HCyber retweeted
A new client-server communication protocol, VFS GUI, and more performance upgrades make this the fastest and most scalable version of Velociraptor yet.
Learn all about the exciting new features and upgrades here: rapid7.com/blog/post/2023/03…
HCyber retweeted
🚀 Introducing #DFIR_IRIS v2! 🎉 Our IR collaboration platform just got better:
✅ Group management, access control and LDAP
✅ Comments, MD editors & new reports formats
✅ New customers page and stats
✅ Improved integrations
And much more! github.com/dfir-iris/iris-we…
HCyber retweeted
🚨 Nuclei-Templates v9.4.1 🚨
🆕 69 templates, 7 contributors + 27 new CVEs including:
💥 CVE-2023-28343: Command Injection
💣 CVE-2023-28432: Information Disclosure
💣 CVE-2022-1329: RCE Vulnerability
Find out more here:
👉 🔗 github.com/projectdiscovery/…
HCyber retweeted
A new update with a PsExec hotfix has now been posted!
Get the tools at sysinternals.com
See what's new on the Sysinternals Blog: techcommunity.microsoft.com/…
HCyber retweeted
Our community member @DfirJos has an excellent blog piece covering two practical examples of using Velociraptor to alert you in real-time when adversaries conduct hands-on-keyboard activity on systems of the IT-infrastructure that you are monitoring.
docs.velociraptor.app/blog/2…
HCyber retweeted
Cool post by @DfirJos explaining some thought process behind tracking adversary in Velociraptor docs.velociraptor.app/blog/2… @velocidex
HCyber retweeted
What are some of the first things you do when setting up Azure subscriptions?
Here's some of my favorites, and I'd love to hear from others too :)
First, I always start by setting up billing anomaly alerts (and budgets/budget alerts)
learn.microsoft.com/en-us/az…
HCyber retweeted
Just released Hayabusa 2.2.0 for the #SECCON CTF and conference workshop. JSON log input, GeoIP log enrichment, many performance enhancements, bug fixes and more!
github.com/Yamato-Security/h…
HCyber retweeted
New year, new release! Ghostwriter v3.2 is now available and includes a new tagging feature and an all new activity logging interface. Find out more in this blog post: ghst.ly/40EM4ix posts.specterops.io/ghostwri…
HCyber retweeted
I updated the Hayabusa artifact for Velociraptor. (Hayabusa v1.4.1 => 2.1.0) Should be faster, more customizable and more accurate than before: docs.velociraptor.app/exchan…
HCyber retweeted
Beta 3 of #DFIR_IRIS v2 is now out! It will be the last beta before the release 👷♂️
As for the last one, a demonstration instance is available at v200.beta.dfir-iris.org 😋 We appreciate your feedback!
✅ The source code is available here: github.com/dfir-iris/iris-we…
HCyber retweeted
this website for understanding Linux commands you paste in is so good explainshell.com/explain?cmd…
HCyber retweeted
This is exactly what we defenders need :
1. What type of vulnerability
2. Details on affected software (versions)
3. Patch info
4. How does a successful exploitation look like = IOCs (logs, temp files, proc starts, crashes etc)
..
21. POC code
..
82. how you discovered it
Indicators of Compromise for #ManageEngine CVE-2022-47966:
🔺Log File Entries
🔺Shodan Exposure
🔺Potential Post-Exploitation Activities
Deep-dive blog and POC will be released next week.
horizon3.ai/manageengine-cve…
Awesome effort by @JamesHorseman2, Naveen, and @hacks_zach
HCyber retweeted
Katana v0.0.3 now supports defining custom fields for data extraction/collection. Check out the changelog for new features & bug fixes!
Feature Link - github.com/projectdiscovery/…
GH Release - github.com/projectdiscovery/…
#hackwithautomation #infosec #bugbounty #webcrawling
HCyber retweeted
Do you find ZAP useful?
You can show your appreciation by just starring the main repo: github.com/zaproxy/zaproxy
Every star counts⭐
#owasp #zaproxy #AppSec
HCyber retweeted
Merry Xmas everyone! We just release Hayabusa v1.9 and v2.0 with all commands refactored to subcommands for easier use! Hayabusa is now 1 years old! Still just getting started but hope you are finding it useful.
github.com/Yamato-Security/h…
#Hayabusa #DFIR #ThreatHunting
HCyber retweeted
For those unfamiliar with DFIR-IRIS (@dfir_iris), it is a free, open source incident response platform that includes a host of useful and innovative features even many commercial platforms don't possess. Check it out here using the link below!
dfir-iris.org/
HCyber retweeted
Investigation Scenario 🔎
A user reported their mouse moving around on the screen by itself for a few minutes. The cursor appeared to open and close a few documents on the desktop.
What do you look for to investigate whether an incident has occurred?
#InvestigationPath #DFIR
