Liebe Fahrgäste,
aus aktuellem Anlass wurde die
(H) Messe Ost/Gruga umbenannt.
Wir sind bunt unterwegs und stehen für Vielfalt und Respekt!
Ende der Durchsage. 📢
https://t.co/IEoWVVG1Yz 🌈
We decided it was time to start an organization for #DFIRTrack on GitHub. The code and all related repos will be moving over the next few days. Also, a few improvements for the docker setup should be released in the near future. 😀
Stay tuned for updates!
#opensource
For all of you folks running VT retro hunts today, try just searching in the bar for `crowdsourced_yara_rule:APT_Backdoor_SUNBURST_1`
The yara hits have already been indexed, save your retro hunts. BTW you can do this with anything from @cyb3rops 's signature base repo.
Version 2.0 of the @ThaiCERT "Threat Group Cards: A Threat Actor Encyclopedia" is released today. Over 100 threat groups/APT's have been added to this revised version!
https://t.co/G2AvEvpyNB
Just released sigmatools 0.17.0 with a lot of new:
• backends
• field mappings
• improvements&fixes
Get it:
• GitHub: https://t.co/csEdvuzbgM…
• PyPI: https://t.co/6MWhbY5zCG… (pip install sigmatools)
Thanks to all contributors!
ASGARD 2 MISP Integration
Search all #Emotet related @MISPProject events, add them to a rule set and start a scan for these IOCs on all connected endpoints in less than 20s
MISP + ASGARD2 = Endpoint Visibility