Dominik Phillips

[Smukx.E @5mukx]

An unexpected journey into Microsoft Defender's signature World

Blog:- https://t.co/17xtrUXk1A

#windows #defender #reverse

[🅰🅳🅼 @securityfreax]

Modern C2 implants use sleep masking & metamorphic code to stay hidden. We’re revealing how to unmask them using low-level runtime telemetry (ETW & CPU profiling) live in production including a POC with a lightweight sensor.

My team will be presenting our research at x33fcon:

https://t.co/qhtckSyxx5

[Aman @Amank1412]

Someone built a transparent Mario game that runs OVER IDE so can play while waiting for Copilot to write code.

[Mandiant (part of Google Cloud) @Mandiant]

The FLARE Learning Hub is launching with three modules:

- Malware Analysis Crash Course
- The Go Reverse Engineering Reference
- Introduction to Time Travel Debugging (TTD)

📟 Start learning: https://t.co/iw6SGpq9St

[Vaishnavi @_vmlops]

MICROSOFT BUILT A TOOL THAT CONVERTS LITERALLY ANYTHING INTO CLEAN MARKDOWN FOR YOUR LLM

pdfs. word docs. excel. powerpoint. audio. youtube urls

one pip install and your AI pipeline stops choking on raw files forever

no custom parsers. no broken layouts. no garbled text.

just clean, structured markdown your LLM can actually read

https://t.co/RSt0CczfYa

[SEKTOR7 Institute @SEKTOR7net]

AV/EDR Lab Environment Setup

A curated list of various resources helpful in building own malware-centric research lab.

A post by Udayveer Singh (@m4lici0u5)

Source: https://t.co/ZM3A1n1zNQ

#redteam #blueteam #maldev #malwaredevelopment

[Nikhil @Ox4d5a]

Windows Internals Part31: Creating IRP with IoAllocateIrp() and DO_DIRECT_IO

https://t.co/Puw7rfL0Jd

#infosec #windows #linux #cybersecurity

[NK @Nikaiw]

meet VMkatz, https://t.co/eza4AXRuFT

[tetsuo @tetsuoai]

Understanding the Windows PE Header and Section Table.

[SEKTOR7 Institute @SEKTOR7net]

Powershell for offensive security.

A list of offensive tactics with practical tips in using Powershell during security operations.

A post by Het Mehta (@hetmehtaa).

Source: https://t.co/HLQfIZEw4s

#redteam #blueteam #maldev #malwaredevelopment

[Oddvar Moe @Oddvarmoe]

You should checkout the Mimikatz Missing Manual that @Carlos_Perez has made. So much awesome documentation in there.

https://t.co/otMCNZPW7Z

[Vivek Galatage @vivekgalatage]

Beginner's Guide to Linkers

https://t.co/F0VwEaOxF0

[Smukx.E @5mukx]

Malware development intermediate: EDR Evasion - A New Technique Using Hardware Breakpoints

https://t.co/ofQFTRmBRl

[Alexandre Borges @ale_sp_brazil]

This presentation remains the go-to reference for learning the inner workings of the IDA Pro Hex-Rays decompiler:

(video) https://t.co/20HMiMjMv2

(article) https://t.co/wcwWv1OPia

#decompiler #reverseengineer #informationsecurity #cybersecurity

[SEKTOR7 Institute @SEKTOR7net]

Windows process internals - VADs (Virtual Address Descriptors).

A deep dive into VAD structures, their purpose and function, helpful in memory forensics.

A post by imp hash.

Source: https://t.co/QlN54Fa1lp

#redteam #blueteam #maldev #malwaredevelopment

[Nicolas Krassas @Dinosn]

Ancient telnet bug happily hands out root to attackers https://t.co/unwzntPnkF

[SentinelOne @SentinelOne]

Even more concerning: Models that crush math & coding benchmarks show minimal gains on real security analysis.

“Reasoning” ≠ analyst thinking

[The Hacker News @TheHackersNews]

🔓 Google/Mandiant released Net-NTLMv1 rainbow tables that enable cracking password hashes in under 12 hours using consumer hardware.

🔗 Learn more here → https://t.co/YNLx41xxJX

[Binni Shah @binitamshah]

rzweb : A complete browser-based reverse engineering platform built on Rizin, running entirely client-side via WebAssembly : https://t.co/lAkYHVHPvI

[Byte Atlas @ByteAtlas]

[blog post] MalpediaFLOSSed
https://t.co/9WDsJ4Xixo