AL FRANCO

[AL FRANCO @alefro77]

Equipo de seguridad @AcueductoBogota. Hay mucho phishing muy bien posicionado en SEO que consulta directamente con su API para traer datos reales a clientes cuando cae en la página maliciosa.

[AL FRANCO @alefro77]

@colCERT

[AL FRANCO @alefro77]

Cuidado @LATAM_CO con latamarllines[.]co

[Ella se esconde @foreverforher]

Filas de tractomulas desde la madrugada obstaculizando el tránsito y generando contaminación auditiva. @SectorMovilidad @Ambientebogota

[AL FRANCO @alefro77]

@1ZRR4H @malwrhunterteam @JAMESWT_MHT @0xToxin @RussianPanda9xx @ankit_anubhav @StopMalvertisin cmd.exe" /c dir /b *.png *.jpg *.bmp *.gif>"C:\Users\Admin\AppData\Local\DesktopPic\PicList.txt"

[AL FRANCO @alefro77]

@1ZRR4H @malwrhunterteam @JAMESWT_MHT @0xToxin @RussianPanda9xx @ankit_anubhav @StopMalvertisin muchas gracias....solo añadiendo un poco de comportamiento para TTPs -> LOLBAS
C:\Windows\System32\certutil.exe" -decode "" "C:\Users\Admin\AppData\Local\DesktopPic\WallP.exe

@SimitResponde

[Matthew @embee_research]

New Record for My Longest CyberChef Recipe Ever... 😅

A 22 operation configuration extractor in CyberChef. Utilising Regex, AES, Registers and Flow Control to decode as 3 stage malware sample 🕵️‍♂️

https://t.co/hEPs49151v

#MalwareAnalysis #Cyberchef

[Kostas @Kostastsale]

This is a pretty nice graphic explaining how Kerberos Auth takes place.

Useful to have as a reference when you have to explain and visualize attacks such as Pass The Ticket, Kerberoasting and AS-REP Roasting.

Credit: @0xNarek 🙏🙏

[Cyber Detective💙💛 @cyb_detective]

ChatGPT for Digital Forensic

Large collection of examples of using #chatgpt for #dfir:

Artefact identification
Incident response
Searching
Programming

and more.

https://t.co/kE9orHswgL

[Justine Moore @venturetwins]

Teachers: "AI is a disaster, how am I going to know who is cheating?!"

Students:

[AL FRANCO @alefro77]

Y llegó ese día en que me vi bajando edge desde chrome...desde un osx además. La competencia está muy linda #bingchatgpt

[Michael Koczwara @MichalKoczwara]

I think I got it finally 🤘

Hunting Havoc C2 🎯

63 hits

[Gerald Auger, Ph.D. @Gerald_Auger]

Responsible for IT and #cybersecurity at your work?

20 years has taught me good tools are HUGE

Check out these 5 SOC Analyst web-based tools that will LEVEL UP your SOC game and help you move faster on detecting ‘bad’

The first one I bet you haven't heard of... 👇

[🧵]

[prin @fuxksniper]

A small gift from my side to all bug bounty hunters.
My 8-hour long burp suite focused course is for free.
share to someone who needs it.

#bugbountytips
#bugbounty
#infosec

(rt & share + enjoy)

https://t.co/qp6r1KV83v

[Chad Tilbury @chadtilbury]

An easy way to quickly get up to date on the MSDT vulnerability.

[Kyle Hanslovan @KyleHanslovan]

For the detection engineers and hunters chasing MS-MSDT/#Follina, keep an eye on child processes with sdiagnhost.exe parent process. #BlueTeam 💙

[Florian Roth ⚡️ @cyb3rops]

Thanks to @c3rb3ru5d3d53c for extending the existing #Sigma rule to cover the #Follina vulnerability while I’m on vacation

PR
https://t.co/2jFEP14rf4

It already got merged & is immediately available in the free Aurora Lite

Blog by @GossiTheDog
https://t.co/NlmIglpW4l

[Karsten Hahn @struppigel]

I once made a process injection infographic for a workshop
https://t.co/El7fkvXRWV

[Andreano Lanusse @andreanolanusse]

Are you this old? 😃

[Fluid Attacks @fluidattacks]

The #OSCP exam is one of the hardest certifications out there for pentesters. Many people take this exam to test their #pentesting skills, but most of them don’t pass it on the first attempt. Here are some tips to practice before taking the test. #CyberSecurity #EthicalHacking👨🏻‍💻