A Threat Actor Abuses Another Free Trial

T1Covered by 1 source · first reported by Huntress at 06 Mar, 21:00 UTC

A deep dive into a threat actor who exploited SolarWinds Web Help Desk, abused an Elastic Cloud SIEM free trial for exfiltration and triage, revealing key infrastructure.