blueteamsec

544 readers
7 users here now

For [Blue|Purple] Teams in Cyber Defence - covering discovery, detection, response, threat intelligence, malware, offensive tradecraft and tooling, deception, reverse engineering etc.

founded 2 years ago
MODERATORS
digicat
listing: all - local
801
3
koney: Koney is a Kubernetes operator that enables you to define so-called deception policies for your cluster. Koney automates and uses eBPF to detect, log, and forward alerts (github.com)
submitted 2 months ago by digicat to c/blueteamsec
0 comments fedilink
802
3
[2505.21244] When to Deceive: A Cross-Layer Stackelberg Game Framework for Strategic Timing of Cyber Deception (arxiv.org)
submitted 2 months ago by digicat to c/blueteamsec
0 comments fedilink
803
4
Salty Seagull: A VSAT Honeynet to Follow the Bread Crumb of Attacks in Ship Networks (arxiv.org)
submitted 2 months ago by digicat to c/blueteamsec
0 comments fedilink
804
3
Developing a Transit Cybersecurity Framework Community Profile: Project Update (Draft) (csrc.nist.gov)
submitted 2 months ago by digicat to c/blueteamsec
0 comments fedilink
805
4
Sludge for Good: Slowing and Imposing Costs on Cyber Attackers (arxiv.org)
submitted 2 months ago by digicat to c/blueteamsec
0 comments fedilink
806
16
The Great SSL Certificate Panic (redmonk.com)
submitted 2 months ago by digicat to c/blueteamsec
4 comments fedilink
807
4
Bypassing Enrollment Restrictions to Break BYOD Barriers in Intune (temp43487580.github.io)
submitted 2 months ago by digicat to c/blueteamsec
0 comments fedilink
808
4
Operating Outside the Box: NTLM Relaying Low-Privilege HTTP Auth to LDAP (specterops.io)
submitted 2 months ago by digicat to c/blueteamsec
0 comments fedilink
809
4
THOR: Secure Transformer Inference with Homomorphic Encryption (eprint.iacr.org)
submitted 2 months ago by digicat to c/blueteamsec
0 comments fedilink
810
2
CTO at NCSC Summary: week ending August 24th (ctoatncsc.substack.com)
submitted 2 months ago by digicat to c/blueteamsec
0 comments fedilink
811
3
Discovery in U.S. Spyware Litigation: A Double-Edged Sword? (www.justsecurity.org)
submitted 2 months ago by digicat to c/blueteamsec
0 comments fedilink
812
4
Certifiably robust malware detectors by design (arxiv.org)
submitted 2 months ago by digicat to c/blueteamsec
0 comments fedilink
813
3
A tag to rule them all: Using AWS tags to enumerate cloud resources (blog.pepperclipp.com)
submitted 2 months ago by digicat to c/blueteamsec
0 comments fedilink
814
2
APT-C-08（蔓灵花）组织新载荷披露 - APT-C-08 (Crane Spirit Flower) Organization's New Payload Revealed (mp.weixin.qq.com)
submitted 2 months ago by digicat to c/blueteamsec
0 comments fedilink
815
2
StardustChollima/BlueNoroff盗取TG账号后发起ZoomClickFIX钓鱼 - StardustChollima/BlueNoroff stole TG accounts and launched ZoomClickFIX phishing attacks (mp.weixin.qq.com)
submitted 2 months ago by digicat to c/blueteamsec
0 comments fedilink
816
2
AzureStrike: An HTA Application which builds Azure (Entra) Scenarios for Red Team Simulations (github.com)
submitted 2 months ago by digicat to c/blueteamsec
0 comments fedilink
817
2
rpc2wc: RPC to WebClient startup - "Code for triggering WebClient through an RPC call. Since it did not end up panning out the code was never very cleaned up and very much remained in a PoC" (github.com)
submitted 2 months ago by digicat to c/blueteamsec
0 comments fedilink
818
3
The Fragile Balance: Assumptions, Tuning, and Telemetry Limits In Detection Engineering (nasbench.medium.com)
submitted 2 months ago by digicat to c/blueteamsec
0 comments fedilink
819
2
Silent Harvest: Extracting Windows Secrets Under the Radar (sud0ru.ghost.io)
submitted 2 months ago by digicat to c/blueteamsec
0 comments fedilink
820
2
Hunting for Malware Networks (dti.domaintools.com)
submitted 2 months ago by digicat to c/blueteamsec
0 comments fedilink
821
4
Slice: SAST + LLM Interprocedural Context Extractor (noperator.dev)
submitted 2 months ago by digicat to c/blueteamsec
0 comments fedilink
822
4
phishurl-list: Phishing URL dataset from JPCERT/CC (github.com)
submitted 2 months ago by digicat to c/blueteamsec
0 comments fedilink
823
3
Evolving Mule Tactics in the META Region (www.group-ib.com)
submitted 2 months ago by digicat to c/blueteamsec
0 comments fedilink
824
4
When a SSRF is enough: Full Docker Escape on Windows Docker Desktop (CVE-2025-9074) - a reminder that Docker is not a security boundary (blog.qwertysecurity.com)
submitted 2 months ago by digicat to c/blueteamsec
0 comments fedilink
825
4
AppLockerInspector: Audits an AppLocker policy XML and reports weak/misconfigured/risky settings, including actual ACL checks. (github.com)
submitted 2 months ago by digicat to c/blueteamsec
0 comments fedilink
view more: ‹ prev next ›