blueteamsec

679 readers
41 users here now

For [Blue|Purple] Teams in Cyber Defence - covering discovery, detection, response, threat intelligence, malware, offensive tradecraft and tooling, deception, reverse engineering etc.

founded 2 years ago
MODERATORS
digicat
listing: all - local
1651
3
China’s Cybersecurity Companies Advancing Offensive Cyber Capabilities Through Attack-Defense Labs (open.substack.com)
submitted 4 months ago by digicat to c/blueteamsec
0 comments fedilink
1652
2
Bulletproof Defense: Mitigating Risks From Bulletproof Hosting Providers (www.cisa.gov)
submitted 4 months ago by digicat to c/blueteamsec
0 comments fedilink
1653
3
Nation-State Actor’s Arsenal: An In-Depth Look at Lazarus’ ScoringMathTea (0x0d4y.blog)
submitted 4 months ago by digicat to c/blueteamsec
0 comments fedilink
1654
4
China’s attribution strategy has changed; it’s time for us to catch up (bindinghook.com)
submitted 4 months ago by digicat to c/blueteamsec
0 comments fedilink
1655
0
SigmaおよびYARAルールを活用したリアルタイムクライアント監視ツールYAMAGoya - JPCERT/CC Eyes - YAMAGoya, a real-time client monitoring tool that utilizes Sigma and YARA rules (blogs.jpcert.or.jp)
submitted 4 months ago by digicat to c/blueteamsec
0 comments fedilink
1656
1
Detailed Analysis of HeadCalls: Impersonation of Korean Public and Financial Institutions (s2w.inc)
submitted 4 months ago by digicat to c/blueteamsec
0 comments fedilink
1657
1
Frontline Intelligence: Analysis of UNC1549 TTPs, Custom Tools, and Malware Targeting the Aerospace and Defense Ecosystem | Google Cloud Blog (cloud.google.com)
submitted 4 months ago by digicat to c/blueteamsec
0 comments fedilink
1658
2
EventBridge Pattern Matching: Complete Guide to Complex Rules (deceptiq.com)
submitted 4 months ago by digicat to c/blueteamsec
0 comments fedilink
1659
2
itunesstored & bookassetd sandbox escape - Hana's Blog (hanakim3945.github.io)
submitted 4 months ago by digicat to c/blueteamsec
0 comments fedilink
1660
3
The Hidden Risks inside ChatGPT in Entra ID (cyberdom.blog)
submitted 4 months ago by digicat to c/blueteamsec
0 comments fedilink
1661
1
Entra ID Log Analyzer: Turning Raw Logs into Stories (cyberdom.blog)
submitted 4 months ago* (last edited 4 months ago) by digicat to c/blueteamsec
0 comments fedilink
1662
2
Update: Implementation Guidance for Emergency Directive on Cisco ASA and Firepower Device Vulnerabilities (www.cisa.gov)
submitted 4 months ago by digicat to c/blueteamsec
0 comments fedilink
1663
3
Israel National Digital Agency researchers have uncovered an ongoing, sophisticated espionage campaign by SpearSpecter, conducted by Iranian threat actors (govextra.gov.il)
submitted 4 months ago by digicat to c/blueteamsec
1 comments fedilink
1664
1
Be KVM, Do Fraud - discovering KVMs (blog.grumpygoose.io)
submitted 4 months ago by digicat to c/blueteamsec
0 comments fedilink
1665
2
Saeros: Open source HIDS tailored for Microsoft Active Directory and Workstations (github.com)
submitted 4 months ago by digicat to c/blueteamsec
0 comments fedilink
1666
1
SAMDump: Extracts SAM and SYSTEM using Volume Shadow Copy (VSS) API with multiple exfiltration options and XOR obfuscation (github.com)
submitted 4 months ago by digicat to c/blueteamsec
0 comments fedilink
1667
2
GhostX Platform – Offensive Security Module Version: 1.0 (Internal Training – Military & Public Security Use) - Knownsec 404 Team / GhostX R&D - AI generated from the leaks (0x0.st)
submitted 4 months ago by digicat to c/blueteamsec
0 comments fedilink
 
 

src: https://x.com/hackerfantastic/status/1988682933503430879

1668
2
CTO at NCSC Summary: week ending November 16th (ctoatncsc.substack.com)
submitted 4 months ago by digicat to c/blueteamsec
0 comments fedilink
1669
1
UNC5174 Windows Malware Snowlight (sect.iij.ad.jp)
submitted 4 months ago by digicat to c/blueteamsec
0 comments fedilink
1670
1
Ryūjin - Writing a Bin2Bin Obfuscator from Scratch for Windows PE x64 and Fully Deobfuscating It (keowu.re)
submitted 4 months ago by digicat to c/blueteamsec
0 comments fedilink
1671
9
Amazon Inspector detects over 150,000 malicious packages linked to token farming campaign (aws.amazon.com)
submitted 4 months ago by digicat to c/blueteamsec
0 comments fedilink
1672
0
Leveraging Large Models to Assist Automated BYOVD-Driven Vulnerability Discovery (mp.weixin.qq.com)
submitted 4 months ago by digicat to c/blueteamsec
0 comments fedilink
1673
2
git-fsmonitor: This is a proof-of-work for abusing "fsmonitor" against IDE. (github.com)
submitted 4 months ago by digicat to c/blueteamsec
0 comments fedilink
1674
1
Rehabilitating Registry Tradecraft with RegRestoreKey (www.preludesecurity.com)
submitted 4 months ago by digicat to c/blueteamsec
0 comments fedilink
1675
1
ZeroCrumb: Dumping App Bound Protected Credentials & Cookies Without Privileges. (github.com)
submitted 4 months ago by digicat to c/blueteamsec
0 comments fedilink
view more: ‹ prev next ›