Collaborate Disseminate
(c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License. Continue reading ISC Stormcast For Thursday, November 11th, 2021 https://isc.sans.edu/podcastdetail.html?id=7752, (Thu, Nov 11th)
Shadow IT is a real problem in many organizations. Behind this term, we speak about pieces of hardware or software that are installed by users without the approval of the IT department. In many cases, shadow IT is used because internal IT teams are not able to provide tools in time. Think about a user who needs to safely exchange files with partners and no tool is available. A change request will be created to deploy one but, with the lack of (time|money|resources), the project will take time. Unfortunately, the user needs the tool now, so an alternative path will be used like a cloud file sharing service.
Continue reading Shadow IT Makes People More Vulnerable to Phishing, (Wed, Nov 10th)
(c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License. Continue reading ISC Stormcast For Wednesday, November 10th, 2021 https://isc.sans.edu/podcastdetail.html?id=7750, (Wed, Nov 10th)
(c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License. Continue reading ISC Stormcast For Wednesday, November 10th, 2021 https://isc.sans.edu/podcastdetail.html?id=7750, (Wed, Nov 10th)
This month we got patches for 55 vulnerabilities. Of these, 6 are critical, 4 were previously disclosed and 2 are being exploited according to Microsoft.
Continue reading Microsoft November 2021 Patch Tuesday, (Tue, Nov 9th)
(c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License. Continue reading ISC Stormcast For Tuesday, November 9th, 2021 https://isc.sans.edu/podcastdetail.html?id=7748, (Tue, Nov 9th)
As security practitioners, we give daily advice to our customers to increase the security level of their infrastructures. Install this tool, enable this feature, disable this function, etc. When enabled, these techniques can also be (ab)used by attackers to perform nasty actions.
Continue reading (Ab)Using Security Tools & Controls for the Bad, (Mon, Nov 8th)
(c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License. Continue reading ISC Stormcast For Monday, November 8th, 2021 https://isc.sans.edu/podcastdetail.html?id=7746, (Mon, Nov 8th)
I made a video showing the steps to take to decrypt Cobalt Strike traffic that I covered in my diary entry “Decrypting Cobalt Strike Traffic With Keys Extracted From Process Memory“.
I made a video showing the steps to take to decrypt Cobalt Strike traffic that I covered in my diary entry “Decrypting Cobalt Strike Traffic With Keys Extracted From Process Memory“.