Collaborate Disseminate
A colleague asked me about Sysmon&#;x26;#;39;s event ID 13 RegistryEvent (Value Set). They wanted to know if binary data could be recorded in event 13.
Continue reading Sysmon’s RegistryEvent (Value Set), (Mon, Apr 18th)
(c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License. Continue reading ISC Stormcast For Monday, April 18th, 2022 https://isc.sans.edu/podcastdetail.html?id=7968, (Mon, Apr 18th)
I made a video for yesterday&#;x26;#;39;s diary entry “Office Protects You From Malicious ISO Files“.
Continue reading Video: Office Protects You From Malicious ISO Files, (Sun, Apr 17th)
A couple of weeks ago, Johannes gave me a malicious ISO file he had received: an ISO file containing a PE file.
Continue reading Office Protects You From Malicious ISO Files, (Sat, Apr 16th)
(c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License. Continue reading ISC Stormcast For Friday, April 15th, 2022 https://isc.sans.edu/podcastdetail.html?id=7966, (Fri, Apr 15th)
[If your main concern is that you do not have time to apply the April update, stop wasting more time reading this (or anything else about CVE-2022-26809) and start patching]
Continue reading An Update on CVE-2022-26809 – MSRPC Vulnerabliity – PATCH NOW, (Thu, Apr 14th)
(c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License. Continue reading ISC Stormcast For Thursday, April 14th, 2022 https://isc.sans.edu/podcastdetail.html?id=7964, (Thu, Apr 14th)
The current war in Ukraine has from the beginning had a strong âcyberâ component to it. Even in the lead up to the actual invasion of Russian forces into Ukrainian territories there have been significant attacks made against Ukrainian systems, most notably with the use of the WhisperGate wiper[1], and offensive activities targeting Ukraine’s infrastructure have hardly abated since then[2].
Continue reading How is Ukrainian internet holding up during the Russian invasion?, (Wed, Apr 13th)
(c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License. Continue reading ISC Stormcast For Wednesday, April 13th, 2022 https://isc.sans.edu/podcastdetail.html?id=7962, (Wed, Apr 13th)
This month we got patches for 145 vulnerabilities. Of these, 10 are critical, 1 was previously disclosed, and one is already being exploited according to Microsoft.
Continue reading Microsoft April 2022 Patch Tuesday, (Tue, Apr 12th)