TCPView v4.0 Released, (Sun, Mar 28th)
TCPView is a Sysinternals&#;x26;#;39; tool that displays information about the TCP and UDP endpoints on a system. It&#;x26;#;39;s like netstat, but with a GUI.
Author Archives: SANS Internet Storm Center, InfoCON: green
Malware Analysis with elastic-agent and Microsoft Sandbox, (Fri, Mar 26th)
Microsoft describes the “Windows Sandbox supports simple configuration files, which provide a minimal set of customization parameters for Sandbox. […] Windows Sandbox configuration files are formatted as XML and are associated with Sandbox via the .wsb file extension.”[6]
Continue reading Malware Analysis with elastic-agent and Microsoft Sandbox, (Fri, Mar 26th)
Apple releases iOS 14.4.2 to address “universal cross site scripting” in Webkit https://support.apple.com/en-us/HT212256, (Fri, Mar 26th)
(c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License. Continue reading Apple releases iOS 14.4.2 to address “universal cross site scripting” in Webkit https://support.apple.com/en-us/HT212256, (Fri, Mar 26th)
ISC Stormcast For Friday, March 26th, 2021 https://isc.sans.edu/podcastdetail.html?id=7430, (Fri, Mar 26th)
(c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License. Continue reading ISC Stormcast For Friday, March 26th, 2021 https://isc.sans.edu/podcastdetail.html?id=7430, (Fri, Mar 26th)
Office macro execution evidence, (Fri, Mar 26th)
Microsoft Office Macros continue to be the security nightmare that they have been for the past 3 decades. System and security admins everywhere continue to try to protect their users from prevalent macro malware, but they find Microsoft&#;x26;#;39;s tooling often less than helpful.
Continue reading Office macro execution evidence, (Fri, Mar 26th)
ISC Stormcast For Thursday, March 25th, 2021 https://isc.sans.edu/podcastdetail.html?id=7428, (Thu, Mar 25th)
(c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License. Continue reading ISC Stormcast For Thursday, March 25th, 2021 https://isc.sans.edu/podcastdetail.html?id=7428, (Thu, Mar 25th)
Submitting pfSense Firewall Logs to DShield, (Thu, Mar 25th)
In my previous diaries, I wrote about pfSense firewalls [1], [2]. I hope the diaries have given some insight to current pfSense users, and also inspire individuals who have yet to deploy any form of information security mechanisms in their homes/personal networks to do so. At the SANS Internet Storm Center, we welcome interested participants to submit firewall logs to DShield [3]. In this diary entry, I would like to share how to do so if you are using a pfSense firewall. I also highlight some minor issues I discovered when I was trying set up the DShield pfSense client, and how to resolve them so you can send your logs to DShield successfully. Please remember to do a config backup on your pfSense firewall before changing anything, and test the changes made in a test network before deploying them into the production environment. At this point of writing, all configuration and testing were done on pfSense 2.5.0-RELEASE Community Edition.
Continue reading Submitting pfSense Firewall Logs to DShield, (Thu, Mar 25th)
ISC Stormcast For Wednesday, March 24th, 2021 https://isc.sans.edu/podcastdetail.html?id=7426, (Wed, Mar 24th)
(c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License. Continue reading ISC Stormcast For Wednesday, March 24th, 2021 https://isc.sans.edu/podcastdetail.html?id=7426, (Wed, Mar 24th)