Opening Forensia workspaceacquiring
Loading the current evidence view. Navigation and account controls remain available.
Loading recent evidenceacquiring
Threat actors
Loading the current evidence view. Navigation and account controls remain available.
14
techniques
1
software
2,217
corpus matches
profile
Salt Typhoon is a People's Republic of China (PRC) state-backed actor that has been active since at least 2019 and responsible for numerous compromises of network infrastructure at major U.S. telecommunication and internet service providers (ISP).
techniques
14 attributed · most-instrumented first
software
1 malware & tools attributed
JumbledPath
S1206
read this carefully
2,217 corpus matches is not attribution
That count is indicators which exhibit techniques Salt Typhoon is known to use. Many unrelated operators use the same techniques. Treat it as a shared-technique signal for hunting, never as first-party attribution to this group.
indicators exhibiting these techniques
Top by severity: each resolves to its own verdict.
+2 more techniques
showing 30 of 2,217