
Threat IntelligenceCase Studies
The VM Next Door: When Threat Actors Build Their Own Blind Spots
Recent DFIR cases have shown that the use to VMs for persistence is a concerning, hard to detect, effective persistence mechanism for threat actors.
Jan 13, 2026·14 min readRead