LOCKBIT

Secureworks report on Lockbit learning

Across twenty-plus incident response engagements, Secureworks CTU researchers observed multiple affiliates of LockBit ransomware-as-a-service (RaaS) attempt to extort victims through ransomware deployments, data theft or a combination of the two. Our report aims to shed light on their tactics, techniques and procedures (TTPs) to help you defend against the ransomware threat
Link:

https://www.secureworks.com/blog/lockbit-in-action