digicat

joined 2 years ago
MODERATOR OF
blueteamsec
sorted by: new top controversial old
4
US needs to impose ‘real costs’ on bad actors, State Department cyber official says (therecord.media)
submitted 4 hours ago by digicat to c/blueteamsec
0 comments fedilink
3
solidcore_bypass: PowerShell script that executes a non-whitelisted .NET executable from memory, bypassing SolidCore application control. (github.com)
submitted 4 hours ago by digicat to c/blueteamsec
0 comments fedilink
2
Analyzing The Simplest C++ Program (oneraynyday.github.io)
submitted 4 hours ago by digicat to c/blueteamsec
0 comments fedilink
3
btrpa-scan: Bluetooth Low Energy (BLE) scanner with Resolvable Private Address (RPA) resolution using Identity Resolving Keys (IRKs) (github.com)
submitted 4 hours ago by digicat to c/blueteamsec
0 comments fedilink
5
China may be rehearsing a digital siege, Taiwan warns (therecord.media)
submitted 4 hours ago by digicat to c/blueteamsec
0 comments fedilink
1
rustbof: A Rust template for writing Beacon Object Files (BOFs) (github.com)
submitted 5 hours ago by digicat to c/blueteamsec
0 comments fedilink
1
ElephantPoint: a SharePoint Enumeration Tool (www.lrqa.com)
submitted 5 hours ago by digicat to c/blueteamsec
0 comments fedilink
1
Simple Crystal Palace RDLL template for Adaptix (github.com)
submitted 5 hours ago by digicat to c/blueteamsec
0 comments fedilink
1
CTO at NCSC Summary: week ending February 15th (ctoatncsc.substack.com)
submitted 5 hours ago by digicat to c/blueteamsec
0 comments fedilink
1
BADIIS to the Bone: New Insights to a Global SEO Poisoning Campaign (www.elastic.co)
submitted 8 hours ago by digicat to c/blueteamsec
0 comments fedilink
6
Multiple Threat Actors Rapidly Exploit React2Shell: A Case Study of Active Compromise - JPCERT/CC Eyes (blogs.jpcert.or.jp)
submitted 1 day ago by digicat to c/blueteamsec
0 comments fedilink
3
Bypassing Administrator Protection by Abusing UI Access (projectzero.google)
submitted 1 day ago by digicat to c/blueteamsec
0 comments fedilink
MC1137611 - Deception feature in Microsoft Defender for Endpoint will be retired from public preview | Microsoft 365 Message Center Archive in c/blueteamsec
HKLM\SYSTEM\Setup\sMarTdEpLoY -  The (Static) Keys to Abusing PDQ SmartDeploy in c/blueteamsec
Breaking Into Your Network? Zer0 Effort. - DEF CON 33 Overview - research campaign investigating the security of Zero Trust Network Access solutions in c/blueteamsec
ITW CRITICAL SECURITY BULLETIN: Trend Micro Apex One™ (On-Premise) Management Console Command Injection RCE Vulnerabilities in c/blueteamsec
malefic: IoM implant, C2 Framework and Infrastructure - use seen in the wild in c/blueteamsec
Early Warning Signals: When Attacker Behavior Precedes New Vulnerabilities in c/blueteamsec
Welcome to the new home of what was /r/Blueteamsec and how it works.. in c/blueteamsec
[–] digicat 1 points 6 months ago* (last edited 6 months ago) (1 children)

I think this might need to be @jerry

Welcome to the new home of what was /r/Blueteamsec and how it works.. in c/blueteamsec
[–] digicat 1 points 6 months ago

V welcome..

LOLRMM is a curated list of Remote Monitoring and Management (RMM) - now with SIEM detections - see comment for important PR for KQL in c/blueteamsec
[–] digicat 1 points 6 months ago

note this PR which needs integrating for the KQL to work - https://github.com/magicsword-io/LOLRMM/pull/100

Shutting the Door on Vishing-Driven Data Theft in Salesforce - "UNC6040’s phone-phishers lure employees into approving a fake dataloader[.]io app, hijacking Salesforce APIs to siphon customer data." in c/blueteamsec
Shutting the Door on Vishing-Driven Data Theft in Salesforce - "UNC6040’s phone-phishers lure employees into approving a fake dataloader[.]io app, hijacking Salesforce APIs to siphon customer data." in c/blueteamsec
Clorox versus Cognizant Complaint - Cognizant’sconduct on August 11, 2023, demonstrated spectacularly that it was failing to do so. Cognizantrepeatedly gave a cybercriminal access to Clorox’s network in c/blueteamsec
view more: ‹ prev next ›