𝒜𝐵𝒟𝒰𝐿𝐿𝒜𝐻 𝐵𝒜𝒢𝐻𝒰𝒯𝐻

Cybersecurity Engineer @ COGNNA | Security Analyst | Penetration Tester | Purple Teamer

[𝒜𝐵𝒟𝒰𝐿𝐿𝒜𝐻 𝐵𝒜𝒢𝐻𝒰𝒯𝐻 @0xCyberY]

تسريب البيانات… دروس قاسية من الماضي لحماية المستقبل

https://t.co/oignNhoAJI

#leapat

[𝒜𝐵𝒟𝒰𝐿𝐿𝒜𝐻 𝐵𝒜𝒢𝐻𝒰𝒯𝐻 @0xCyberY]

Phishing remains the most common method for compromising accounts. However, phishing through Google Workspace emails in a more stealthy and sophisticated manner is a story worth mentioning.
Read the story : https://t.co/cF0sGnyJY8

[Chad Tilbury @chadtilbury]

Following the Trail of Threat Actors in Google Workspace Audit Logs by @megan_roddie https://t.co/nxVOSwBOdI >> A great intro to the cheat sheet: https://t.co/ocpyiqiPIe

[𝒜𝐵𝒟𝒰𝐿𝐿𝒜𝐻 𝐵𝒜𝒢𝐻𝒰𝒯𝐻 @0xCyberY]

CAPA provides insights into the potential actions the program can perform. For instance, it may indicate if the file behaves as a backdoor, can install services, or communicates via HTTP.

https://t.co/Yh3uObwhWZ

#malwareanalysis #reverseengineering

[blackorbird @blackorbird]

Supply Chain Poisoning of 7ZIP on the Microsoft App Store
#APT
https://t.co/yPFlXbZPzu

[Florian Roth ⚡️ @cyb3rops]

The sample mentioned in the @CISACyber report AA23-339A on attacks against Adobe ColdFusion CVE-2023-26360 is ForkDump by @BillDemirkapi

- only ESET gets it right

Sample
https://t.co/dojObhUwLo

CISA report
https://t.co/neT9tchHmF

[COGNNA @cognna]

Thank you for joining us #blackhatmea2023 !

It was an absolute pleasure meeting all of you in person, and we can't wait to welcome you at more exciting events in the future.
Stay tuned for what's to come!

#CognnaAtBlackHatMEA #ThankYou

[𝒜𝐵𝒟𝒰𝐿𝐿𝒜𝐻 𝐵𝒜𝒢𝐻𝒰𝒯𝐻 @0xCyberY]

I will be one of the exhibiter for @cognna at #blackhatmea.

Visit us to explore our comprehensive range of threat management, threat detection, rapid response, and compliance assurance solutions to safeguard your organization against evolving cyber threats.

[COGNNA @cognna]

Great start to the first day of #BlackHatMEA2023! Looking forward to seeing you tomorrow for another exciting day!
انطلاقة رائعة لأول يوم في بلاك هات 2023
ننتظركم بشوق غدا في يوم جديد

[Florian Roth ⚡️ @cyb3rops]

Introducing THOR-Cloud Lite 🌩️: Seamless On-Demand Forensic Scanning Made Easy

- apply YARA + Sigma + IOCs
- it's free
- many more features upcoming

Blog 📘
https://t.co/rXgf3DUUso

Release Session 📺
https://t.co/ynWU2wrewd

Register for Free ⚡️
https://t.co/wazEjbN014

[COGNNA @cognna]

Discover what's new in cybersecurity.

#TrendCheck #Cognna #cybersecurity #infosec #security #hackers #threatintelligence #vulnerabilitymanagement #riskmanagement #CybersecurityMonth

[Cyber Security Club @KSU_Cyber]

بالتعاون مع @cognna يدعوكم نادي الأمن السيبراني بجامعة الملك سعود لحضور الندوة السيبرانية بعنوان :

" Cybersecurity Career Path"

مع المدير التقني لشركة كوقنا م.زياد الشهري

يوم الاثنين 30 أكتوبر
الساعة 7:30 مساءًا
يوجد شهادة حضور🌟

رابط التسجيل :
https://t.co/bhG37Cl55H

[COGNNA @cognna]

Once you've identified the top three common #cybersecurity attacks, the next natural question that may come to mind is:
'How do I mitigate them?'

So, here's the answer.
#AskCognna #CybersecurityAwarenessMonth

[Florian Roth ⚡️ @cyb3rops]

You can either hunt for it or check and apply our Sigma rules

If you're unsure whether a detection idea is already covered by an existing rule, you can use the https://t.co/OnIQos7jOe, which was developed by my team member @ph_t__

We've also integrated the API of that service into the Sigma VSCode extension

[𝒜𝐵𝒟𝒰𝐿𝐿𝒜𝐻 𝐵𝒜𝒢𝐻𝒰𝒯𝐻 @0xCyberY]

you can use SysmonSimulator.

- eventcreate [https://t.co/Kzy38dljgY]

- SysmonSimulator [https://t.co/6glKvYnV5J]

#EDR #detection

[𝒜𝐵𝒟𝒰𝐿𝐿𝒜𝐻 𝐵𝒜𝒢𝐻𝒰𝒯𝐻 @0xCyberY]

If you want to test the EDR detections and correlation rules used by Blue Teams, you may need to create custom events in a specific event log.

To do this, you can use Microsoft's eventcreate utility, which lets you create specific logs at APPLICATION or SYSTEM; for Sysmon logs,

[Microsoft 365 Sales @gitbitorg]

Cybersecurity Certifications to pursue in 2023 (For FREE):

1. https://t.co/L4y8Y2iKH9
2. https://t.co/yzmqmfZHya
3. https://t.co/8NvSJAzPha
4. https://t.co/yQiyj6wJiC
5. https://t.co/R0BKYfAElB

[𝒜𝐵𝒟𝒰𝐿𝐿𝒜𝐻 𝐵𝒜𝒢𝐻𝒰𝒯𝐻 @0xCyberY]

- Map of worldwide ransomware attacks: [https://t.co/AWOt2cX5EY]

- Catalog of Supply Chain Compromises: [https://t.co/ZwfSpSRtR0]

- Software Supply Chain Compromises - A Living Dataset: [https://t.co/TOu1Et0gd1]

- DeFi Hack database: [https://t.co/E5wqTaypBI]

#cybersecurity

[𝒜𝐵𝒟𝒰𝐿𝐿𝒜𝐻 𝐵𝒜𝒢𝐻𝒰𝒯𝐻 @0xCyberY]

𝐍𝐢𝐜𝐡𝐞 & 𝐆𝐞𝐧𝐞𝐫𝐚𝐥 𝐂𝐲𝐛𝐞𝐫 𝐈𝐧𝐜𝐢𝐝𝐞𝐧𝐭 𝐃𝐚𝐭𝐚 𝐒𝐨𝐮𝐫𝐜𝐞𝐬

- ransomwatch: [https://t.co/Q7RWDtFRQy]

- MalwareBazaar: [https://t.co/6gdNnLSiFM]

- Verizon Data Breach Investigations Report (DBIR): [https://t.co/hwsyuIWHfh]

[𝒜𝐵𝒟𝒰𝐿𝐿𝒜𝐻 𝐵𝒜𝒢𝐻𝒰𝒯𝐻 @0xCyberY]

- APT & Cybercriminals Campaign Collection: [https://t.co/KV1oJQ2xhF]

- APTnotes: [https://t.co/RGdAOkA8U7]

- Data Breach Chronology: [https://t.co/yM3WaU6JMt]

- Breach-Report-Collection: [https://t.co/uzo4FbT4gK]