Final Case Studies

Alert (AA22-103A) APT Cyber Tools Targeting ICS/SCADA Devices

https://www.cisa.gov/uscert/ncas/alerts/aa22-103a

INCONTROLLER: New State-Sponsored Cyber Attack Tools Target Multiple Industrial Control Systems

https://www.mandiant.com/resources/incontroller-state-sponsored-ics-tool

Alert (AA21-042A) Compromise of U.S. Water Treatment Facility

https://www.cisa.gov/uscert/ncas/alerts/aa21-042a

SolarWinds - U.S. Senate Intelligence Hearing

https://www.intelligence.senate.gov/hearings/open-hearing-hearing-hack-us-networks-foreign-adversary

Alert (AA20-352A) Advanced Persistent Threat Compromise of Government Agencies, Critical Infrastructure, and Private Sector Organizations

https://www.cisa.gov/uscert/ncas/alerts/aa20-352a

EMERGENCY DIRECTIVE 21-02 - MITIGATE MICROSOFT EXCHANGE ON-PREMISES PRODUCT VULNERABILITIES

https://www.cisa.gov/emergency-directive-21-02

Alert (AA21-062A) Mitigate Microsoft Exchange Server Vulnerabilities

https://www.cisa.gov/uscert/ncas/alerts/aa21-062a

Operation Exchange Marauder: Active Exploitation of Multiple Zero-Day Microsoft Exchange Vulnerabilities

https://www.volexity.com/blog/2021/03/02/active-exploitation-of-microsoft-exchange-zero-day-vulnerabilities/

ProxyLogon The latest pre-authenticated Remote Code Execution vulnerability on Microsoft Exchange Server

https://proxylogon.com/

Shodan Report

https://www.shodan.io/search/report?query=http.title%3Aoutlook+exchange