This blog and the associated Github repository discuss the SolarWinds hack.
Posts
-
US Government's attribution for the SolarWinds hack
This post will summarize the US Government’s attribution for the SolarWinds Hack based on information released by the US government and interpreted by third parties.
-
Zero Trust Recommendations
In this post, we will summarize various organizations’ take on zero-trust as a mechanism to protect against hacks similar to the SolarWinds one.
-
Trustwave's News Timeline
In this post, we will summarize news on the SolarWinds hack from Trustwave’s perspective.
-
Security Firms Attacked
In this post, we document the list of Security firms attacked by UNC2452. While many of these firms were breached, some were not.
-
Symantec's News Timeline
In this post, we will summarize news on the SolarWinds hack from Symantec’s perspective.
-
Volexity's News Timeline
In this post, we will summarize news on the SolarWinds hack from Volexity’s perspective.
-
Attacker List and Name Equivalences
Different security companies refer to (presumably) the same attacker using their own naming scheme. In this post, we list the names used by security companies for the SolarWinds hack perpetrators, along with name equivalences where applicable.
-
How was Orion Compromised?
In this post, we track news reports on Orion’s compromise.
-
US Federal Goverment Departments and Agencies Breached
In this post, we document the list of US Federal agencies known to have been breached by the SolarWinds hack.
-
How was SolarWinds Breached?
In this post, we track news reports on the actual breach of SolarWinds that allowed the attackers to implant SUNBURST into Orion.
-
FireEye Breach Discovery
In this post, we document FireEye’s discovery of its breach.
-
CISA's News Timeline
This post will summarize news on the SolarWinds hack from CISA’s (Cybersecurity and Infrastructure Security Agency) perspective.
-
Microsoft's News Timeline
In this post, we will summarize news on the SolarWinds hack from Microsoft’s perspective.
-
SolarWinds' News Timeline
In this post, we will summarize news on the SolarWinds hack from SolarWinds’ perspective.
-
FireEye's News Timeline
In this post, we will summarize news on the SolarWinds hack from FireEye’s perspective.
-
Introduction to the SolarWinds Project
The SolarWinds project seeks to analyze the 2020 SolarWinds hack. The SolarWinds hack appears to be a large-scale hack with several intertwined storylines. During this project, we will attempt to disentangle these storylines, create a picture of that which is known, and outline the unknowns.