Tweetovi
- Tweetovi, trenutna stranica.
- Tweetovi i odgovori
- Medijski sadržaj
Blokirali ste korisnika/cu @cyb3rops
Jeste li sigurni da želite vidjeti te tweetove? Time nećete deblokirati korisnika/cu @cyb3rops
-
Prikvačeni tweet
I can now issue trial vouchers for our portable multi-platform scanner THOR 10 If you work in
#DFIR or a#SOC team, ping me via@LinkedIn for a voucher: https://www.linkedin.com/feed/update/urn:li:activity:6600059907867713536/ …pic.twitter.com/5iQG9fzsjS
Hvala. Twitter će to iskoristiti za poboljšanje vaše vremenske crte. PoništiPoništi -
Guide on upgrading your SSH keys to Ed25519https://blog.g3rt.nl/upgrade-your-ssh-keys.html …
Hvala. Twitter će to iskoristiti za poboljšanje vaše vremenske crte. PoništiPoništi -
Florian Roth proslijedio/la je Tweet
Getting DNS Client Cached Entries with CIM/WMIhttps://www.darkoperator.com/blog/2020/1/14/getting-dns-client-cached-entries-with-cimwmi …
Hvala. Twitter će to iskoristiti za poboljšanje vaše vremenske crte. PoništiPoništi -
Florian Roth proslijedio/la je Tweet
This abomination is the regex for validating IPv6 addresses: https://ihateregex.io/expr/ipv6 pic.twitter.com/odoSJGZLUt
Hvala. Twitter će to iskoristiti za poboljšanje vaše vremenske crte. PoništiPoništi -
BayWorld event, Cyber Attack Against Foreign Trade Industryhttps://blog.360totalsecurity.com/en/bayworld-event-cyber-attack-against-foreign-trade-industry/ …
Hvala. Twitter će to iskoristiti za poboljšanje vaše vremenske crte. PoništiPoništi -
Florian Roth proslijedio/la je Tweet
Need a
#ZeroTrust Reference Architecture? Check out this one showing how@Microsoft technology enables this strategy/access model. Slide 14 of CISO Workshop Module 3@ajohnsocyber@MalwareJake@_sarahyo@RavivTamir@JohnLaTwC#Cybersecurity https://docs.microsoft.com/en-us/microsoft-365/security/office-365-security/ciso-workshop-module-3 …pic.twitter.com/t2eChLzW8r
Hvala. Twitter će to iskoristiti za poboljšanje vaše vremenske crte. PoništiPoništi -
Florian Roth proslijedio/la je Tweet
Raytheon engineer arrested for taking US missile defense data to China | ZDNethttps://www.zdnet.com/article/raytheon-engineer-arrested-for-taking-us-missile-defense-data-to-china/ …
Hvala. Twitter će to iskoristiti za poboljšanje vaše vremenske crte. PoništiPoništi -
RDG Scanner for Vulnerability CVE-2020-0609 & CVE-2020-0610 - multi-threaded - CIDR support https://github.com/2d4d/rdg_scanner_cve-2020-0609 …pic.twitter.com/8yqu4nD7Te
Hvala. Twitter će to iskoristiti za poboljšanje vaše vremenske crte. PoništiPoništi -
Florian Roth proslijedio/la je Tweet
My Sysmon config sees the shell/open reg key being written, if you want to alert on this. /cc
@cyb3ropshttps://twitter.com/teamcymru/status/1224085088851447808 …
Prikaži ovu nitHvala. Twitter će to iskoristiti za poboljšanje vaše vremenske crte. PoništiPoništi -
Florian Roth proslijedio/la je Tweet
1\ I've written a little compiler to ship ML models as standalone Yara rules, and done proof of concept detectors for Macho-O, RTF files, and powershell scripts. So far I have decision trees, random forests, and logistic regression (LR) working. https://github.com/inv-ds-research/yaraml_rules …pic.twitter.com/sfuXEkHeNO
Prikaži ovu nitHvala. Twitter će to iskoristiti za poboljšanje vaše vremenske crte. PoništiPoništi -
Florian Roth proslijedio/la je Tweet
SettingSyncHost.exe as a LolBin http://www.hexacorn.com/blog/2020/02/02/settingsynchost-exe-as-a-lolbin/ …
#LOLBIN cd %TEMP% & c:\windows\system32\SettingSyncHost.exe -LoadAndRunDiagScript foopic.twitter.com/dOM4EHq4ZuHvala. Twitter će to iskoristiti za poboljšanje vaše vremenske crte. PoništiPoništi -
Florian Roth proslijedio/la je Tweet
Cutter v1.10.1 released!
Tomorrow, GitHub will capture and store every repository in an archival facility deep in an Arctic mountain. 
Today, we release a special edition for the benefit of future mankind and other beings
Get it @ https://cutter.re
Highlights >>pic.twitter.com/SjYVWJsi7I
Prikaži ovu nitHvala. Twitter će to iskoristiti za poboljšanje vaše vremenske crte. PoništiPoništi -
Florian Roth proslijedio/la je Tweet
My team is reading this book, and some are highlighting portions that I would debate. For example, page 81 discusses "offensive methods" that "become public and disappear." That may be the view of a top tier foreign intelligence organization, but is largely not true for others.https://twitter.com/QW5kcmV3/status/1180901800171511811 …
Prikaži ovu nitHvala. Twitter će to iskoristiti za poboljšanje vaše vremenske crte. PoništiPoništi -
ICYMI
@SOC_Prime developed an online tool to convert Sigma rules into the query language of your choice https://uncoder.io/ FAQs What if my field values differ from the standard? https://github.com/Neo23x0/sigma/wiki/Converter-Tool-Sigmac … What if I get too many false positives? https://github.com/Neo23x0/sigma/blob/master/README.md#translate-only-rules-of-level-high-or-critical …pic.twitter.com/elhs1s2CFz
Hvala. Twitter će to iskoristiti za poboljšanje vaše vremenske crte. PoništiPoništi -
Florian Roth proslijedio/la je Tweet
2020-01-31:

#Winnti#APT Targets#HongKong Universities

#ShadowPad|XOR Decoder|#Yara rule apt_win32_winnti_xordec { strings: $decoder_xor = { 8B C3 C1 E3 10 C1 E8 10 03 D8 6B DB 77 83 C3 13 } condition: $decoder_xor } Ref
https://twitter.com/ESETresearch/status/1223191846970634240 …pic.twitter.com/KmdkYmureE
Hvala. Twitter će to iskoristiti za poboljšanje vaše vremenske crte. PoništiPoništi -
Florian Roth proslijedio/la je Tweet
For those of you using a NV GPU with Volta or Turing chipset, listen up! We hacked our way into the post-48k GPU shared memory region. This improved bcrypt cracking performance by an average of 25%. For instance a GTX2080Ti improved from 42116 H/s to 54770 H/spic.twitter.com/jm6gICcu9h
Prikaži ovu nitHvala. Twitter će to iskoristiti za poboljšanje vaše vremenske crte. PoništiPoništi -
Sigma rule to detect
#Winnti malware process starts as described in ESET's recent blog post on a campaign against HK universities (derived from sandbox reports - won't share them yet) Sigma Rule https://github.com/Neo23x0/sigma/blob/master/rules/windows/process_creation/win_apt_winnti_mal_hk_jan20.yml … Report https://www.welivesecurity.com/2020/01/31/winnti-group-targeting-universities-hong-kong/ …pic.twitter.com/NOF1Flx5i0
Hvala. Twitter će to iskoristiti za poboljšanje vaše vremenske crte. PoništiPoništi -
If you need a name for a new malware, threat group operation or hack tool, check this Imgur gallery with 29 posters showing deities, monsters and heroes of different mythologies https://imgur.com/gallery/AlCZXEi pic.twitter.com/h2D93YJU6m
Hvala. Twitter će to iskoristiti za poboljšanje vaše vremenske crte. PoništiPoništi -
Florian Roth proslijedio/la je Tweet
#FFVT Follow Friday on interesting VT Submitter Ids. My first is ec31b410 uploading from Denmark. Examples in this threadpic.twitter.com/zHCeN0GuW9
Prikaži ovu nitHvala. Twitter će to iskoristiti za poboljšanje vaše vremenske crte. PoništiPoništi -
Could someone at
@virustotal explain what that VHash is? I find it more and more useful. Is it a secret sauce or something you plan to publish some day?pic.twitter.com/iHZ8xbKVfB
Hvala. Twitter će to iskoristiti za poboljšanje vaše vremenske crte. PoništiPoništi -
Winnti Group targeting universities in Hong Kong | by
@ESET@mathieutartarehttps://www.welivesecurity.com/2020/01/31/winnti-group-targeting-universities-hong-kong/ …Hvala. Twitter će to iskoristiti za poboljšanje vaše vremenske crte. PoništiPoništi
Čini se da učitavanje traje već neko vrijeme.
Twitter je možda preopterećen ili ima kratkotrajnih poteškoća u radu. Pokušajte ponovno ili potražite dodatne informacije u odjeljku Status Twittera.