my tweets are severely limited by my lack of understanding of what I am doing.
Businesses saying that with Petya are misinformed or lying. The MeDocs updater Trojan was a RAT with data exfil.https://twitter.com/susitero/status/892458010605490177 …
-
Full pcap would help :)
Yep if you logged all network traffic since earlier this year, could extract the cookie headers and decode the implant format you would know
