Gr3yh00d

cat Infosec | grep "DFIR", also love to keep things short but precise! …

[Tansu Yegen @TansuYegen]

Thanks to Harvard University, you can now virtually enter the Great Pyramid of Giza in 3D and 360º

[Enderman @endermanch]

Did you know you can download files from your own computer? There's a file:/// protocol that allows you to browse own local storage.

[Florian Hansemann @CyberWarship]

4 Free Easy Wins That Make Red Teams Harder

#redteam #pentest #infosec
https://t.co/5pTX7UaCGb

[Andrew Rathbun @bunsofwrath12]

Artifacts from June 2022 Windows ISOs added to all three repos!

https://t.co/E5DvZaILEE
https://t.co/E5DvZaILEE
https://t.co/dGfNK7vBrv

[LetsDefend @LetsDefendIO]

Encryption speed of Ransomwares

[vx-underground @vxunderground]

Lockbit ransomware group claims to have ransomed Mandiant.

[Florian Roth ⚡️ @cyb3rops]

If I could run a Windows command on multiple end systems, collect & process the results, I would probably run a REG QUERY [..] for this key in my network, put all the results into a list, sort (|unique) it & just scroll over it.
This would be a hunt that goes far beyond #Follina

[Gr3yh00d @gr3yh00d]

Here is a good detection & emulation (utilizing ART) for (CVE-2022-30190) https://t.co/LIfDSSDqSY

[Gr3yh00d @gr3yh00d]

@GossiTheDog Very nice, here is a good detection & emulation as well :) https://t.co/LIfDSSDqSY

[☠️ Brandon @__mez0__]

This talk on DLLs is pretty sick: https://t.co/m7hgKg1WJE

[yed @frdfzi]

Here some good sources to learn malware development.

https://t.co/Mq41nkcxpy - Windows malware dev
https://t.co/gXYDjcHTVG - Linux Rootkit malware dev
https://t.co/uG5sNpxc8E - Windows malware dev

Huge thanks to all the blog authors

[Aaron Stephens @x04steve]

My talk, Python for Threat Intelligence, is now available to watch on YouTube. Check it out if you want a look how my team leverages Python for our day-to-day analysis, some of the packages we use, and how we approach development in general. https://t.co/6GR8PlQ00i

[Ali Hadi | B!n@ry @binaryz0ne]

Would you be interested if I do a video series on basic OS Internals? #DFIR #Cybersecurity

If this poll reaches at least 1K of interaction, I will start recording. Feel free to drop suggestions, otherwise I'll prepare a draft ToC. Focus will be on the Windows Operating System.

[Gr3yh00d @gr3yh00d]

@binaryz0ne Yea we can start with basic then go for intermediate series, etc.. that will be cool sir for sure

[adr @aaaddress1]

as M$ said, IE should be totally removed from Win11 & redirect to M$ Edge.

Fun Fact: attackers still can launch IE on Win11 by COM interface {0002DF01-0000-0000-C000-000000000046}

[Stephan Berger @malmoeb]

1/ Have you known that the "Zone.Identifier" Alternate Data Stream (ADS) not only records whether a file was downloaded from the Internet (ZoneId=3), but also from which URL and the Referrer from which the page was visited?

PS> Get-Content <filename> -Stream Zone.Identifier

[Lee Holmes @Lee_Holmes]

@SwiftOnSecurity It does.

[Jaco @jaco_ZA]

Threat Hunting 101

[Florian Roth ⚡️ @cyb3rops]

Apply this to cyber security

[Chirag 0x22 🇮🇳 @ChiragSoni404]

Software Engineers aren't the actual techies Cybersecurity people and Sysadmins are!

That's it that's the tweet