eCrime Labs

eCrimeLabs provide Intelligence,Research,Innovation,Analysis and Design

[eCrime Labs @eCrimeLabs]

The "Cratos - Use your bloddy indicator" video from @hack_lu 2023 is now public https://t.co/5XoYBEgsRN

We have released the code as open source and hope that the community use it as well as contribute to making it better.

https://t.co/7FXNuSPMol

#MISP #CRATOS

[eCrime Labs @eCrimeLabs]

Tomorrow morning in Luxembourg, check the https://t.co/k2uNN4uowo talk "Cratos - Use your bloody indicators" where we are releasing an open sourced FastAPI proxy for allowing indicators from MISP to be easily used in organizations security components #hacklu

[MISP (@[email protected]) @MISPProject]

MISP 2.4.164 released with new tag relationship feature, many improvements and a security fix. We strongly recommend everyone to upgrade as soon as possible.

https://t.co/eCtTIZ8so2

[eCrime Labs @eCrimeLabs]

MISP Purge Events tool v.0.1 - released
This can help in various cases to expire/purge older events, cleanup blocklist or delete events from a specific organization.

https://t.co/XO8WPEvHXZ

#SharingIsCaring #Security #itsikkerhed #MISP

[eCrime Labs @eCrimeLabs]

#MISP v2.4.159 - This releases includes many improvements, bug fixes and improvements concerning performance on large datasets.

https://t.co/2oaYcwkEJb

[eCrime Labs @eCrimeLabs]

MISP Auto tagging: In Organiztions we trust
eCrimeLabs have just released the tool "MISP-autotagging" to automate the adding of custom local tags to a #MISP event based on the creator organization...

https://t.co/siecU4wfok

#SharingIsCaring #MISP #itsikkerhed

[eCrime Labs @eCrimeLabs]

All our own, community and hosted #MISP instances has been updated to version 2.4.158 including multiple security fixes, bugs fixed and improvements.
It is amazing to see the achievements performed by a combination of the core team and the community.

https://t.co/FZAsWloxjw

[eCrime Labs @eCrimeLabs]

@AltShiftPrtScn https://t.co/zBdgFUu4Fh know it is not directly mentioned but the techniques for Remote desktop tools is in Mitre but if you need to explain to some that AnyDesk should not be used, see link ;)

[eCrime Labs @eCrimeLabs]

All customer hosted and managed #MISP instances has been upgrade to 2.4.157
that included some usability fixes following the large changes of 2.4.156 along with some improvements.

https://t.co/WGlh8tJAPA

[eCrime Labs @eCrimeLabs]

All hosted and managed #MISP instances has been updated to latest release 2.4.156 massive work has been done by an amazing community

https://t.co/OmTKpIrQFa

[eCrime Labs @eCrimeLabs]

@MISPProject @carnak8 Think that would be amazing ;)

[eCrime Labs @eCrimeLabs]

@MISPProject @carnak8 @MISPProject Does a vetting initiative exists, and if yes where to find the requirements?

[Florian Roth ⚡️ @cyb3rops]

Our prayers were answered 🙏

LAUREL
Linux Audit – Usable, Robust, Easy Logging

- merges auditd events
- JSON output
- high performance
- say goodbye to arg0 & arg1

#auditd #SIEM #SOC

Repo
https://t.co/sL2qUojAKr

Auditd problems
https://t.co/bVyg3lFV49

[eCrime Labs @eCrimeLabs]

ACH or Analysis of competing hypotheses can be used as a part of an investigation or incident response situation to evaluate the adversary.

https://t.co/2ImxTrTdfj

#Cybersikkerhed #IncidentResponse #CTI

[eCrime Labs @eCrimeLabs]

eCrimeLabs has just released the latest version of our MFA solution available for our hosted customers using MISP

Read more on our services https://t.co/QMC3bvrg6W

[Alexandre Dulaunoy @[email protected] @adulau]

Thanks to @cedowens for the C2-JARM repository, it's a great idea. I found it so cool that I made a specific @MISPProject jarm object and a MISP #OSINT event with the known fingerprints. Nifty for pivoting.

MISP event: https://t.co/coPYNIDWLx

Object: https://t.co/A8rkAP7DBw

[MISP (@[email protected]) @MISPProject]

We are glad to support a new research project "The Social Perspective in Intelligence Activity Among Information Sharing Communities" to analyse the social activities among MISP sharing communities. #ThreatIntel #informationsharing

https://t.co/vVObMotNun

[eCrime Labs @eCrimeLabs]

eCrimeLabs has released Phish2MISP v.1.0, a small script to make the collection of data related to a phishing site into a MISP event

https://t.co/ugXicq8APU

#MISP #sharingiscaring #Cybersikkerhed

[eCrime Labs @eCrimeLabs]

MITRE ATT&CK for improved metrics and KPI on detection capabilities

How to use the MITRE ATT&CK Framework for better metrics and KPI's in a Security Operations Center.

https://t.co/nP6klu8Olt

#itsikkerhed #cybersecurity

[DRand - @[email protected] @DennisRand]

Det er rigtigt godt at se den allerede voksende opbakning for et Dansk MISP Threat Sharing Community fra såvel private som offentlige organisationer.

Der er plads til flere, så hold jer ikke tilbage.
https://t.co/WqS5JqZ3p0

#misp #itsikkerhed #sikkerhed #cybersikkerhed