bedevil: Dynamic Linker Patching Introductionbedevil (bdvl), according to the GitHub page, is an LD_PRELOAD rootkit... 2024-10-19 20:16:28 | 阅读: 23 | 收藏 | Over Security - Cybersecurity news aggregator - dfir.ch dfir ldpatch oldpreload newpreload

Microsoft Defender XDR's Deception Technology IntroductionThis week wasn’t the first time we’ve investigated a case where a cust... 2024-10-18 04:1:40 | 阅读: 15 | 收藏 | Over Security - Cybersecurity news aggregator - dfir.ch decoy deception microsoft powershell windows

tmate - Instant Terminal Sharing (or How To Backdoor a Linux Server) IntroductionOver the last three years, various cyber security companies wrote abou... 2024-10-7 01:2:20 | 阅读: 1 | 收藏 | Over Security - Cybersecurity news aggregator - dfir.ch tmate ssh 13453 traces teamtnt

EDR: The Great Escape - RomHack Training Review This course aims to provide a comprehensive understanding of the architecture of... 2024-9-30 20:17:16 | 阅读: 11 | 收藏 | Over Security - Cybersecurity news aggregator - dfir.ch windows security internals analysis hooking

Today I Learned - NSG Flow Log IntroductionAzure flow logs are a feature in Azure that allows you to capture and... 2024-9-21 13:47:10 | 阅读: 8 | 收藏 | Over Security - Cybersecurity news aggregator - dfir.ch network security nsg defaultrule

ScriptBlock Smuggling IntroductionPowerShell’s Script Block Logging is a security feature that records a... 2024-9-13 19:47:7 | 阅读: 7 | 收藏 | Over Security - Cybersecurity news aggregator - dfir.ch powershell scriptblock malicious spoofedast executedast