1
Tracing ToneShell: Mustang Panda's Evolving Tradecraft and Campaign Infrastructure (archive.ph)
submitted 2 hours ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
1
APT36 Targets Indian Infrastructure with Desktop Lures and Poseidon Backdoor (hunt.io)
submitted 2 hours ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
2
Protecting the Evidence in Real-Time with KQL Queries - "monitoring for attempts to modify the corresponding registry keys can help us generate early alerts and detect potential tampering." (detect.fyi)
submitted 2 hours ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
1
DHS Launches Over $100 Million in Funding to Strengthen Communities’ Cyber Defenses | CISA (www.cisa.gov)
submitted 2 hours ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
1
PlayPraetor's evolving threat: How Chinese-speaking actors globally scale an Android RAT (www.cleafy.com)
submitted 2 hours ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
1
How to automatically disable users in AWS Managed Microsoft AD based on GuardDuty findings (aws.amazon.com)
submitted 2 hours ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
2
Investigating Suspicious Memory Activity: Tracing a SIEM Alert to a Cobalt Strike C2 (daniyyell.com)
submitted 2 hours ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
1
Memory Forensics Attack Simulation Dataset - " a curated memory forensics dataset designed to support research, detection engineering, and hands-on training in the fields of malware analysis, incident (daniyyell.com)
submitted 2 hours ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
1
암호화폐 거래소로 위장한 페이스북 광고에 의한 악성코드 유포 - Malware spread through Facebook ads disguised as cryptocurrency exchanges. (asec.ahnlab.com)
submitted 3 hours ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
malefic: IoM implant, C2 Framework and Infrastructure - use seen in the wild by digicat in c/blueteamsec@infosec.pub
1
malefic: IoM implant, C2 Framework and Infrastructure - use seen in the wild (github.com)
submitted 3 hours ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
1 comments fedilink
1
White Paper for Cyberspace Mapping Techniques - from China (www.webray.com.cn)
submitted 3 hours ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
2
The Discriminative Power of Cross-layer RTTs in Fingerprinting Proxy Traffic - NDSS Symposium (www.ndss-symposium.org)
submitted 3 hours ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
Early Warning Signals: When Attacker Behavior Precedes New Vulnerabilities by digicat in c/blueteamsec@infosec.pub
Welcome to the new home of what was /r/Blueteamsec and how it works.. by digicat in c/blueteamsec@infosec.pub
[-] digicat@infosec.pub 1 points 3 days ago* (last edited 3 days ago)

I think this might need to be @jerry

Welcome to the new home of what was /r/Blueteamsec and how it works.. by digicat in c/blueteamsec@infosec.pub
[-] digicat@infosec.pub 1 points 4 days ago

V welcome..

LOLRMM is a curated list of Remote Monitoring and Management (RMM) - now with SIEM detections - see comment for important PR for KQL by digicat in c/blueteamsec@infosec.pub
[-] digicat@infosec.pub 1 points 5 days ago

note this PR which needs integrating for the KQL to work - https://github.com/magicsword-io/LOLRMM/pull/100

Shutting the Door on Vishing-Driven Data Theft in Salesforce - "UNC6040’s phone-phishers lure employees into approving a fake dataloader[.]io app, hijacking Salesforce APIs to siphon customer data." by digicat in c/blueteamsec@infosec.pub
Shutting the Door on Vishing-Driven Data Theft in Salesforce - "UNC6040’s phone-phishers lure employees into approving a fake dataloader[.]io app, hijacking Salesforce APIs to siphon customer data." by digicat in c/blueteamsec@infosec.pub
Clorox versus Cognizant Complaint - Cognizant’sconduct on August 11, 2023, demonstrated spectacularly that it was failing to do so. Cognizantrepeatedly gave a cybercriminal access to Clorox’s network by digicat in c/blueteamsec@infosec.pub
Security Challenges in AI Agent Deployment: Insights from a Large Scale Public Competition by digicat in c/blueteamsec@infosec.pub
Welcome to the new home of what was /r/Blueteamsec and how it works.. by digicat in c/blueteamsec@infosec.pub
[-] digicat@infosec.pub 4 points 6 days ago

Nope, very manual and the plan is to stay here :) - I managed to keep the last community going at this rate for ~8 years.

Ability to share links by digicat in c/voyagerapp@lemmy.world
[-] digicat@infosec.pub 4 points 6 days ago

Almost need 'Voyager link post'

Ability to share links by digicat in c/voyagerapp@lemmy.world
[-] digicat@infosec.pub 3 points 6 days ago

I wanted to do browser to Lemmy I get this

view more: next ›

digicat

joined 2 years ago
MODERATOR OF
blueteamsec