Gam4er

ИБ, ИТ и котики

[Gam4er @Gam4enko]

@_RastaMouse @TwoSevenOneT It seems like that

[Gam4er @Gam4enko]

However, terminating the process isn't always convenient, especially if it's a critical system process that you don't want to disrupt. In the case of CLR code injection, a better approach is to load the malicious code into a new AppDomain and then unload that domain once it's done—leaving no lingering artifacts.
This is how it's implemented in my code: https://t.co/z6N6HEzlFY
Process still running, but all artifacts disappeared

[kl_secservices @kl_secservices]

Analyst report for IR cases from 2020 is available https://t.co/y5lw5vre3J #DFIR #incidentresponse #threathunting

[Gam4er @Gam4enko]

@ANDREW1ALBERTT He is wonderful, but IMHO, with this lovely color it is much better to be a British cat, than a puppy.
Call him Barsik (popular cat name in Russia)

[Gam4er @Gam4enko]

@MalwareJake Don't worry, they just want to eat them

[kl_secservices @kl_secservices]

All incident response cases from 2019 in our yearly analyst report. Adversaries initial vectors, tools, #MITRE techniques and more. https://t.co/ISkLdw8OHo

[kl_secservices @kl_secservices]

Manufacturing (CNC) security presented by @574rz on @SecurityWeek’s Singapore ICS Cyber Security Conference. Now watch your #CNC spindles and #industry40 closely! Slides are finally available. Whitepaper to be published soon. #icssecurity #otsecurity https://t.co/oNBN4Ju36S

[Gam4er @Gam4enko]

@divernix Когда мне Гугл предлагает подобную дичь, то я рефлексирую: а не свернул ли я где-то не туда?

[Gam4er @Gam4enko]

@divernix Еретик

[Gam4er @Gam4enko]

@jarnomn @gentilkiwi Mr Benjamin try to emphasize, that AV vendors sometimes can not detect/prevent the prosess of ectraction credentials, isn't it? Detecting just files are boring ;)

[kl_secservices @kl_secservices]

More on DCS security in our power plant automation research https://t.co/9NboZqsMpa from #36c3 talk https://t.co/w4EJ0Ck36V. Now with DIY assessment, wordlists and awesome visuals.
tldr; learn to do basic assessment by yourself, ask uncomfortable questions, update your DCS

[Gam4er @Gam4enko]

@vysecurity Yep. Great tool

[kl_secservices @kl_secservices]

A guide on power plant automation and its security issues on #36c3 conference. Slides and tools from our talk https://t.co/NtqyqZXa5Z kudos to @repdet @_moradek_ @Alender911 @epotseluevskaya @zero_wf @574rz

[kl_secservices @kl_secservices]

Analysts’ predictions on growing corporate threats for 2020 #cloud #insiders https://t.co/q7WeMDQI9c

[kl_secservices @kl_secservices]

Stories and lessons from Incident Response practice by Pavel Kargapoltsev on #ZeroNights 2019. Thanks for all the questions from audience and organisers for great event! Get the slides
https://t.co/c4hD1VkVjd ATT&CK inside! #DFIR #blueteam

[Gam4er @Gam4enko]

@alukatsky Алексей, а что тогда делать, чтобы новые технологии применялись? Похоже (и к лучшему) тактика "напугать заказчика" не работает ;)

[Gam4er @Gam4enko]

@divernix Да лааааадно. Есть пруфы?

[kl_secservices @kl_secservices]

Most used #MITRE ATT&CK techniques and more operational security stats in our #threathunting report https://t.co/op7QjsORy2

[Gam4er @Gam4enko]

@LasVegasLocally Seems like a part of the Boring Company advertising campaign:
1) Run a lot of nasty insects to LV
2) Give couple flamethrower to good guys
3) Make a good fire show
4) Increase capitalization of the Boring Company five times

как тебе такое @elonmusk ?

[Gam4er @Gam4enko]

@malwrhunterteam Pizdec (пиздец) that word is quite popular at all of exUSSR republics.
Just because almost everything that happens in these areas is "пиздец" :) Other is quite similar like Georgian...
https://t.co/AaAVzLDQgh