Hi,
I have three questions regarding the recent Sunburst/Solarwinds Supply chain breach and the recently discovered Supernova breach:
1) Re Sunburst has McAfee included the IoCs for sunburst in its GTI threatfeed and does it have any more recommendations such as correlation rule updates in Content Packs etc
2) Regarding the FireEye Red Team tools that were stolen does McAfee have IoCs for these in its threatfeed and does it have any more recommendations such as correlation rule updates in Content Packs etc I note that FireEye have provided information in
https://github.com/fireeye/red_team_tool_countermeasures
From what I can see some of this information is more actionable than others.
3) Re Supernova does McAfee have IoCs for these in its threatfeed and does it have any more recommendations such as correlation rule updates in Content Packs etc
Rgds,
Edward