Collaborate Disseminate
(c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License. Continue reading ISC Stormcast For Monday, August 23rd, 2021 https://isc.sans.edu/podcastdetail.html?id=7640, (Mon, Aug 23rd)
I received a malicious document sample, a .docx file: c977b861b887a09979d4e1ef03d5f975f297882c30be38aba59251f1b46c2aa8.
Keep this in mind:&#;x26;#;xc2;&#;x26;#;xa0;”Patience is key”.&#;x26;#;xc2;&#;x26;#;xa0;Sometimes when you are working on a malware sample, you depend on online resources. I&#;x26;#;39;m working on a classic case: a Powershell script decodes then injects a shellcode into a process. There are plenty of tools that help you to have a good idea of a shellcode behavior (like scdbg[1]):
Continue reading Waiting for the C2 to Show Up, (Fri, Aug 20th)
(c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License. Continue reading ISC Stormcast For Friday, August 20th, 2021 https://isc.sans.edu/podcastdetail.html?id=7638, (Fri, Aug 20th)
Living in Florida, afternoon thunderstorms are a regular occurrence with Florida having the highest lightning density of any state in the US &#;x26;#;x5b;1&#;x26;#;x5d;. In my time in Florida, I had close or direct strikes damage equipment twice. The most recent incident was about a month ago. So I am sharing here some of the things that work and don&#;x26;#;39;t work.
Continue reading When Lightning Strikes. What works and doesn’t work., (Thu, Aug 19th)
(c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License. Continue reading ISC Stormcast For Thursday, August 19th, 2021 https://isc.sans.edu/podcastdetail.html?id=7636, (Thu, Aug 19th)
Many readers will likely continue to enjoy working from home. Having not worked out of an office for about 20 years myself, I can certainly understand the appeal of working from home. But for some, this isn&#;x26;#;39;t an option and probably not even the preferred way to work. Having likely worked from home for over a year now, there are some things that you need to “readjust” as you are moving back.
Continue reading 5 Things to Consider Before Moving Back to the Office, (Wed, Aug 18th)
(c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License. Continue reading ISC Stormcast For Wednesday, August 18th, 2021 https://isc.sans.edu/podcastdetail.html?id=7634, (Wed, Aug 18th)
Debugging a live site can be a necessary evil. Having a bug that can&#;x26;#;39;t be reproduced in development or debugging behavior requiring specific dependencies (e.g., external services or specific backend database) that are hard to replicate in development can make debugging a live site in development as standard operating procedures want you to.