APT notes

[Artem I. Baranov @artem_i_baranov]

Have you ever wondered what are the main sources of Windows vulns in kernel mode. I went through Microsoft's CVE portal over the past three years to find out which Windows km components have been patched most frequently - consuming company's resources.
https://t.co/7jzKh4C4AY

[HackerSploit @HackerSploit]

How to develop an Adversary Emulation Plan: https://t.co/Ohqk1WK4ZB
@aptnotes

[Will @BushidoToken]

Incredible. CERT India published a list of file hash IOCs as an image and have also turned off right-click on their website 🤣 smh 💀

[vx-underground @vxunderground]

When a vendor shares IOC's in an image so you can't copy paste the SHA256

[profdeibert @RonDeibert]

NEW: @apple announces #LockdownMode, a major change to iPhone security that promises to help high risk users + other actions to hold the mercenary spyware industry to account https://t.co/30QbGruxi5

My thread w context & details 👇

[Raphael Satter @razhael]

For at least a decade, an interlocking set of Indian APT groups has been hacking lawyers & litigants on behalf of Western private eyes.

Their goal? Winning lawsuits & arbitration battles.

@specialreports takes a look at India's cyber mercenary industry.
https://t.co/5e4uhjTm8p

[APT notes @aptnotes]

@chrisdoman

[APT notes @aptnotes]

Just added the 500th report to #aptnotes! #infosec #DFIR

[APT notes @aptnotes]

@0x1414 @DissectMalware it's sha1 and we organize, sort and store all the PDFs since 2008, but you're right

[APT notes @aptnotes]

oh cool and it looks like our Github webhook died, off to fix that -- anywho -- we merged the tools fix from https://t.co/Bsv1izKd9R repo this morning #infosec #DFIR #aptnotes

[APT notes @aptnotes]

apologies all for the masso backlog -- things have been crazy busy in the "things we get paid to do" category -- we are working through it and trying to sort out better forms of automation #DFIR #infosec #aptnotes

[APT notes @aptnotes]

#aptnotes #DFIR #infosec @FireEye https://t.co/zUSSXqPhf5

[APT notes @aptnotes]

@DragosInc @DragosInc does PDFs the right way -- allow the option to input or skip contact info

[APT notes @aptnotes]

Dear dear #infosec vendors, here’s an idea: maybe you could make a PDF version of your reporting so it’s easier to save for posterity. I know of a group that would really appreciate not having to modify things by hand so it doesn’t look like vomit #DFIR

[APT notes @aptnotes]

@jcran @kbandla And...kb has help

[APT notes @aptnotes]

@jcran @kbandla We do our best... just been swamped with fighting dragons lately

[APT notes @aptnotes]

https://t.co/nivZq8aYMO Add multiple reports

Fixes #187
Fixes #186
Fixes #185
Fixes #182
Fixes #177
Fixes #176
Fixes #175
Fixes #174
Fix...

[APT notes @aptnotes]

https://t.co/UKqst1sD0b Update Readme

[APT notes @aptnotes]

https://t.co/UHOyCI476a Add multiple reports

Fixes #197, Fixes #196, Fixes #194, Fixes #193, Fixes #192, Fixes #191,
Fixes #190, Fixes #...

[APT notes @aptnotes]

https://t.co/ZQnd5lnplp updated to add tools link