Bluepurple Pulse: week ending April 10th

If there was cyber version of Richard Scarry's Busy Town Busy People this would be it..

Welcome to the weekly highlights and analysis of the blueteamsec subreddit (and my wider reading).

Operationally this week lots of bits and bobs including a detection firing for a threat actor I lovingly call LITTLE SNOWFLAKE. The threat actors you closely track become almost like virtual pets i.e. you get a little dopamine hit when your tracking detections fire and you know they are alive. Other than that you will see there is *a lot* going in the world of cyber and thus a bumper edition.

In the high-level this week:

• US Establishment of the Bureau of Cyberspace and Digital Policy - we covered this when it was announced and here are the details. There will be three policy units International Cyberspace Security, International Information and Communications Policy, and Digital Freedom (say that last bit in Mel Gibson a Braveheart voice).

• US Justice Department Announces Court-Authorized Disruption of Botnet Controlled by the Russian Federation’s Main Intelligence Directorate (GRU) - US go…