New tool: le-hex-to-ip.py, (Thu, Oct 5th) So, this week it is my privilege to be TA-ing for Taz Wake for the beta run of his new class FOR577... 2023-10-6 01:56:31 | 阅读: 10 | 收藏 | SANS Internet Storm Center, InfoCON: green - isc.sans.edu endian github figured isc clausing

ISC Stormcast For Thursday, October 5th, 2023 https://isc.sans.edu/podcastdetail/8688, (Thu, Oct 5th) 2023-10-5 10:0:2 | 阅读: 10 | 收藏 | SANS Internet Storm Center, InfoCON: green - isc.sans.edu feeds isc papers ssh

Apple fixes vulnerabilities in iOS and iPadOS., (Wed, Oct 4th) Apple today released iOS/iPadOS 17.0.3. These updates fix two vulnerabilities. A WebRTC vulnerabili... 2023-10-5 03:53:2 | 阅读: 12 | 收藏 | SANS Internet Storm Center, InfoCON: green - isc.sans.edu exploited privileges elevate webrtc

What's Normal? Connection Sizes, (Wed, Oct 4th) Following up on the "What's Normal" diary from a couple of weeks ago, I have a new one: The size of... 2023-10-5 02:57:51 | 阅读: 10 | 收藏 | SANS Internet Storm Center, InfoCON: green - isc.sans.edu datamash median tcpsize udpsize jq

ISC Stormcast For Wednesday, October 4th, 2023 https://isc.sans.edu/podcastdetail/8686, (Wed, Oct 4th) 2023-10-4 10:0:2 | 阅读: 11 | 收藏 | SANS Internet Storm Center, InfoCON: green - isc.sans.edu isc papers feeds rpi

Are Local LLMs Useful in Incident Response?, (Tue, Oct 3rd) LLMs have become very popular recently. I've been running them on my home PC for the past few mon... 2023-10-3 10:38:16 | 阅读: 11 | 收藏 | SANS Internet Storm Center, InfoCON: green - isc.sans.edu vicuna llama2 windows llama injection

ISC Stormcast For Tuesday, October 3rd, 2023 https://isc.sans.edu/podcastdetail/8684, (Tue, Oct 3rd) 2023-10-3 10:0:2 | 阅读: 14 | 收藏 | SANS Internet Storm Center, InfoCON: green - isc.sans.edu isc papers feeds ssh

ISC Stormcast For Monday, October 2nd, 2023 https://isc.sans.edu/podcastdetail/8682, (Mon, Oct 2nd) 2023-10-2 18:10:2 | 阅读: 10 | 收藏 | SANS Internet Storm Center, InfoCON: green - isc.sans.edu feeds isc papers rpi

Friendly Reminder: ZIP Metadata is Not Encrypted, (Mon, Oct 2nd) ZIP archives store compressed files including their metadata (filesize, date/time, ...). When a con... 2023-10-2 14:36:36 | 阅读: 15 | 收藏 | SANS Internet Storm Center, InfoCON: green - isc.sans.edu crc32 pkzip zipdump educated mimikatz

Analyzing MIME Files: a Quick Tip, (Sun, Oct 1st) In my blog post "Quickpost: Analysis of PDF/ActiveMime Polyglot Maldocs" I explain how to search th... 2023-10-1 15:51:42 | 阅读: 15 | 收藏 | SANS Internet Storm Center, InfoCON: green - isc.sans.edu emldump activemime analysis microsoft

Simple Netcat Backdoor in Python Script, (Sat, Sep 30th) Why reinvent the wheel? We are all lazy and, if we have a tool that offers some interesting capabil... 2023-9-30 15:3:16 | 阅读: 15 | 收藏 | SANS Internet Storm Center, InfoCON: green - isc.sans.edu ncat archivo wqdaw chdir nombre

Are You Still Storing Passwords In Plain Text Files?, (Fri, Sep 29th) "Infostealer" malware have been in the wild for a long time now. Once the computer's victim is infe... 2023-9-29 15:35:31 | 阅读: 20 | 收藏 | SANS Internet Storm Center, InfoCON: green - isc.sans.edu passwords yesterday xameco isc freelance

ISC Stormcast For Friday, September 29th, 2023 https://isc.sans.edu/podcastdetail/8680, (Fri, Sep 29th) 2023-9-29 10:15:2 | 阅读: 14 | 收藏 | SANS Internet Storm Center, InfoCON: green - isc.sans.edu papers isc feeds stormcast podcasts

IPv4 Addresses in Little Endian Decimal Format, (Thu, Sep 28th) If you look at the XML EventData of Windows events like 1002 (DHCP error), you will see something l... 2023-9-28 13:45:44 | 阅读: 10 | 收藏 | SANS Internet Storm Center, InfoCON: green - isc.sans.edu endian decimal recipe cyberchef recipes

ISC Stormcast For Thursday, September 28th, 2023 https://isc.sans.edu/podcastdetail/8678, (Thu, Sep 28th) 2023-9-28 10:0:2 | 阅读: 9 | 收藏 | SANS Internet Storm Center, InfoCON: green - isc.sans.edu isc feeds papers 28th mastodon

ISC Stormcast For Wednesday, September 27th, 2023 https://isc.sans.edu/podcastdetail/8676, (Wed, Sep 27th) 2023-9-27 10:0:2 | 阅读: 7 | 收藏 | SANS Internet Storm Center, InfoCON: green - isc.sans.edu feeds papers isc stevens

Apple Releases MacOS Sonoma Including Numerous Security Patches, (Tue, Sep 26th) CVE-2023-40384 [important] AirportA permissions issue was addressed with improved redact... 2023-9-27 04:30:9 | 阅读: 18 | 收藏 | SANS Internet Storm Center, InfoCON: green - isc.sans.edu addressed moderate memory privileges bypass

ISC Stormcast For Tuesday, September 26th, 2023 https://isc.sans.edu/podcastdetail/8674, (Tue, Sep 26th) 2023-9-26 20:10:2 | 阅读: 12 | 收藏 | SANS Internet Storm Center, InfoCON: green - isc.sans.edu papers isc feeds ssh

A new spin on the ZeroFont phishing technique, (Tue, Sep 26th) Last week, I came across an interesting phishing e-mail, in which a text written in a font with zer... 2023-9-26 17:13:25 | 阅读: 14 | 收藏 | SANS Internet Storm Center, InfoCON: green - isc.sans.edu phishing ffffff 2023t6 employment trustworthy

ISC Stormcast For Monday, September 25th, 2023 https://isc.sans.edu/podcastdetail/8672, (Mon, Sep 25th) 2023-9-25 10:0:2 | 阅读: 10 | 收藏 | SANS Internet Storm Center, InfoCON: green - isc.sans.edu isc feeds papers diary