SolarWinds Supply Chain Attack — Case Study

Analyzed APT29's 2020 supply-chain compromise using the MITRE ATT&CK framework — mapping Golden SAML attacks, lateral movement, and C2 evasion across 18,000+ affected organizations through the CIA Triad and defense-in-depth lenses.

What I did

• Studied APT29's 2020 compromise of the SolarWinds software supply chain.
• Mapped the attackers' techniques to the MITRE ATT&CK framework, including Golden SAML attacks, lateral movement, and C2 evasion.
• Assessed the impact across more than 18,000 affected organizations.
• Evaluated the breach through the CIA Triad (confidentiality, integrity, availability) and defense-in-depth.

Techniques mapped

Skills applied