Cybersecurity

Emulation Volt Typhoon

Volt Typhoon (Vanguard Panda, PRC) adversary-emulation playbook — edge-device initial access, living-off-the-land-only operations, NTDS/credential theft, long-dwell pre-positioning toward critical infrastructure, multi-hop proxy egress. Use when emulating stealthy LOTL pre-positioning. Triggers on: 'emulate Volt Typhoon', 'Vanguard Panda', 'BRONZE SILHOUETTE', 'living off the land', 'edge device', 'pre-positioning', 'critical infrastructure persistence'.

Publisher / source

BitterSecurity/Decepticon (found on GitHub top repositories)

Upstream record

BitterSecurity/Decepticon

Version

Version 1

Published

2026-11-04

Publication review

Approved for publication · recorded passed scan 2026-11-04

Content fingerprint

40fe3aa41ff4b304475cd37bad70ee3cb668a31dcf0524e64d051387d3b9a7ae