CyberPoint SRT

The mission of the CyberPoint SRT is to improve the security knowledge and capabilities of our community, our customers, our products, and our programs.

[CyberPoint SRT @CyberPoint_SRT]

Deploying a distributed #honeypot #network. #Fork of T-Pot #autoinstall contains #ansibleplaybook and #vagrant files https://t.co/jht3XgxM0d

[CyberPoint SRT @CyberPoint_SRT]

Sniffing USB Keystrokes from PowerShell Empire via ETW. https://t.co/MyTmY4QV74 @ruxcon

[CyberPoint SRT @CyberPoint_SRT]

GUNSEN. Powering a #Fuzzer on commodity #hardware. #ansibleplaybooks and scripts to manage #KVM-based infrastructure https://t.co/IoxlfY3e60

[CyberPoint SRT @CyberPoint_SRT]

Deploying a distributed #honeypot #network. #Fork of T-Pot #autoinstall contains #ansibleplaybook and #vagrant files https://t.co/jht3XgPmRL

[CyberPoint SRT @CyberPoint_SRT]

Sniffing #USB #Keystrokes from #PowerShell Empire via #ETW. https://t.co/MyTmY4QV74 @ruxcon

[CyberPoint SRT @CyberPoint_SRT]

Sniffing #USB #Keystrokes from #PowerShell Empire via #ETW. https://t.co/MyTmY4QV74 @ruxcon

[CyberPoint SRT @CyberPoint_SRT]

Deploying a distributed #honeypot #network. #Fork of T-Pot #autoinstall contains #ansibleplaybook and #vagrant files https://t.co/jht3XgxM0d

[CyberPoint SRT @CyberPoint_SRT]

Logging #Keystrokes with Event Tracing for #Windows (ETW), a follow-up to our talk @ruxcon, Make ETW Great Again. https://t.co/JNvFjrYo0v

[CyberPoint SRT @CyberPoint_SRT]

GUNSEN. Powering a #Fuzzer on commodity #hardware. #ansibleplaybooks and scripts to manage #KVM-based infrastructure https://t.co/IoxlfY3e60

[CyberPoint SRT @CyberPoint_SRT]

Logging #Keystrokes with Event Tracing for #Windows (ETW), a follow-up to our talk @ruxcon, Make ETW Great Again. https://t.co/JNvFjrYo0v

[CyberPoint SRT @CyberPoint_SRT]

GUNSEN. Powering a #Fuzzer on commodity #hardware. #ansibleplaybooks and scripts to manage #KVM-based infrastructure https://t.co/OMYMT07cl6

[CyberPoint SRT @CyberPoint_SRT]

In case you were planning on logging into your FB account from hxxps://www.logginsfb.tk/ ... don't. More cred stealing....

[CyberPoint SRT @CyberPoint_SRT]

our ThreatIntel "system" is now "distributed"

[CyberPoint SRT @CyberPoint_SRT]

cred stealers for chase and steam accounts with valid LetsEncrypt cers from *.irl.com.pk. Not seeing these on any black lists yet.

[CyberPoint SRT @CyberPoint_SRT]

Screen shot from our latest project. The team clearly hard at "work":

[CyberPoint SRT @CyberPoint_SRT]

Great to see our work being mentioned. Warning: title is a bit misleading: https://t.co/BJbmtz2zTu

[CyberPoint SRT @CyberPoint_SRT]

Phishing research is coming along... a (bad/unfinished) cred stealer with a fresh LetsEncrypt cert

[CyberPoint SRT @CyberPoint_SRT]

Code coverage project status: alpha... at best. But graphs! Graphs mean good research, right?

[CyberPoint SRT @CyberPoint_SRT]

Continuing to see #Mongodb scans as well. This time from Tianjin, China. If you run Mongo checkout the sec checklist https://t.co/oTmRN5tRY7

[CyberPoint SRT @CyberPoint_SRT]

When bored in paradise brute forcing telnet seems to be the way to occupy your time. Increased attempts from Seychelles this morning...