Collaborate Disseminate
(c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License. Continue reading ISC Stormcast For Thursday, May 5th, 2022 https://isc.sans.edu/podcastdetail.html?id=7994, (Thu, May 5th)
(c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License. Continue reading ISC Stormcast For Wednesday, May 4th, 2022 https://isc.sans.edu/podcastdetail.html?id=7992, (Wed, May 4th)
I&#;x26;#;39;ve been using a PowerShell script since forever that enumerates the patch dates across an AD domain. Yesterday I found a use case where it was broken.
Continue reading Finding the Real “Last Patched” Day (Interim Version), (Tue, May 3rd)
Yesterday I made live some updates to our honeypot. The honeypot has gained popularity, and users have adapted it to different platforms. We continue to work on it, and significant updates will hopefully be ready soon, but for now, I released an update fixing some bugs and, most of all, updated some of the instructions. Thanks to our SANS.edu undergraduate interns for helping with this.
(c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License. Continue reading ISC Stormcast For Tuesday, May 3rd, 2022 https://isc.sans.edu/podcastdetail.html?id=7990, (Tue, May 3rd)
(c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License. Continue reading ISC Stormcast For Monday, May 2nd, 2022 https://isc.sans.edu/podcastdetail.html?id=7988, (Mon, May 2nd)
Version 4.2.1 of YARA was released.
Version 4.2.1 of YARA was released.
In so many penetration tests or assessments, the client gives you a set of subnets and says “go for it”. This all seems reasonable, until you realize that if you have a website, there might be dozens or hundreds of websites hosted there, each only accessible by their DNS name.
Continue reading Using Passive DNS sources for Reconnaissance and Enumeration, (Fri, Apr 29th)