The Art of JQ and Command-line Fu [Guest Diary], (Thu, Jun 13th) [This is a Guest Diary by Kaela Reed, an ISC intern as part of the SANS.edu BACS program]Viewing... 2024-6-13 09:43:51 | 阅读: 6 | 收藏 | SANS Internet Storm Center, InfoCON: green - isc.sans.edu jq uris 186 webhoneypot wc

Port 1801 Traffic: Microsoft Message Queue, (Wed, Jun 12th) I planned a bit a more conclusive story here, but after running into issues decoding the packets an... 2024-6-13 01:49:25 | 阅读: 8 | 收藏 | SANS Internet Storm Center, InfoCON: green - isc.sans.edu msmq 1801 microsoft payload 4c

ISC Stormcast For Wednesday, June 12th, 2024 https://isc.sans.edu/podcastdetail/9020, (Wed, Jun 12th) 2024-6-12 10:0:2 | 阅读: 5 | 收藏 | SANS Internet Storm Center, InfoCON: green - isc.sans.edu feeds papers isc 9020

Microsoft Patch Tuesday June 2024, (Tue, Jun 11th) Microsoft's June 2024 update fixes a total of 58 vulnerabilities. 7 of these vulnerabilities are as... 2024-6-12 03:6:6 | 阅读: 42 | 收藏 | SANS Internet Storm Center, InfoCON: green - isc.sans.edu remote windows microsoft elevation chromium

ISC Stormcast For Tuesday, June 11th, 2024 https://isc.sans.edu/podcastdetail/9018, (Tue, Jun 11th) 2024-6-11 10:0:2 | 阅读: 4 | 收藏 | SANS Internet Storm Center, InfoCON: green - isc.sans.edu feeds papers isc developers diaries

ISC Stormcast For Monday, June 10th, 2024 https://isc.sans.edu/podcastdetail/9016, (Mon, Jun 10th) 2024-6-10 10:0:2 | 阅读: 9 | 收藏 | SANS Internet Storm Center, InfoCON: green - isc.sans.edu isc papers feeds developers ullrich

Attacker Probing for New PHP Vulnerablity CVE-2024-4577, (Sun, Jun 9th) Our honeypots have detected the first probes for CVE-2024-4577. This vulnerability was originally d... 2024-6-10 05:3:28 | 阅读: 146 | 收藏 | SANS Internet Storm Center, InfoCON: green - isc.sans.edu php orange prepend attacker watchtwr

Finding End of Support Dates: UK PTSI Regulation, (Fri, Jun 7th) One of the challenges with many IoT devices, in particular those targeting consumers and small busi... 2024-6-7 21:12:40 | 阅读: 4 | 收藏 | SANS Internet Storm Center, InfoCON: green - isc.sans.edu psti declaration security motorola philips

ISC Stormcast For Friday, June 7th, 2024 https://isc.sans.edu/podcastdetail/9014, (Fri, Jun 7th) Sign In... 2024-6-7 10:0:2 | 阅读: 8 | 收藏 | SANS Internet Storm Center, InfoCON: green - isc.sans.edu papers feeds isc stormcast podcasts

Malicious Python Script with a "Best Before" Date, (Thu, Jun 6th) When you buy some fresh food, it's always a good idea to keep an eye on the best-before date. I fou... 2024-6-6 17:26:14 | 阅读: 9 | 收藏 | SANS Internet Storm Center, InfoCON: green - isc.sans.edu payload sprmcmrd mouse client memory

ISC Stormcast For Thursday, June 6th, 2024 https://isc.sans.edu/podcastdetail/9012, (Thu, Jun 6th) Sign In... 2024-6-6 10:0:2 | 阅读: 4 | 收藏 | SANS Internet Storm Center, InfoCON: green - isc.sans.edu papers isc feeds 6th glass

Brute Force Attacks Against Watchguard VPN Endpoints, (Wed, Jun 5th) If you have a pulse and work in information security (or are a new scraping script without a pulse)... 2024-6-5 22:5:58 | 阅读: 16 | 收藏 | SANS Internet Storm Center, InfoCON: green - isc.sans.edu fw watchguard pulse 40123 honeypot

ISC Stormcast For Wednesday, June 5th, 2024 https://isc.sans.edu/podcastdetail/9010, (Wed, Jun 5th) 2024-6-5 10:0:2 | 阅读: 3 | 收藏 | SANS Internet Storm Center, InfoCON: green - isc.sans.edu isc feeds papers wednesday

No-Defender, Yes-Defender, (Tue, Jun 4th) This is a guest diary by John MoutosRecently I was made aware of a neat utility (https://github.c... 2024-6-4 21:26:45 | 阅读: 30 | 收藏 | SANS Internet Storm Center, InfoCON: green - isc.sans.edu defender windows proxy nocase github

ISC Stormcast For Tuesday, June 4th, 2024 https://isc.sans.edu/podcastdetail/9008, (Tue, Jun 4th) 2024-6-4 10:0:2 | 阅读: 3 | 收藏 | SANS Internet Storm Center, InfoCON: green - isc.sans.edu isc papers feeds podcasts

A Wireshark Lua Dissector for Fixed Field Length Protocols, (Mon, Jun 3rd) I developed a Wireshark dissector in Lua to parse binary protocols (over TCP) that are composed of... 2024-6-3 19:0:11 | 阅读: 1 | 收藏 | SANS Internet Storm Center, InfoCON: green - isc.sans.edu lua firmware script1 dissector 50500

ISC Stormcast For Monday, June 3rd, 2024 https://isc.sans.edu/podcastdetail/9006, (Mon, Jun 3rd) 2024-6-3 10:0:2 | 阅读: 1 | 收藏 | SANS Internet Storm Center, InfoCON: green - isc.sans.edu feeds isc papers stevens podcasts

"K1w1" InfoStealer Uses gofile.io for Exfiltration, (Fri, May 31st) Python remains a nice language for attackers and I keep finding interesting scripts that are usuall... 2024-5-31 18:40:46 | 阅读: 7 | 收藏 | SANS Internet Storm Center, InfoCON: green - isc.sans.edu leveldb roaming network yandex chrome

ISC Stormcast For Friday, May 31st, 2024 https://isc.sans.edu/podcastdetail/9004, (Fri, May 31st) 2024-5-31 10:0:2 | 阅读: 0 | 收藏 | SANS Internet Storm Center, InfoCON: green - isc.sans.edu feeds isc papers honeypot

Feeding MISP with OSSEC, (Thu, May 30th) I'm a big fan of OSSEC[1] for years. OSSEC ("Open Source Security Event Correlator") is a comprehen... 2024-5-30 14:56:44 | 阅读: 2 | 收藏 | SANS Internet Storm Center, InfoCON: green - isc.sans.edu misp ossec security ossec2misp wordpress