blueteamsec

627 readers
35 users here now

For [Blue|Purple] Teams in Cyber Defence - covering discovery, detection, response, threat intelligence, malware, offensive tradecraft and tooling, deception, reverse engineering etc.

founded 2 years ago
MODERATORS
digicat
listing: all - local
326
2
From Protest to Peril: Cellebrite Used Against Jordanian Civil Society - The Citizen Lab (citizenlab.ca)
submitted 3 weeks ago by digicat to c/blueteamsec
0 comments fedilink
327
3
After the Takedown: Excavating Abuse Infrastructure with DNS Sinkholes (disclosing.observer)
submitted 3 weeks ago by digicat to c/blueteamsec
0 comments fedilink
328
5
5 KQL Queries to Slash Your Containment Time in Microsoft Sentinel (medium.com)
submitted 3 weeks ago by digicat to c/blueteamsec
0 comments fedilink
329
2
Sigma Detection Classification - This benchmark evaluates LLMs' intrinsic knowledge of detection engineering and the MITRE ATT&CK framework. (research.cotool.ai)
submitted 3 weeks ago by digicat to c/blueteamsec
0 comments fedilink
330
2
Streamlining Security Investigations with Agents (slack.engineering)
submitted 3 weeks ago by digicat to c/blueteamsec
0 comments fedilink
331
2
sdc: Self Decrypting Binary Generator (github.com)
submitted 3 weeks ago by digicat to c/blueteamsec
0 comments fedilink
332
5
Malware Peddlers Are Now Hijacking Snap Publisher Domains (blog.popey.com)
submitted 3 weeks ago by digicat to c/blueteamsec
0 comments fedilink
333
2
Operation Nomad Leopard: Targeted Spear-Phishing Campaign Against Government Entities in Afghanistan (www.seqrite.com)
submitted 3 weeks ago by digicat to c/blueteamsec
0 comments fedilink
334
4
VoidLink: Evidence That the Era of Advanced AI-Generated Malware Has Begun - hyperbole warning - "advanced" as opposed to human productivity enhanced (research.checkpoint.com)
submitted 3 weeks ago by digicat to c/blueteamsec
1 comments fedilink
335
4
How to Get Scammed (by DPRK Hackers) (medium.com)
submitted 3 weeks ago by digicat to c/blueteamsec
1 comments fedilink
336
4
Detection of Kerberos Golden Ticket Attacks via Velociraptor (detect.fyi)
submitted 3 weeks ago by digicat to c/blueteamsec
0 comments fedilink
337
2
Mega RMM KQL Query (github.com)
submitted 3 weeks ago by digicat to c/blueteamsec
0 comments fedilink
338
4
Iranian MOIS operating from Starlink (infosec.pub)
submitted 3 weeks ago* (last edited 3 weeks ago) by digicat to c/blueteamsec
0 comments fedilink
 
 

https://x.com/_CPResearch_/status/2013349461070586054

339
2
Monitor New Actions in Sentinel & Defender XDR (V2) (kqlquery.com)
submitted 3 weeks ago by digicat to c/blueteamsec
0 comments fedilink
340
11
Pro-Russia hacktivist activity continues to target UK organisations (www.ncsc.gov.uk)
submitted 3 weeks ago by digicat to c/blueteamsec
0 comments fedilink
341
6
What's in the box !? - 'we were able to obtain a set of pen-testing tools from an active pen-tester and security analyst in China' (open.substack.com)
submitted 3 weeks ago by digicat to c/blueteamsec
0 comments fedilink
342
3
sliver-tor-bridge: Tor transport bridge for Sliver C2 - anonymous command and control (github.com)
submitted 3 weeks ago by digicat to c/blueteamsec
0 comments fedilink
343
4
Bad Vibes: Comparing the Secure Coding Capabilities of Popular Coding Agents (blog.tenzai.com)
submitted 3 weeks ago by digicat to c/blueteamsec
0 comments fedilink
344
3
Operation Poseidon: Spear-Phishing Attacks Abusing Google Ads Redirection Mechanisms (www.genians.co.kr)
submitted 3 weeks ago by digicat to c/blueteamsec
0 comments fedilink
345
5
GhostVEH: Registers Vectored Exception Handlers by directly manipulating internal LdrpVectorHandlerList structure instead of calling RtlAddVectoredExceptionHandler. (github.com)
submitted 3 weeks ago by digicat to c/blueteamsec
0 comments fedilink
346
4
anamnesis-release: Automatic Exploit Generation with LLMs (github.com)
submitted 3 weeks ago by digicat to c/blueteamsec
0 comments fedilink
347
3
Tangled: Open-source offensive security platform for conducting phishing campaigns that weaponizes iCalendar automatic event processing. (github.com)
submitted 3 weeks ago by digicat to c/blueteamsec
0 comments fedilink
348
3
IRGC WhatsApp phishing kit (github.com)
submitted 3 weeks ago by digicat to c/blueteamsec
0 comments fedilink
349
2
New Remcos Campaign Distributed Through Fake Shipping Document (www.fortinet.com)
submitted 4 weeks ago by digicat to c/blueteamsec
0 comments fedilink
350
2
TamperedChef serves bad ads, with infostealers as the main course (www.sophos.com)
submitted 4 weeks ago by digicat to c/blueteamsec
0 comments fedilink
view more: ‹ prev next ›