Collaborate Disseminate
Ladies and gentlemen, for our main attraction, I give you…The HELK vs APTSimulator, in a Death Battle! The late, great Randy “Macho Man” Savage said many things in his day, in his own special way, but “Expect the unexpected in the kingdom of madness!… Continue reading toolsmith #131 – The HELK vs APTSimulator – Part 1
via Firewall Consultants!
Permalink
The post BlueHat IL 2018, Vincent Le Toux & Benjamin Delpy’s ‘What Can Make Your Million Dollar SIEM Go Blind’ appeared first on Security Boulevard.
Continue reading BlueHat IL 2018, Vincent Le Toux & Benjamin Delpy’s ‘What Can Make Your Million Dollar SIEM Go Blind’
TL;DR – I want to know if there is a reliable way in Android to detect if a file has been opened by an un-authorized party (i.e. not my app).
Context: I am creating an Android app as a personal (side) project that will opera… Continue reading Android file intrusion detection
Are there any vm-detection techniques (of malware) which are impossible to mitigate in your vm?
If yes, which?
Let’s assume I have a large enterprise network (thousands of nodes) and somewhere on that network there is malware communicating over DNS for C2. Let’s assume the requests are designed such that the traffic is legitimate DNS… Continue reading Detecting C2 traffic over DNS?
Permalink
The post BruCON 0x09, František Střasák’s ‘Detecting Malware Even When It Is Encrypted’ appeared first on Security Boulevard.
Continue reading BruCON 0x09, František Střasák’s ‘Detecting Malware Even When It Is Encrypted’
Short question
Would checking if the faulting address for every page fault points to kernel memory reliably detect an attempted Meltdown exploit, on systems that lack Intel TSX (and thus cannot suppress exceptions)? The Linu… Continue reading Mitigating Meltdown by checking the faulting address in every page fault?
(Note: update at end of Q)
On a Mac, I am using AVG as the primary AV. In addition to this, I have a few scanners (Bitdefender and Malwarebytes) that I update and use periodically. Recently I decided to add Kaspersky’s free … Continue reading AVG detects Kaspersky update files as infected (trojan, infected, malware)
Is fb2 & epub files can be malicious like pdf? If yes, so how I can detect it manually ?
Malicious RTF, doc, docx, xls, ppt files can be detected via OLETOOLS.
Malicious PDF files via peepdf, pdfid & others.
Is fb2 & epub files can be malicious like pdf? If yes, so how I can detect it manually ?
Malicious RTF, doc, docx, xls, ppt files can be detected via OLETOOLS.
Malicious PDF files via peepdf, pdfid & others.