During the last week we hosted an Active Defense for Adversary Pursuit training at Naivasha. The training focused on how to detect TTPs, used by the local adversaries in East and Central Africa. We used a CTI report that was handed to several Financial institutions on 13th December to enumerate attacks by these groups and how to fight them out of the infrastructure. That CTI Report was not shared with all banks but several had it and we have noted these tools are still active in our infrastructures, and hence deciding to take it public.

This CTI Report is number 103 released on December 13th 2019 and can be downloaded on this link.

This CTI report also contains I&Ws (Indicators and Warnings) of breaches that actually occurred on December, January 2020 and Feb. This CTI was used for the training at Naivasha and the link below contains the Declassified version of the class.