Collaborate Disseminate
What techniques do modern Trojans employ to maintain persistence on compromised systems and effectively evade detection by advanced security solutions?
What are the specific methodologies used for mechanisms like fileless malware, process … Continue reading What advanced techniques Trojans use to enhance persistence and evade modern detection systems? [closed]
While an increasing number of people are becoming concerned about microplastic pollution in their drinking water, it’s one of those things that the average person can’t check for themselves. That could soon change, however, if a new prototype device re… Continue reading New device may let everyday folks check their water for microplastics
I am new to threat detection. I was figuring out a way for crowdstrike falcon to block the execution of malicious base64 encoded payloads on a Linux machine.
Wanted to know if a setting prevention policy for “script-based-execution” is abl… Continue reading Base64 encoded payload detection rule on crowdstrike
It’s ironic that in places where drinking water needs to be checked for microbes the most, labs that can perform the analysis are least likely to be present. A new “lensless” device could help, as it uses light to instantly detect harmful microorganism… Continue reading Optical device forgoes lenses for better detection of tainted water
From a detection standpoint, when pivoting inside a network what difference (if any) is there between establishing a remote connection between using Enter-PSSession -ComputerName PC1 vs winrs -r:PC1 powershell?
Continue reading Difference between PS Remoting and Winrs from a detection standpoint
I work at a small-to-medium business. Most of my coworkers were born in the 1960s and do not have a background in computer science. I have a background in computer science, but I specialize in artificial intelligence, as opposed to informa… Continue reading How should I report a Man-in-the-Middle attack in my workplace?
There are JavaScript libraries (such as dev-tools-monitor, devtools-detector, devtools-detect and others) that detect when the developer console is open. Are there also ways to better hide the dev-tools such that they are no longer detecta… Continue reading How to use the web developer console when sites detect its use? [migrated]
I’m attempting to come up with a detection for when devs commit/push changes to pull requests after they have been reviewed and approved but before they have been merged.
There are various actions that I’ve found that seem useful like pull… Continue reading Can a detection be written from Github audit events that finds commit/pushes done after review approvals in pull requests? [migrated]
The first 5G-enabled ebike has rolled into Mobile World Congress in Barcelona this week, courtesy of Long Island-based mobile device company Orbic. The fat-tire pedal-assist ride also comes with a bunch of cameras and AI crash detection.Continue Readin… Continue reading 5G-connected fat ebike dodges obstacles with AI-driven ADAS
I’m researching the topic of detecting registry dump from disk shadow copies and realize that I don’t see any specific events in the Windows and Sysmon logs.
I tried a simple copy with the command:
copy \\?\GLOBALROOT\Device\HarddiskVolume… Continue reading SACL for shadow copies