Collaborate Disseminate
Not a technical diary today but more a reflection⦠When I’m teaching FOR610[1], I always remind students to âRTFMâ or “Read the F⦠Manual”. I mean to not hesitate to have a look at the Microsoft document when they meet an API call for the first time or if they are not sure about the expected parameters.
Continue reading Defenders, Know Your Operating System Like Attackers Do!, (Wed, Mar 17th)
(c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License. Continue reading ISC Stormcast For Wednesday, March 17th, 2021 https://isc.sans.edu/podcastdetail.html?id=7416, (Wed, Mar 17th)
If you have any interest in the history of malicious code, chances are you’ve heard or read somewhere that the first piece of malware ever created was a computer worm called Creeper and that spread itself through the ARPANET in 1971. Some sources even mention that it might have been on this very date, i.e. exactly 50 years ago[1].
(c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License. Continue reading ISC Stormcast For Tuesday, March 16th, 2021 https://isc.sans.edu/podcastdetail.html?id=7414, (Tue, Mar 16th)
Metasploit and Cobalt Strike generate shellcode for http(s) shells. The URLs found in this shellcode have a path that consist of 4 random alphanumeric characters. But they are not completely random: their 8-bit checksum is a member of a small set of constants.
Continue reading Finding Metasploit & Cobalt Strike URLs, (Mon, Mar 15th)
(c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License. Continue reading ISC Stormcast For Monday, March 15th, 2021 https://isc.sans.edu/podcastdetail.html?id=7412, (Mon, Mar 15th)
Wireshark version 3.4.4 was released.
This parser takes the logs from a Windows 2012R2 server (C:\Windows\System32\dhcp) and parses them into usable metatada which can be monitored via a dashboard. The logs have been mapped using ECS in the same format as the packetbeat meta here [1].
Continue reading Microsoft DHCP Logs Shipped to ELK, (Fri, Mar 12th)
(c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License. Continue reading ISC Stormcast For Friday, March 12th, 2021 https://isc.sans.edu/podcastdetail.html?id=7410, (Fri, Mar 12th)
[This is a guest diary submitted by JB Bowers]
Continue reading Piktochart – Phishing with Infographics, (Thu, Mar 11th)