Case Study
How ThreatConnect® Leverages DNSDB to Track Down the Grizzly (Steppe)
ThreatConnect® leverages DNSDB to track down Grizzly Steppe, a case study in Farsight customer success. In December, the FBI and Department of Homeland Security released a Joint Analysis Report (JAR) detailing Russian cyber-attacks dubbed "GRIZZLY STEPPE – Russian Malicious Cyber Activity." It outlines tools and infrastructure used by Russian civilian and military intelligence services (RIS) to compromise U.S. election-related networks, including government, political, and private sector entities. The JAR serves as a master list of these threats. DomainTools software, through its DNSDB, empowered ThreatConnect® with passive DNS data for historical domain tracking, enabling precise attribution of Grizzly Steppe infrastructure, rapid threat hunting, and enhanced visibility into adversary tac
