YARA v3.11.0 released, (Sat, Oct 12th)
A new version of YARA was released: v3.11.0.
Author Archives: SANS Internet Storm Center, InfoCON: green
ISC Stormcast For Friday, October 11th 2019 https://isc.sans.edu/podcastdetail.html?id=6704, (Fri, Oct 11th)
(c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License. Continue reading ISC Stormcast For Friday, October 11th 2019 https://isc.sans.edu/podcastdetail.html?id=6704, (Fri, Oct 11th)
Mining Live Networks for OUI Data Oddness, (Thu, Oct 10th)
My last story was a short script that takes MAC addresses in, and returns the OUI portion of that, along with the vendor who corresponds to that OUI.&#;x26;#;xc2;&#;x26;#;xa0; (https://isc.sans.edu/diary/Mining&#;x26;#;x2b;MAC&#;x26;#;x2b;Address&#;x26;#;x2b;and&#;x26;#;x2b;OUI&#;x26;#;x2b;Information/25360) Today we&#;x26;#;39;ll port that to PowerShell as a function and use that on a live network for some “hunting” to look for odd things.
Continue reading Mining Live Networks for OUI Data Oddness, (Thu, Oct 10th)
ISC Stormcast For Thursday, October 10th 2019 https://isc.sans.edu/podcastdetail.html?id=6702, (Thu, Oct 10th)
(c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License. Continue reading ISC Stormcast For Thursday, October 10th 2019 https://isc.sans.edu/podcastdetail.html?id=6702, (Thu, Oct 10th)
ISC Stormcast For Wednesday, October 9th 2019 https://isc.sans.edu/podcastdetail.html?id=6700, (Wed, Oct 9th)
(c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License. Continue reading ISC Stormcast For Wednesday, October 9th 2019 https://isc.sans.edu/podcastdetail.html?id=6700, (Wed, Oct 9th)
What data does Vidar malware steal from an infected host?, (Wed, Oct 9th)
Microsoft October 2019 Patch Tuesday, (Tue, Oct 8th)
This month we got patches for 59 vulnerabilities total. None of them have been previously disclosed nor are being exploited according to Microsoft.
Continue reading Microsoft October 2019 Patch Tuesday, (Tue, Oct 8th)
ISC Stormcast For Tuesday, October 8th 2019 https://isc.sans.edu/podcastdetail.html?id=6698, (Tue, Oct 8th)
(c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License. Continue reading ISC Stormcast For Tuesday, October 8th 2019 https://isc.sans.edu/podcastdetail.html?id=6698, (Tue, Oct 8th)
ISC Stormcast For Monday, October 7th 2019 https://isc.sans.edu/podcastdetail.html?id=6696, (Mon, Oct 7th)
(c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License. Continue reading ISC Stormcast For Monday, October 7th 2019 https://isc.sans.edu/podcastdetail.html?id=6696, (Mon, Oct 7th)
visNetwork for Network Data, (Sun, Oct 6th)
DFIR Redefined Part 3 – Deeper Functionality for Investigators with R series continued
Continue reading visNetwork for Network Data, (Sun, Oct 6th)