Complimenting the Deep File Inspection (DFI) engine, the InQuest User Interface provides easy event analysis and dynamic Threat Hunting capabilities. The intuitive design leverages the ability to pivot on a wide variety of indicators.

The InQuest Operator can pivot through the attributes of sessions, files, headers, signatures, and more. This feature provides the ability to easily identify threat actors, campaigns, trends, and other instances of attacks on your organization. The usefulness of pivoting while Threat Hunting cannot be overlooked.

Solutions overview

Programmatic Interaction with InQuest Labs via Python

Learn how to use Python to aggregate, download, and utilize IOCs/data from InQuest Labs.

Contact us at [email protected] for an api key.

Read more

Base64 Encoded Regular Expressions for Fun and Profit

Earlier this year, we here at InQuest launched our new InQuest Labs website. Labs is an amazing resource, with a plethora of useful tools and intelligence offerings. Much could be written about the site, and much has been...but not about this part

Read more

csvkit

A suite of utilities for converting to and working with CSV, the king of tabular file formats.

Read more

PAWK

PAWK aims to bring the full power of Python to AWK-like line-processing.

Read more

jq

jq is a lightweight and flexible command-line JSON processor..

Read more

Threat Actor Profile: TA407, the Silent Librarian

Silent Librarian is a prolific, financially motivated actor operating out of Iran. In early 2018, the US Department of Justice indicted nine members of the cybercrime group for hacking, wire fraud, and identity theft..

Read more

Adobe Releases Out-of-Band Security Patches for 82 Flaws in Various Products

Adobe has released security updates for Adobe Acrobat and Reader for Windows and macOS. These updates address critical vulnerabilities. Successful exploitation could lead to arbitrary code execution in the context of the current user.

Read more

CONNECTING THE DOTS: Exposing the arsenal and methods of the Winnti Group

This report describes in detail some of the new malware used by this group against the organizations they target. Another one of their backdoors, ShadowPad, was also updated recently. This report will also expose the new techniques they use to hide their payloads.

Read more