@hindsig.htI found www.elastic.co/security-lab... interesting for a few reasons:
- the install vector for the malicious browser extension is pretty neat, and
- the "customer id" is a UUIDv1 and Unfurl can extract the timestamp
Unfurl on the download URL: hindsig.ht/unfurl/?url=...
