Collaborate Disseminate
The error I get from pkcs11-tool.exe is "No slots."
My server has a hardware security module (Nitrokey HSM 2) that becomes inaccessible once I connect to my server via Windows Remote Desktop.
Note: this is NOT for logging in with… Continue reading How do I get my server HSM working while connected via RDP? (Win 2019)
Statistics on ransomware attacks in the CIS and technical descriptions of Trojans, including BigBobRoss/TheDMR, Crysis/Dharma, Phobos/Eking, Cryakl/CryLock, CryptConsole, Fonix/XINOF, Limbozar/VoidCrypt, Thanos/Hakbit and XMRLocker. Continue reading Ransomware in the CIS
If i run
netstat -an
on my Windows Server 2019 it shows multiple connections on Port 3389 (which is RDP)
The first IP Adress is mine, however i cant explain the other two connections. They both change their IP-Adress about every minute … Continue reading Multiple Established TCP Connections on Port 3389 – Is my server compromised?
When I enter my domain admin user credentials into the RDP Window, does the Client also save my password hash?
Example:
Windows 10 Client -> Remote Desktop -> Enter Domain Admin User and Password -> Connect to Domain Controller or… Continue reading Are Credentials used in RDP cached on Client?
I’m creating a little sandbox environment for me to play around with using VirtualBox. I am using the latest Kali machine as the ‘attacker’.
Right now, I have a Ubuntu machine (20.04.1) that is susceptible to LFI on its web page. Based on … Continue reading RDP with Kali through pivoting
Popular preconceptions of enterprise security and network usage are often inaccurate, according to Cato Networks. While exotic attacks and nation-states such as Russia and China grab headlines, the most prevalent enterprise cybersecurity risks in Q1 ca… Continue reading Enterprise networks vulnerable to 20-year-old exploits
By Sarah Banks, Senior Director of Product Management, Corelight As we finished rolling out Corelight’s v21 software release, which saw the delivery of the world’s first 100G, 1U Zeek sensor, I was reminded of when I’d first read the “100G Intrusion De… Continue reading World’s first 100G Zeek sensor
Should I be worried? I was just getting ready for a Webex when all of a sudden my mouse started moving on its own as if someone was controlling it. I quickly disconnected my computer from the dock, which severed the connection. After th… Continue reading Seems like someone had control of my computer briefly [closed]
By Vince Stoffer, Senior Director, Product Management, Corelight We’re excited to announce that the Command and Control (C2) Collection is now available with today’s launch of version 21 of the Corelight software. One of the most important ways that de… Continue reading Introducing the C2 Collection and RDP inferences
By John Gamble, Director of Product Marketing, Corelight Today I am excited to announce Corelight’s v21 release, which delivers dozens of powerful C2 detections, extends analyst visibility around RDP connections, and helps organizations scale network d… Continue reading C2 detections, RDP insights and NDR at 100G