DShield Sensor Monitoring with a Docker ELK Stack [Guest Diary], (Sat, Aug 12th)
[This is a Guest Diary by Scott Jensen]
Continue reading DShield Sensor Monitoring with a Docker ELK Stack [Guest Diary], (Sat, Aug 12th)
Author Archives: SANS Internet Storm Center, InfoCON: green
Show me All Your Windows!, (Fri, Aug 11th)
It&#;x26;#;39;s a key point for attackers to implement anti-debugging and anti-analysis techniques. Anti-debugging means the malware will try to detect if it&#;x26;#;39;s being debugged (executed in a debugger or its execution is slower than expected). Anti-analysis refers to techniques to detect if the malware is detonated in a sandbox or by a malware analyst. In such cases, tools run in parallel with the malware to collect live data (packets, API calls, files, or registry activity).
ISC Stormcast For Friday, August 11th, 2023 https://isc.sans.edu/podcastdetail/8612, (Fri, Aug 11th)
(c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License. Continue reading ISC Stormcast For Friday, August 11th, 2023 https://isc.sans.edu/podcastdetail/8612, (Fri, Aug 11th)
Some things never change ? such as SQL Authentication ?encryption?, (Thu, Aug 10th)
Fat client applications running on (usually) Windows are still extremely common in enterprises. When I look at internal penetration tests or red team engagements for any larger enterprise, it is almost 100% guaranteed that one will stumble upon such an application.
Continue reading Some things never change ? such as SQL Authentication ?encryption?, (Thu, Aug 10th)
ISC Stormcast For Thursday, August 10th, 2023 https://isc.sans.edu/podcastdetail/8610, (Thu, Aug 10th)
(c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License. Continue reading ISC Stormcast For Thursday, August 10th, 2023 https://isc.sans.edu/podcastdetail/8610, (Thu, Aug 10th)
ISC Stormcast For Wednesday, August 9th, 2023 https://isc.sans.edu/podcastdetail/8608, (Wed, Aug 9th)
(c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License. Continue reading ISC Stormcast For Wednesday, August 9th, 2023 https://isc.sans.edu/podcastdetail/8608, (Wed, Aug 9th)
Microsoft August 2023 Patch Tuesday, (Tue, Aug 8th)
This month we got patches for 88 vulnerabilities. Of these, 6 are critical, and 2 are already being exploited, according to Microsoft.
Continue reading Microsoft August 2023 Patch Tuesday, (Tue, Aug 8th)
ISC Stormcast For Tuesday, August 8th, 2023 https://isc.sans.edu/podcastdetail/8606, (Tue, Aug 8th)
(c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License. Continue reading ISC Stormcast For Tuesday, August 8th, 2023 https://isc.sans.edu/podcastdetail/8606, (Tue, Aug 8th)
Update: Researchers scanning the Internet, (Mon, Aug 7th)
We have been tracking researchers scanning the Internet for open ports or vulnerabilities for a few years. These groups often show up in our “top 10” lists. We do not make any general recommendations to block these IPs but we want to give you the information you need to make this decision for your network.
Continue reading Update: Researchers scanning the Internet, (Mon, Aug 7th)
ISC Stormcast For Monday, August 7th, 2023 https://isc.sans.edu/podcastdetail/8604, (Mon, Aug 7th)
(c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License. Continue reading ISC Stormcast For Monday, August 7th, 2023 https://isc.sans.edu/podcastdetail/8604, (Mon, Aug 7th)