FBI and CISA publish guide to Living off the Land techniques

CISA, FBI, NSA and other agencies released joint guidance on Living Off The Land (LOTL) techniques and accompanying advisories describing activity attributed to the Chinese APT group Volt Typhoon that used LOTL methods and compromised hundreds of routers to obtain persistent access to U.S. critical infrastructure; the report details observed TTPs, cites Microsoft and international confirmations, and provides defensive detection and hardening recommendations for organizations.