Rashad

Threat Analyst in IBM X-Force Command Center

[The Hacker News @TheHackersNews]

⚠️ Three Linux kernel flaws are being exploited.

One can enable local privilege escalation. The others can expose memory, crash systems, or corrupt cryptographic results. All three are now in CISA’s KEV catalog.

Read: https://t.co/louT7sXDxL

[Rashad @abdullaoglu]

@Cyb3rMonk Asset criticality

[Rashad @abdullaoglu]

@JamesSharpFCDO Mr. James gələn dəfə deyin onun yanında gürcülərin armud duşesinidə qoysunlar. Belə getmir qadan alım.

[Rashad @abdullaoglu]

@SBousseaden There are 2 more identical events can help to spot ZeroLogon exploit process.
1.
LogName=System
SourceName=Microsoft-Windows-Security-Kerberos
EventCode=4
EventType=2

2.
LogName=System
SourceName=Microsoft-Windows-GroupPolicy
EventCode=1006
EventType=2

[Rashad @abdullaoglu]

@zodiacon I ordered already :-)

[Przemek Skowron @evilrez]

#threathunting #threatintel mindmap to help understand better one of the #Lazarus recent campaigns in Italy.

I wish to see something like that every time as a result of intel synthesis process, before I will start hunting process.

Toolbox: @MITREattack, Diamond Model, Xmind

[Stratosphere Laboratory AIC FEE CTU @StratosphereIPS]

“We have more than 1TB of malware datasets published for free, go get them.” - @eldracote @wallofsheep #DEFCON27
https://t.co/gdtp6Za6I6

[Rashad @abdullaoglu]

@nstakhanova @ProjectHoneynet Is there any link available?

[Natalia Stakhanova @nstakhanova]

Apparently rogue cell phone towers in Washington is not a big deal... it's been known and they're still there... "In March 2018, the Department of Homeland Security confirmed that fake cell phone towers ... had been placed in the nation’s capital." https://t.co/j1sP8RojAb

[Rashad @abdullaoglu]

@elnazavr @evernote Zim desktop wiki

[Rashad @abdullaoglu]

@WarConPL @hasherezade How we can register?

[SERENE-RISC @SERENE_RISC]

Dr. Natalia Stakhanova from @UNB Presented "Know your Enemy: Malware Authorship Attribution" at the Academic Track at @AtlSecCon https://t.co/htukjJLA4R

[Rashad @abdullaoglu]

@verovaleros @StratosphereIPS Good luck :-)

[Seba García @eldracote]

Yesterday we launched the Independent Women In Tech Fund. https://t.co/f8Nsjk4FAM. To help women attend conferences by giving free tickets. Help us spread the word. .@womenintechfund

[Seba García @eldracote]

Maltrail: a malicious traffic detection system. Use publicly available (black)lists , suspicious trails, static trails compiled from AV reports and custom lists https://t.co/aGl74vkOgG

[Raffael Marty @raffaelmarty]

Slides from #TheSAS2018 conference are online: 'AI & ML in Cyber Security - Why Algorithms Are Dangerous" https://t.co/SnJajVRAtr #ai #ml #security #algorithms

[Rashad @abdullaoglu]

@nstakhanova Happy Women's Day!

[Raffael Marty @raffaelmarty]

What I have wanted for a long time: A simple #R package that visualizes the main 'makeup' of any data I have. Just do it: libraray(DataExplorer). See an intro here: https://t.co/vaWma9qOxl #datascience #exploration

[Rashad @abdullaoglu]

@eldracote @mrigaki Is it using previous sqrrl platform https://t.co/tD8nKjNCYi ?;-)

[Virus Bulletin @virusbtn]

As Stratosphere IPS launched a new website (https://t.co/Sq97HxX8hd) here's @eldracote at VB2015 in Prague, introducing the project https://t.co/WWQ5o7Dq1m