How A Device to Cloud Architecture Defends Against the SolarWinds Supply Chain Compromise

This report reviews the SolarWinds supply-chain intrusion (SUNBURST/Solorigate) where attackers distributed a trojanized SolarWinds Orion binary that established stealthy C2, enabled privileged access, and facilitated lateral movement and potential data exfiltration; it maps techniques to MITRE ATT&CK, supplies IoCs and hunting queries, and provides defensive and detection recommendations using McAfee products and telemetry.