Collaborate Disseminate
(c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License. Continue reading ISC Stormcast For Thursday, August 11th, 2022 https://isc.sans.edu/podcastdetail.html?id=8126, (Thu, Aug 11th)
I know I have written about this same attack before &#;x26;#;x5b;see here&#;x26;#;x5d;. But well, it just doesn&#;x26;#;39;t stop. There has been a continuous stream of these requests to our sensors ever since. Some of the currently preferred queries used:
Continue reading And Here They Come Again: DNS Reflection Attacks, (Wed, Aug 10th)
(c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License. Continue reading ISC Stormcast For Wednesday, August 10th, 2022 https://isc.sans.edu/podcastdetail.html?id=8124, (Wed, Aug 10th)
This month we got patches for 141 vulnerabilities. Of these, 17 are critical, 2 were previously disclosed, and one is already being exploited, according to Microsoft.
Continue reading Microsoft August 2022 Patch Tuesday, (Tue, Aug 9th)
(c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License. Continue reading ISC Stormcast For Tuesday, August 9th, 2022 https://isc.sans.edu/podcastdetail.html?id=8122, (Tue, Aug 9th)
My recent obsession has been creating all of my logs in JSON format. The reasons for that are pretty simple: I like to log with Elasticsearch, so creating JSON formatted logs makes working with Elasticsearch easier. Command line tools like &#;x26;#;39;jq&#;x26;#;39; make parsing JSON logs on the command line simpler than “good old” standard Syslog format and a string of &#;x26;#;39;cut,&#;x26;#;39; &#;x26;#;39;sed,&#;x26;#;39; and &#;x26;#;39;awk&#;x26;#;39; commands.
(c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License. Continue reading ISC Stormcast For Monday, August 8th, 2022 https://isc.sans.edu/podcastdetail.html?id=8120, (Mon, Aug 8th)
(c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License. Continue reading ISC Stormcast For Friday, August 5th, 2022 https://isc.sans.edu/podcastdetail.html?id=8118, (Fri, Aug 5th)
Earlier this week, the global Forum of Incident Response and Security Teams â or FIRST, as it is commonly known â published a new version of its Traffic Light Protocol standard[1]. The Traffic Light Protocol (TLP) is commonly used in the incident response community, as well as in the wider security space, to quickly and in a standardized way indicate any limitations on further sharing of any transferred information.
(c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License. Continue reading ISC Stormcast For Thursday, August 4th, 2022 https://isc.sans.edu/podcastdetail.html?id=8116, (Thu, Aug 4th)