Collaborate Disseminate
(c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License. Continue reading ISC Stormcast For Monday, August 30th, 2021 https://isc.sans.edu/podcastdetail.html?id=7650, (Mon, Aug 30th)
Since JSON has become more prevalent as a data service, unfortunately, it isn&#;x26;#;39;t at all BASH friendly and manipulating JSON data at the command line with REGEX (i.e. sed, grep, etc.) is cumbersome and difficult to get the output I want.
Continue reading Filter JSON Data by Value with Linux jq, (Sun, Aug 29th)
(c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License. Continue reading ISC Stormcast For Friday, August 27th, 2021 https://isc.sans.edu/podcastdetail.html?id=7648, (Fri, Aug 27th)
(c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License. Continue reading ISC Stormcast For Thursday, August 26th, 2021 https://isc.sans.edu/podcastdetail.html?id=7646, (Thu, Aug 26th)
Update/errata 9/7/2021: Though there are indeed many domains with an SPF record in the CZ ccTLD, the numbers mentioned bellow turned out to be incorrect, due to a calculation error on the part of my source, which only came to light late last night. It turns out that at the time of the scan, there were approximately 1.1 million domains without an SPF record, and only about 300k had the record set (i.e. the ratio was reversed). These numbers are still interesting, though much less optimistic than the originally reported ones…
Continue reading There may be (many) more SPF records than we might expect, (Wed, Aug 25th)
(c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License. Continue reading ISC Stormcast For Tuesday, August 24th, 2021 https://isc.sans.edu/podcastdetail.html?id=7642, (Tue, Aug 24th)
Many companies have extensive security tools to monitor employee computers. But these precautions often fail for “out of band” access that uses cellular networks instead of Ethernet/WiFi networks. Our reader Isabella sent us this phishing email that they received:
(c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License. Continue reading ISC Stormcast For Monday, August 23rd, 2021 https://isc.sans.edu/podcastdetail.html?id=7640, (Mon, Aug 23rd)
I received a malicious document sample, a .docx file: c977b861b887a09979d4e1ef03d5f975f297882c30be38aba59251f1b46c2aa8.