<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"><channel><title>AllTech Incident Reports</title><description>Write-ups of real alerts and intrusions the AllTech SOC worked, from the first signal to containment, with the details that matter changed.</description><link>https://askalltech.com</link><language>en-us</language><item><title>Fileless PowerShell Attack Behind Node.js</title><link>https://askalltech.com/insights/fileless-powershell-nodejs-backdoor</link><guid isPermaLink="true">https://askalltech.com/insights/fileless-powershell-nodejs-backdoor</guid><description>A ClickFix-style attack on a Cache Valley business skipped the disk entirely: a memory-only PowerShell payload that dropped a signed-runtime backdoor.</description><pubDate>Tue, 18 Aug 2026 00:00:00 GMT</pubDate><category>Incident Report</category><category>incident response</category><category>cybersecurity</category><category>case study</category><category>clickfix</category><category>managed soc</category></item><item><title>What a ClickFix Attack Looks Like From the Inside</title><link>https://askalltech.com/insights/clickfix-police-department</link><guid isPermaLink="true">https://askalltech.com/insights/clickfix-police-department</guid><description>A high-severity alert at a small-town Utah police department began with a pasted command. How it was detected, investigated, and closed in 15 minutes.</description><pubDate>Fri, 07 Aug 2026 00:00:00 GMT</pubDate><category>Incident Report</category><category>incident response</category><category>cybersecurity</category><category>case study</category><category>managed soc</category></item></channel></rss>