Collaborate Disseminate
Here is my wrap-up for the first edition of BSidesAthens. There are more and more BSides events organized across the world and the Greek capital has now one! It was also a good opportunity to spend the weekend in this nice city. Grigorios Fragkos kicked off the event a few
[The post BSidesAthens 2016 Wrap-Up has been first published on /dev/random]
I’m in Washington DC at the SANSFIRE event. I’m following a training and meeting fellow SANS ISC Handlers. I also gave a talk tonight about the risks of the Internet of Things and quick tips to protect your home network against their invasion. Here is a copy of the slides: Link: http://www.slideshare.net/xme/home-sweet-home-sansfire-edition.
[The post $HOME Sweet $HOME – SANSFIRE Edition has been first published on /dev/random]
I published the following diary was published on isc.sans.org: Offensive or Defensive Security? Both!
[The post [SANS ISC Diary] Offensive or Defensive Security? Both! has been first published on /dev/random]
Continue reading [SANS ISC Diary] Offensive or Defensive Security? Both!
MISP (“Malware Information Sharing Platform“) is a free software which was initially created by the Belgian Defence to exchange IOC’s with partners like the NCIRC (NATO). Today it became an independent project and is mainly developed by a group of motivated people. MISP is mainly used by CERT’s (“Computer Emergency Response Team”) but also private companies to exchange thousands on IOC’s on a daily basis. MISP … Read More →
[The post Running MISP in a Docker Container has been first published on /dev/random]
On a daily basis, I’m looking for malicious emails. I own catch-all mailboxes that collect a huge amount of spam that I’m using to perform deeper analysis: to discover new tactics used by attackers and new piece of malicious code. Basically, they are two categories of phishing campaigns: the one sent to a large base of potential victims and the one targeting only one victim (one person … Read More →
[The post How to Not Send Corporate Emails? has been first published on /dev/random]
Honestly, I never really played with Docker but… For a few weeks, I succumbed to the temptation of playing with Docker thanks to a friend who’s putting everything in docker containers. If you still don’t know Docker, here is a very brief introduction: Docker lets you run applications in a “container“. In this container, the application will find all its required components to run smoothly: code, scripts, libraries, … Read More →
[The post Incident Handling with Docker Containers has been first published on /dev/random]
The following diary was published on isc.sans.org: Reducing False Positives with Open Data Sources
[The post [SANS ISC Diary] Reducing False Positives with Open Data Sources has been first published on /dev/random]
Continue reading [SANS ISC Diary] Reducing False Positives with Open Data Sources
The following diary was published on isc.sans.org: Hunting for Executable Code in Windows Environments.
[The post [SANS ISC Diary] Hunting for Executable Code in Windows Environments has been first published on /dev/random]
Continue reading [SANS ISC Diary] Hunting for Executable Code in Windows Environments
The following diary was published on isc.sans.org: More Malicious JavaScript Obfuscation.
[The post [SANS ISC Diary] More Malicious JavaScript Obfuscation has been first published on /dev/random]
Continue reading [SANS ISC Diary] More Malicious JavaScript Obfuscation
In 2014, I blogged about security awareness through proverbs. Many proverbs can be used to deliver important security messages. We are now in 2016 and I could add a new one to the long list that I already built: “The Best Broth is Made in The Oldest Pot“ A new malware, called T9000, has been recently discovered by Palo Alto Networks. It specifically targets Skype users. … Read More →
[The post The Best Broth is Made in The Oldest Pot has been first published on /dev/random]