Collaborate Disseminate
(c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License. Continue reading ISC Stormcast For Tuesday, September 24th 2019 https://isc.sans.edu/podcastdetail.html?id=6678, (Tue, Sep 24th)
Almost a year ago, I reported on a new feature in YARA version 3.8.0: YARA XOR Strings. The new YARA xor keyword allows for the search of strings that are XOR-encoded with a one-byte key.
Continue reading YARA XOR Strings: an Update, (Sun, Sep 22nd)
(c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License. Continue reading ISC Stormcast For Monday, September 23rd 2019 https://isc.sans.edu/podcastdetail.html?id=6676, (Mon, Sep 23rd)
In this video, I show how to use my PDF tools together with QPDF and Poppler to deal with encrypted PDFs, like the sextortion PDFs that were submitted recently.
Continue reading Video: Encrypted Sextortion PDFs, (Sun, Sep 22nd)
It&#;x26;#;39;s Friday today, I&#;x26;#;39;d like to talk about something else. Black (or white) lists are everywhere today. Many security tools implement a way to allow/deny accesses or actions on resources based on “lists” bsides the automated processing of data. The approach to implement them is quite different:
Continue reading Blacklisting or Whitelisting in the Right Way, (Thu, Sep 19th)
(c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License. Continue reading ISC Stormcast For Friday, September 20th 2019 https://isc.sans.edu/podcastdetail.html?id=6674, (Fri, Sep 20th)
The trojan &#;x26;#;39;Agent Tesla&#;x26;#;39; is not brand new, discovered in 2018, it is written in VisualBasic and has plenty of interesting features. Just have a look at the MITRE ATT&#;x26;CK overview of its TTP[1].
Continue reading Agent Tesla Trojan Abusing Corporate Email Accounts, (Thu, Sep 19th)
(c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License. Continue reading ISC Stormcast For Thursday, September 19th 2019 https://isc.sans.edu/podcastdetail.html?id=6672, (Thu, Sep 19th)
(c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License. Continue reading ISC Stormcast For Wednesday, September 18th 2019 https://isc.sans.edu/podcastdetail.html?id=6670, (Wed, Sep 18th)