Gam4er retweeted
Analyst report for IR cases from 2020 is available github.com/klsecservices/Pub… #DFIR #incidentresponse #threathunting
Gam4er retweeted
All incident response cases from 2019 in our yearly analyst report. Adversaries initial vectors, tools, #MITRE techniques and more. github.com/klsecservices/Pub…
Gam4er retweeted
Manufacturing (CNC) security presented by @574rz on @SecurityWeek’s Singapore ICS Cyber Security Conference. Now watch your #CNC spindles and #industry40 closely! Slides are finally available. Whitepaper to be published soon. #icssecurity #otsecurity github.com/klsecservices/Pub…
Gam4er retweeted
More on DCS security in our power plant automation research github.com/klsecservices/SPP… from #36c3 talk media.ccc.de/v/36c3-10689-on…. Now with DIY assessment, wordlists and awesome visuals.
tldr; learn to do basic assessment by yourself, ask uncomfortable questions, update your DCS
Gam4er retweeted
A guide on power plant automation and its security issues on #36c3 conference. Slides and tools from our talk github.com/klsecservices/Pub… kudos to @repdet @_moradek_ @Alender911 @epotseluevskaya @zero_wf @574rz
Gam4er retweeted
Analysts’ predictions on growing corporate threats for 2020 #cloud #insiders github.com/klsecservices/Pub…
Gam4er retweeted
Stories and lessons from Incident Response practice by Pavel Kargapoltsev on #ZeroNights 2019. Thanks for all the questions from audience and organisers for great event! Get the slides
github.com/klsecservices/Pub… ATT&CK inside! #DFIR #blueteam
Gam4er retweeted
Most used #MITRE ATT&CK techniques and more operational security stats in our #threathunting report github.com/klsecservices/Pub…
Gam4er retweeted
#zeroday exploit in Windows Kernel Transaction Manager was used in APT attack.
securelist.com/zero-day-in-w…
It's not even so much fun, that we are in the top (as usual), but a big gap in the number of reviews
Прикольно даже не столько то, что мы в топе (как обычно), а большой отрыв по количеству отзывов
gartner.com/reviews/market/e…
Gam4er retweeted
Yerstaday I provided talk at the @offzone_moscow confference about hunting for EoP in Windows. Here you can find my slides speakerdeck.com/heirhabarov/…
@offzone_moscow crew, thank you for the event! It was ammazing, you did a great job! Hope to see you at the OFFZOONE 2019 :)
Gam4er retweeted
Offline bruteforce of AD accounts w/o authentication with AS-REP roasting attack by @_mohemiv github.com/hashcat/hashcat/p… #hashcat #activedirectory
Gam4er retweeted
Just released s7scan by @zero_wf, a tool for enumerating Siemens S7 PLCs that supports both TCP/IP and LLC networks github.com/klsecservices/s7s…
Наши коллеги собрали интересную статистику про то как в ходе того или иного пентеста получается достигнуть поставленных целей.
Осторожно, от некоторых цифр могут остаться синяки от фейспалмов
We've gathered some statistical data based on results of security assessment engagements performed in 2017 by Kaspersky Lab Security Services team. github.com/klsecservices/Pub…
Sweeeet ;)
AWS EC2 AmazonLinux2 and Ubuntu AMIs now come with #PSCore6 by default! aws.amazon.com/about-aws/wha…
Ну вот и в твитере забоянили xitter.cf/cyb3rops/status/953408…
This is not the CSV file you are looking for > CSV injection
Virustotal
virustotal.com/en/file/34b27…
Paste
ghostbin.com/paste/qgd7g
Background
xorl.wordpress.com/2017/12/1…
Gam4er retweeted
Some tricks how to detect Credential Dumping attack technique. Slides from my #ZeroNights talk
slideshare.net/heirhabarov/h…
Gam4er retweeted
🌟 . * . 🌙
*
* . 🛰️ . ✨ *
. *
Thanks @Twitter, we can
always use more space 🚀
. . .
. * 🌏 *
🌞
* ☄️
#280characters