Person
Andrew Schwartz
- First Reported
- Sep 8, 2026
- Latest Reported
- Sep 23, 2026
Reported Context (3)
- Huntress author who tested and documented the AppX-host OAuth token theft technique. Researcher Demonstrates OAuth Token Theft Through a Sideloaded Windows AppX Host
- Article author who describes the server-side SLC extraction and certificate forgery research and reports porting prior client-side attack code into SharpRMS. AD RMS Root-Key Extraction Can Permanently Expose Protected Documents
- Author of the AD RMS reconnaissance and architecture research. AD RMS Recon Shows How Domain Users Can Map Protected Content and Service-Group Boundaries
People (12)
MITRE ATT&CK (11)
Vendors (1)
Products (13)
Tools (10)
Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.