Collaborate Disseminate
Errata: It turns out I have missed two advisories when going through the CSIRT sites the first time – I have amended the text and table to reflect this.
Continue reading The xz-utils backdoor in security advisories by national CSIRTs, (Mon, Apr 1st)
(c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License. Continue reading ISC Stormcast For Monday, April 1st, 2024 https://isc.sans.edu/podcastdetail/8918, (Mon, Apr 1st)
(c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License. Continue reading ISC Stormcast For Monday, April 1st, 2024 https://isc.sans.edu/podcastdetail/8918, (Mon, Apr 1st)
Like Xavier (diary entry “Quick Forensics Analysis of Apache logs“), I too often have to analyze client&#;x26;#;39;s log files.
Wireshark release 4.2.4 fixes 1 vulnerability (%%cve:2024-2955%%) and 10 bugs.
Sometimes, you&#;x26;#;xe2;&#;x26;#;x80;&#;x26;#;x99;ve to quickly investigate a webserver logs for potential malicious activity. If you&#;x26;#;39;re lucky, logs are already indexed in real-time in a log management solution and you can automatically launch some hunting queries. If that&#;x26;#;39;s not the case, you can download all logs on a local system or a cloud instance and index them manually. But it&#;x26;#;39;s not always the easiest/fastest way due to the amount of data to process.
Continue reading Quick Forensics Analysis of Apache logs, (Fri, Mar 29th)
(c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License. Continue reading ISC Stormcast For Friday, March 29th, 2024 https://isc.sans.edu/podcastdetail/8916, (Fri, Mar 29th)
(c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License. Continue reading ISC Stormcast For Thursday, March 28th, 2024 https://isc.sans.edu/podcastdetail/8914, (Thu, Mar 28th)
Today, I noticed in our “first seen URL” list, two URLs I didn&#;x26;#;39;t immediately recognize: