Attack Surface [Guest Diary], (Wed, Sep 4th) [This is a Guest Diary by Joshua Tyrrell, an ISC intern as part of the SANS.edu BACS program]Mana... 2024-9-5 09:15:9 | 阅读: 5 | 收藏 | SANS Internet Storm Center, InfoCON: green - isc.sans.edu network geo software walls malicious

Scans for Moodle Learning Platform Following Recent Update, (Wed, Sep 4th) On August 10th, the popular learning platform "Moodle" released an update fixing CVE-2024-43425. Re... 2024-9-4 22:37:39 | 阅读: 3 | 收藏 | SANS Internet Storm Center, InfoCON: green - isc.sans.edu moodle trainer php attacker pointed

ISC Stormcast For Wednesday, September 4th, 2024 https://isc.sans.edu/podcastdetail/9124, (Wed, Sep 4th) ISC Stormcast For Wednesday, September 4th, 2024 https://isc.sans.edu/podcastdetail/9124... 2024-9-4 10:0:2 | 阅读: 1 | 收藏 | SANS Internet Storm Center, InfoCON: green - isc.sans.edu isc 9124 stormcast wednesday

ISC Stormcast For Tuesday, September 3rd, 2024 https://isc.sans.edu/podcastdetail/9122, (Tue, Sep 3rd) 2024-9-3 10:0:2 | 阅读: 4 | 收藏 | SANS Internet Storm Center, InfoCON: green - isc.sans.edu security papers isc feeds 9th

Protected OOXML Text Documents, (Mon, Sep 2nd) Just like "Protected OOXML Spreadsheets", Word documents can also be protected:You have to look... 2024-9-3 04:28:27 | 阅读: 4 | 收藏 | SANS Internet Storm Center, InfoCON: green - isc.sans.edu 0xc6 salt 0xad 0x37

Wireshark 4.4: Converting Display Filters to BPF Capture Filters, (Sun, Sep 1st) Display filters are used to define expressions that decide which packets get displayed, and which n... 2024-9-1 22:56:40 | 阅读: 2 | 收藏 | SANS Internet Storm Center, InfoCON: green - isc.sans.edu decide brings grayed stevens senior

Wireshark 4.4.0 is now available, (Sat, Aug 31st) Published: 2024-08-31. Last Updated: 2024-08-31 05:56:41 UTCby Didier Stevens (Version: 1)This i... 2024-8-31 13:56:41 | 阅读: 1 | 收藏 | SANS Internet Storm Center, InfoCON: green - isc.sans.edu didier stevens switching converting senior

ISC Stormcast For Friday, August 30th, 2024 https://isc.sans.edu/podcastdetail/9120, (Fri, Aug 30th) 2024-8-30 10:0:2 | 阅读: 3 | 收藏 | SANS Internet Storm Center, InfoCON: green - isc.sans.edu security 9th papers vegassep feeds

Simulating Traffic With Scapy, (Fri, Aug 30th) It can be helpful to simulate different kinds of system activity. I had an instance where I wanted... 2024-8-30 08:1:35 | 阅读: 5 | 收藏 | SANS Internet Storm Center, InfoCON: green - isc.sans.edu scapy setlevel sendp 42000 threaded

Live Patching DLLs with Python, (Thu, Aug 29th) In my previous diary[1], I explained why Python became popular for attackers. One of the given reas... 2024-8-29 15:24:7 | 阅读: 6 | 收藏 | SANS Internet Storm Center, InfoCON: green - isc.sans.edu python debugger malicious memory

ISC Stormcast For Thursday, August 29th, 2024 https://isc.sans.edu/podcastdetail/9118, (Thu, Aug 29th) 2024-8-29 10:0:2 | 阅读: 3 | 收藏 | SANS Internet Storm Center, InfoCON: green - isc.sans.edu security feeds isc vegassep 4th

ISC Stormcast For Wednesday, August 28th, 2024 https://isc.sans.edu/podcastdetail/9116, (Wed, Aug 28th) 2024-8-28 10:0:2 | 阅读: 3 | 收藏 | SANS Internet Storm Center, InfoCON: green - isc.sans.edu security vegassep 4th papers

Vega-Lite with Kibana to Parse and Display IP Activity over Time, (Tue, Aug 27th) I have been curious for a while looking at Kibana's Vega log parsing options to try to come up with... 2024-8-28 08:34:20 | 阅读: 4 | 收藏 | SANS Internet Storm Center, InfoCON: green - isc.sans.edu vega dshield github kibana cowrie

Why Is Python so Popular to Infect Windows Hosts?, (Tue, Aug 27th) It has been a while since I started to track how Python is used in the Windows eco-system[1]. Almos... 2024-8-27 18:24:42 | 阅读: 0 | 收藏 | SANS Internet Storm Center, InfoCON: green - isc.sans.edu python windows environ userprofile powershell

ISC Stormcast For Tuesday, August 27th, 2024 https://isc.sans.edu/podcastdetail/9114, (Tue, Aug 27th) 2024-8-27 10:0:2 | 阅读: 4 | 收藏 | SANS Internet Storm Center, InfoCON: green - isc.sans.edu security 4th 9th isc vegassep

From Highly Obfuscated Batch File to XWorm and Redline, (Mon, Aug 26th) If you follow my diaries, you probably already know that one of my favorite topics around malware i... 2024-8-26 15:1:14 | 阅读: 8 | 收藏 | SANS Internet Storm Center, InfoCON: green - isc.sans.edu ans remnux argtypes restype malwarezoo

ISC Stormcast For Monday, August 26th, 2024 https://isc.sans.edu/podcastdetail/9112, (Mon, Aug 26th) 2024-8-26 10:0:2 | 阅读: 4 | 收藏 | SANS Internet Storm Center, InfoCON: green - isc.sans.edu security papers 9th feeds

Pandas Errors: What encoding are my logs in?, (Fri, Aug 23rd) While trying to process some of my honeypot data, I ran into the following error in my Python scrip... 2024-8-23 20:26:15 | 阅读: 4 | 收藏 | SANS Internet Storm Center, InfoCON: green - isc.sans.edu cowrie pandas username ssh dates

ISC Stormcast For Friday, August 23rd, 2024 https://isc.sans.edu/podcastdetail/9110, (Fri, Aug 23rd) 2024-8-23 10:0:2 | 阅读: 4 | 收藏 | SANS Internet Storm Center, InfoCON: green - isc.sans.edu security feeds 4th isc vegassep

OpenAI Scans for Honeypots. Artificially Malicious? Action Abuse?, (Thu, Aug 22nd) For a whille now, I have seen scans that contain the pattern "%%target%%" in the URL. For example,... 2024-8-23 01:1:37 | 阅读: 5 | 收藏 | SANS Internet Storm Center, InfoCON: green - isc.sans.edu openai stupid wordpress threatlist anthropic