🅳🅴🅵🆂🅴🅲🅽🆂🅰🆃🆃🅰🅲🅺

#CyberSecurity #Defense #Attack #Offensive #Forensics #Osint #BlueTeam #RedTeam #PenTesting

[Florian Roth ⚡️ @cyb3rops]

💯

[🅳🅴🅵🆂🅴🅲🅽🆂🅰🆃🆃🅰🅲🅺 @defsecnsattack]

Misp project created a dedicated Misp instance to share information:
https://t.co/9YdPVv8HEU ask them by DM the access.

#COVID19 dedicated MISP https://t.co/Fe7qK8DcmT

[MISP (@[email protected]) @MISPProject]

We have a dedicated MISP to share information about #COVID2019 https://t.co/64bWDpZAKr - If you want access DM us on Twitter.

[Julien Vanegue @jvanegue]

With all these computer security conferences getting canceled, security professionals may actually be forced into securing computers.

[🅳🅴🅵🆂🅴🅲🅽🆂🅰🆃🆃🅰🅲🅺 @defsecnsattack]

SMBv3 Compression Tester
Multiple scripts and detection tools to check if a Windows machine has SMBv3 protocol enabled with the compression feature.
Our NSE script is based on smb2-capabilities.nse but we will PR the nmap repository with those changes.
https://t.co/gNgcZr6U8r

[Dario Bressanini @DarioBressanini]

PERCHÉ serve l’isolamento sociale. Il mio piccolo contributo (con il Lego come al solito 😅) https://t.co/rIpyWGxUkH

[Paolo Camilli @paolocamilli]

La spiego semplice semplice! ✏️#iorestoacasa #restiamoacasa

[MANUEL Ⓜ️ @Manuel_Real_Off]

Mi è arrivato questo di whatsapp
Che dire: #restiamoacasa

[micatwitto @micatwitto]

Vediamo se così riuscite a capire.
È semplice.

#iorestoacasa #irresponsabili

[Ring3API 🇺🇦 @ntlmrelay]

🔬"PRACTICAL THREAT HUNTING: DEVELOPING AND RUNNING A
SUCCESSFUL THREAT HUNTING PROGRAM" by @arpanrvl and @washalsec 💪
📕[SLIDES]: https://t.co/7glzsSzDT2
#ThreatHunting #blueteam #mitre #sacon

[🅳🅴🅵🆂🅴🅲🅽🆂🅰🆃🆃🅰🅲🅺 @defsecnsattack]

AggressorScripts
Disclaimer: These scripts are to help you audit your machines or machines you're authorized to audit.
https://t.co/TGqXSXqvcz

[🅳🅴🅵🆂🅴🅲🅽🆂🅰🆃🆃🅰🅲🅺 @defsecnsattack]

This tool is intended for penetration testers who want to perform an engagement
quickly and efficiently. While this tool can be used for more covert operations
(including some additions below), it really shines when used at the scale of a
large network.
https://t.co/SKbzDGcL14

[🅳🅴🅵🆂🅴🅲🅽🆂🅰🆃🆃🅰🅲🅺 @defsecnsattack]

PowerExfil
A collection of custom data exfiltration scripts for Red Team assessments.

https://t.co/0PcgKRIu8J

[🅳🅴🅵🆂🅴🅲🅽🆂🅰🆃🆃🅰🅲🅺 @defsecnsattack]

VB2019 paper: Pulling the PKPLUG: the adversary playbook for the long-standing espionage activity of a Chinese nation-state adversary
https://t.co/MCjGLJswH3

[🅳🅴🅵🆂🅴🅲🅽🆂🅰🆃🆃🅰🅲🅺 @defsecnsattack]

Threat Dragon is a free, open-source, cross-platform threat modeling application including system diagramming and a rule engine to auto-generate threats/mitigations. It is an OWASP Incubator Project. integration with other development lifecycle tools.
https://t.co/KobUWaLjBr

[🅳🅴🅵🆂🅴🅲🅽🆂🅰🆃🆃🅰🅲🅺 @defsecnsattack]

Evasion techniques - Malware Evasion Encyclopedia, which contains over 50 techniques used by various malwares to detect virtualized and sandboxed environments.
https://t.co/XHOEkxC7Qt

[🅳🅴🅵🆂🅴🅲🅽🆂🅰🆃🆃🅰🅲🅺 @defsecnsattack]

Intelligence operation against targets in Indonesia

“C:\Windows\System32\rundll32.exe” shell32.dll,ShellExec_RunDLL regsvr32 /s C:\ProgramData\pubpool.dll /i:process104.dll
“C:\WINDOWS\system32\regsvr32.exe” /s C:\ProgramData\pubpool.dll /i:process104.dll
https://t.co/GJjrO13HrS

[🅳🅴🅵🆂🅴🅲🅽🆂🅰🆃🆃🅰🅲🅺 @defsecnsattack]

The ADTimeline script generates a timeline based on Active Directory replication metadata for objects considered of interest.
Replication metadata gives you the time at which each replicated attribute for a given object was last changed.
https://t.co/aQcTgxDD3P

[🅳🅴🅵🆂🅴🅲🅽🆂🅰🆃🆃🅰🅲🅺 @defsecnsattack]

MSSQL forensics (1) - MDF fundamentals
https://t.co/ikgFpkvKiQ

[🅳🅴🅵🆂🅴🅲🅽🆂🅰🆃🆃🅰🅲🅺 @defsecnsattack]

Interesting Recon Script
https://t.co/YwiWntWCp6

[🅳🅴🅵🆂🅴🅲🅽🆂🅰🆃🆃🅰🅲🅺 @defsecnsattack]

Fraudsters cloak credit card skimmer with fake content delivery network, ngrok server
https://t.co/V8FPTiIvtI