SUNBURST SolarWinds DGA domain decoding script analysis and victim reconnaissance telemetry graph
Threat Intelligence

Intel Sharing Metrics

I pulled some metrics from my threat intelligence sharing service to generate cute charts and graphs. If you want to keep up to date, keep an eye on

Key takeaways
  • SUNBURST demonstrated that attackers can turn trusted build pipelines into global cyber weapons.
  • Domain Generation Algorithms (DGA) in enterprise supply chain payloads encode internal victim identity.
  • Decoded telemetry sharing across the security community is the fastest way to map adversary blast radius.

I pulled some metrics from my threat intelligence sharing service to generate cute charts and graphs. If you want to keep up to date, keep an eye on https://intelmetrics.haxx.ninja .

Sunburst malware usage and behavior chart

Sunburst domain attributes breakdown

Sunburst domain tag tree hierarchy