ISC Stormcast For Friday, September 20th, 2024 https://isc.sans.edu/podcastdetail/9146, (Fri, Sep 20th) ISC Stormcast For Friday, September 20th, 2024 https://isc.sans.edu/podcastdetail/9146... 2024-9-20 10:0:2 | 阅读: 0 | 收藏 | SANS Internet Storm Center, InfoCON: green - isc.sans.edu isc 9146 stormcast friday 20th

Fake GitHub Site Targeting Developers, (Thu, Sep 19th) Our reader "RoseSecurity" forwarded received the following malicious email:Hey there!We have d... 2024-9-20 04:14:39 | 阅读: 2 | 收藏 | SANS Internet Storm Center, InfoCON: green - isc.sans.edu github download victim syssetup security

ISC Stormcast For Thursday, September 19th, 2024 https://isc.sans.edu/podcastdetail/9144, (Thu, Sep 19th) 2024-9-19 10:0:1 | 阅读: 7 | 收藏 | SANS Internet Storm Center, InfoCON: green - isc.sans.edu security papers 2nd 7th

Time-to-Live Analysis of DShield Data with Vega-Lite, (Wed, Sep 18th) Since posting a diary about Vega-Lite [1], I have "played" with other queries that might be interes... 2024-9-19 08:20:9 | 阅读: 4 | 收藏 | SANS Internet Storm Center, InfoCON: green - isc.sans.edu ttl dshield vega sensor isc

Python Infostealer Patching Windows Exodus App, (Wed, Sep 18th) A few months ago, I wrote a diary[1] about a Python script that replaced the Exodus[2] Wallet app w... 2024-9-18 15:43:0 | 阅读: 8 | 收藏 | SANS Internet Storm Center, InfoCON: green - isc.sans.edu exodus opera asar taskname wallets

ISC Stormcast For Wednesday, September 18th, 2024 https://isc.sans.edu/podcastdetail/9142, (Wed, Sep 18th) ISC Stormcast For Wednesday, September 18th, 2024 https://isc.sans.edu/podcastdetail/9142... 2024-9-18 10:0:2 | 阅读: 2 | 收藏 | SANS Internet Storm Center, InfoCON: green - isc.sans.edu isc stormcast wednesday 18th

23:59, Time to Exfiltrate!, (Tue, Sep 17th) Last week, I posted a diary about suspicious Python modules. One of them was Firebase [1], the clou... 2024-9-17 15:3:12 | 阅读: 0 | 收藏 | SANS Internet Storm Center, InfoCON: green - isc.sans.edu winreg firebase adi bu nereye

ISC Stormcast For Tuesday, September 17th, 2024 https://isc.sans.edu/podcastdetail/9140, (Tue, Sep 17th) ISC Stormcast For Tuesday, September 17th, 2024 https://isc.sans.edu/podcastdetail/9140... 2024-9-17 10:25:18 | 阅读: 0 | 收藏 | SANS Internet Storm Center, InfoCON: green - isc.sans.edu isc 9140 stormcast tuesday 17th

Managing PE Files With Overlays, (Mon, Sep 16th) There is a common technique used by attackers: They append some data at the end of files (this is c... 2024-9-16 13:31:25 | 阅读: 5 | 收藏 | SANS Internet Storm Center, InfoCON: green - isc.sans.edu overlay remnux malwarezoo 20240910

ISC Stormcast For Monday, September 16th, 2024 https://isc.sans.edu/podcastdetail/9138, (Mon, Sep 16th) 2024-9-16 10:0:2 | 阅读: 8 | 收藏 | SANS Internet Storm Center, InfoCON: green - isc.sans.edu security feeds papers 7th 2nd

YARA-X's Dump Command, (Sun, Sep 15th) Published: 2024-09-15. Last Updated: 2024-09-15 18:32:06 UTCby Didier Stevens (Version: 1)YARA-X... 2024-9-16 02:32:6 | 阅读: 5 | 收藏 | SANS Internet Storm Center, InfoCON: green - isc.sans.edu didier stevens parsers invoked senior

YARA 4.5.2 Release, (Sat, Sep 14th) Published: 2024-09-14. Last Updated: 2024-09-14 21:37:44 UTCby Didier Stevens (Version: 1)YARA 4... 2024-9-15 05:37:44 | 阅读: 2 | 收藏 | SANS Internet Storm Center, InfoCON: green - isc.sans.edu didier stevens bugfixes senior

Finding Honeypot Data Clusters Using DBSCAN: Part 2, (Fri, Aug 23rd) In an earlier diary [1], I reviewed how using tools like DBSCAN [2] can be useful to group similar... 2024-9-13 21:4:13 | 阅读: 4 | 收藏 | SANS Internet Storm Center, InfoCON: green - isc.sans.edu honeypot ocean eps passwd dbscan

ISC Stormcast For Friday, September 13th, 2024 https://isc.sans.edu/podcastdetail/9136, (Fri, Sep 13th) 2024-9-13 10:0:2 | 阅读: 1 | 收藏 | SANS Internet Storm Center, InfoCON: green - isc.sans.edu security isc papers feeds

Hygiene, Hygiene, Hygiene! [Guest Diary], (Wed, Sep 11th) [This is a Guest Diary by Paul Olson, an ISC intern as part of the SANS.edu BACS program]Introduc... 2024-9-12 08:2:0 | 阅读: 8 | 收藏 | SANS Internet Storm Center, InfoCON: green - isc.sans.edu honeypot ssh passwords identify hygiene

Python Libraries Used for Malicious Purposes, (Wed, Sep 11th) Since I’m interested in malicious Python scripts, I found multiple samples that rely on existing li... 2024-9-11 14:36:28 | 阅读: 1 | 收藏 | SANS Internet Storm Center, InfoCON: green - isc.sans.edu python windows exfiltrate mouse library

ISC Stormcast For Wednesday, September 11th, 2024 https://isc.sans.edu/podcastdetail/9134, (Wed, Sep 11th) ISC Stormcast For Wednesday, September 11th, 2024 https://isc.sans.edu/podcastdetail/9134... 2024-9-11 10:0:2 | 阅读: 1 | 收藏 | SANS Internet Storm Center, InfoCON: green - isc.sans.edu isc 9134 stormcast wednesday

Microsoft September 2024 Patch Tuesday, (Tue, Sep 10th) Today, Microsoft released its scheduled September set of patches. This update addresses 79 differen... 2024-9-11 01:59:45 | 阅读: 11 | 收藏 | SANS Internet Storm Center, InfoCON: green - isc.sans.edu windows microsoft elevation remote

ISC Stormcast For Tuesday, September 10th, 2024 https://isc.sans.edu/podcastdetail/9132, (Tue, Sep 10th) ISC Stormcast For Tuesday, September 10th, 2024 https://isc.sans.edu/podcastdetail/9132... 2024-9-10 11:20:5 | 阅读: 2 | 收藏 | SANS Internet Storm Center, InfoCON: green - isc.sans.edu isc stormcast tuesday 10th

Wireshark 4.4's IP Address Functions, (Mon, Sep 9th) New IP address functions have been added in Wireshark 4.4 (if you use Wireshark on Windows, there's... 2024-9-9 19:35:46 | 阅读: 5 | 收藏 | SANS Internet Storm Center, InfoCON: green - isc.sans.edu windows rfc1918 summarize stevens senior