{"id":39202,"date":"2021-01-19T20:42:01","date_gmt":"2021-01-19T20:42:01","guid":{"rendered":"https:\/\/www.threatshub.org\/blog\/fireeye-publishes-details-of-solarwinds-hacking-techniques-gives-out-free-tool-to-detect-signs-of-intrusion\/"},"modified":"2021-01-19T20:42:01","modified_gmt":"2021-01-19T20:42:01","slug":"fireeye-publishes-details-of-solarwinds-hacking-techniques-gives-out-free-tool-to-detect-signs-of-intrusion","status":"publish","type":"post","link":"https:\/\/www.threatshub.org\/blog\/fireeye-publishes-details-of-solarwinds-hacking-techniques-gives-out-free-tool-to-detect-signs-of-intrusion\/","title":{"rendered":"FireEye publishes details of SolarWinds hacking techniques, gives out free tool to detect signs of intrusion"},"content":{"rendered":"

Any organizations that used the backdoored SolarWinds network-monitoring software should take another look at their logs for signs of intrusion in light of new guidance and tooling.<\/p>\n

In an update<\/a> and white paper<\/a> [PDF] released on Tuesday, FireEye warned that the hackers<\/a> \u2013 which intelligence services and computer security outfits have concluded<\/a> were state-sponsored Russians \u2013 had specifically targeted two groups of people: those with access to high-level information, and sysadmins.<\/p>\n