- Detection engineering
- Date not recovered
IcedID Beacon: hunting, preventing and responding
Hunting queries, preventive controls and response steps for IcedID Beacon activity.
Attribution
Published by the Logpoint security research team, which I led.
I led the research function that produced this work. The byline is the team’s, not mine.
Part of the Emerging Threats series, framed around what a defender does with the analysis: hunt for the activity, prevent the delivery, and respond once it is found.
The original link predates the Guardsix rebrand and has not been re-checked since; logpoint.com URLs now redirect to guardsix.com.
The original
The canonical version is published at logpoint.com. This page is a framing note, not a copy of it.
Open the original