Grepton

[Troy Hunt @troyhunt]

While we’re here: https://t.co/1nWbPMeNSF

[John Lambert @JohnLaTwC]

The power of community and open source to accelerate learning in #infosec
📎https://t.co/nS8jSecQSB

[🥝🏳️‍🌈 Benjamin Delpy @gentilkiwi]

Want to block [MS-EFSR] / #PetitPotam calls?🤔
Use RPC filters ! 🥳

put previous Tweet in a file: `block_efsr.txt` then:

> netsh -f block_efsr.txt

Just tested: it blocks remote connections & not local EFS usage

Thank you to @CraigKirby to remind us this RPC technology filter!

[Grepton @ReptonSec]

@GossiTheDog Microsoft deploying the Printnightmare patch

[Grepton @ReptonSec]

@atc_project @cyb3rops @oscd_initiative Thanks, I'll continue to follow/see if I can contribute

[Grepton @ReptonSec]

@atc_project @cyb3rops Is ATC the only project organising and structuring Sigma rule detections, dependencies & playbooks etc? I don't see anyone else doing it and the ATC project seems quiet