Active Directory Federation Services (AD FS)

In December 2020, FireEye uncovered and publicly disclosed a widespread attacker campaign, otherwise known as the SolarWinds or Sunburst hack, is being tracked as UNC2452. In some, but not all, of the intrusions associated with this campaign where Mandiant has visibility, the attacker used their access to on-premisesRead More…