what MITRE documents and how application control and ASR rules help.
Oct 18, 20264 min read
Application Security
Detecting and Mitigating Ingress Tool Transfer (T1105)
How attackers pull tools into a compromised environment with built-in utilities and package managers, and how egress filtering and process-to-network logging catch it.
Oct 18, 20266 min read
Application Security
Detecting and Mitigating Multi-Stage C2 Channels (T1104)
Attackers split command and control into stages hosted on separate infrastructure. Here is what MITRE documents and how to catch the hand-off between stages.
Oct 18, 20263 min read
Application Security
Detecting and Mitigating One-Way Web Service C2 (T1102.003)
Some malware only reads instructions from a popular web service and never replies there. Learn what MITRE says about the pattern and how to spot it.
Oct 18, 20262 min read
Application Security
Detecting and Mitigating Two-Way Web Service C2 (T1102.002)
Malware can take commands and return output through comments, documents or posts on a popular web service. See what MITRE documents and how to detect it.
Oct 18, 20262 min read
Application Security
Detecting and Mitigating Dead Drop Resolvers (T1102.001)
A dead drop resolver is content on a trusted web service that points malware to its real command server. Here is how it works and how to limit and spot it.
Oct 18, 20263 min read
Application Security
Detecting and Mitigating Web Service Command and Control (T1102)
Attackers hide command and control inside popular web and cloud services. Learn what MITRE documents, which signals matter, and how proxy policy limits it.
Oct 18, 20265 min read
Stay informed
Weekly insights on software supply chain security, delivered to your inbox.
Self-healing security runs on Safeguard.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.