Strassi

[briankrebs @briankrebs]

Yup. That's exactly what happened. Account reinstated @[email protected]

[Strassi @Strassi7]

@Suricata_IDS Is this going to be recorded and published anywhere?

[Strassi @Strassi7]

@cyb3rops You can find some Log line from a fortigate in a reddit post. I'm not 100% sure about this IoC ... seems to be an IoC for a logon?! https://t.co/53SnAAGph7

[Strassi @Strassi7]

So it begins ... https://t.co/C7Zk99eXtD <-- fake exploits and impersonating @GossiTheDog ?

[Strassi @Strassi7]

@GossiTheDog Lets assume a breach. How can I sift my logs for IoCs? I checked https://t.co/bm4UBmGRSg <-- you guys think its legit?

[Strassi @Strassi7]

@cyb3rops @malmoeb @TheDFIRReport I need your help for my master thesis. I currently looking for resources on detection opportunities besides the windows event log on windows. Any Hints/Papers/Projects (something like @OSSEM_Project would be awesome).

[Strassi @Strassi7]

@0sm0s1z I think a future vuln scanner should enable users to measure or guide the effectiveness. The new EPSS model might be worth reading: https://t.co/yzsl6rvjLD

I would like to define my risk acceptance and have EPSS to guide my patch efforts on found vulnerabilities.

[vx-underground @vxunderground]

15 members of REvil has been arrested by the Russian authorities.

REvil, once dubbed the "Crown prince of Ransomware", was responsible for the Kaseya supply chain attack, and many other high-profile breaches.

Footage courtesy of the FSB.

[Strassi @Strassi7]

@cyb3rops what are your favorites?

[Strassi @Strassi7]

@AlyssaM_InfoSec

[Strassi @Strassi7]

@OverTheWireCTF Advent Bonanza 2021 ?!

[Strassi @Strassi7]

@haveibeenpwned Does the breach contain passwords or does it not? Can someone clarify this situation for me?

[Strassi @Strassi7]

@cyb3rops @certbund @CERT_at how do you size your windows client event log files?
Would you agree with the (old) microsoft calculation? https://t.co/j67zVL7Arr

[Strassi @Strassi7]

@Chronopost my parcel is not moving. There seems to be a problem with my address. Pls reach out to me

[Strassi @Strassi7]

@TheDFIRReport Can you tell me, what tools are you using to create your timelines and graphs?

[Paul Seekamp @nullenc0de]

I swear, if anyone releases 1 more AD exploit/relay/bypass/LPE/whatever in the next 2 weeks my head is literally going to explode.

[Strassi @Strassi7]

@004ffca @cyb3rops This way it is possible to search related content of a CVE with a single click on its hashtag. Easier to use.

[Strassi @Strassi7]

@GossiTheDog LPE and lateral movement on beachhead hosts; for sure.
Is a standard user able to authenticate against a domain controllers RPC Print Spooler Service?

[Strassi @Strassi7]

@Lee_Holmes yummy!

[Strassi @Strassi7]

@bad_packets Is any particular CVE scanned or just the portal existence?