Lars

🐘 Analyst, Reverse Engineer, Software Developer, Mathematician, Teacher, Podcaster, send cat pics

[Armchair Investigators @armchairgators]

"Was lange währt...", die nächste Folge ist seit gestern im Kasten und geht jetzt in die Nachbearbeitung. Parallel suchen wir auch das nächste Thema und sind offen für Vorschläge! Antwortet gerne direkt hier drunter oder schickt eine DM oder E-Mail!

[Lars @larsborn]

The same is true for the Podcast @wavehackr and I are producing btw: https://t.co/f3wbFUtR4i (for my English-only followers: the Podcast is in German)

[Lars @larsborn]

Regular reminder that I pretty much stopped posting here and am mainly socializing over at the 🐘-site. https://t.co/U6HDZAHmCM

[MalShare @mal_share]

Data migration complete. We should be coming back online in the next few days

[Silas Cutler (p1nk) @silascutler]

This is a massive backend update. Download + Search should be significantly faster.

[Lars @larsborn]

No idea if this is how you do it #crossposting, but you can find me over on the Mammut-site: https://t.co/ardmyjkueZ (I suggest you unfollow me here to avoid duplicate feed entries)

[Jesko Hüttenhain @huettenhain]

I finished #FlareOn10! My goal is to redo all challenges over the next weeks to figure out the most elegant and purely static solution using #BinaryRefinery [1]. The CTF did already inspire some updates in the most recent version 0.6.14: (🧵)
[1] https://t.co/E20pgo1E4d

[svennergr @svennergr]

Had a great session talking about @grafana and how I used #GrafanaLoki to analyse bird activity in my backyard. Thanks for having me @BarcampFL! #bcfl23 #grafana

[Lars @larsborn]

If you have a solid interest in threats to the cloud, check out this job posting. They are doing awesome stuff™️. Also, I can really recommend being @SebastianWalla's colleague!

[Sebastian Walla @SebastianWalla]

Please help me study threats to the cloud! We at CrowdStrike are a remote first company, have a great data set, and I need some help to handle this influx of cloud cases: https://t.co/SxiLOSJT8T
#cloudsecurity #hiring #cybersecurity #aws #Azure #gcp

[x64dbg @x64dbg]

The first commit of x64dbg was 10 years ago today (2013-05-19). Writing a retrospective is harder than I thought, but here is a screenshot of the first version as a sneak peak. Thanks to everybody in the community for the support over the years!

Duncan

[Lars @larsborn]

The Twitch streaming will continue until morale improves. Making leaked emails searchable one AQL query at a time (PHP, Symfony, ArangoDb) at https://t.co/Jy8II3mMha starting in ~15 minutes at 7pm (Berlin time / UTC+2).

[stacksmashing @ghidraninja]

Ghidra 10.3 finally has an official dark mode!😍🥳

[Armchair Investigators @armchairgators]

Wir haben uns mal mit Matthias (@perceptic0n o/), dem "anderen deutschen Cyber-Podcaster" zusammengesetzt und ganz allgemein über Cyber Threat Intelligence (CTI) 👨‍💻⚠️🧠 gesprochen. Etwas anderes Format und es hat viel Spaß gemacht!

https://t.co/Mm9feFcY2Q

[Jesko Hüttenhain @huettenhain]

Thanks to a great tip from @greglesnewich and awesome previous work by @DidierStevens, #BinaryRefinery 0.6.5 is out with a much improved MSI extraction interface. It synthesizes MSI tables into a JSON document and also extracts any scripts that it can find in those tables.

[Lars @larsborn]

@unpacme So you ended up calling the loader from last stream #LegionLoader? Or is that something else? #teamNamesMatter

Also: as always, thanks for streaming!!

[Lars @larsborn]

@blue_leaks It doesn't have a name yet. The uncreative working title is "Leak Browser". Temporary deployment is at https://t.co/TfDnElPflp. I'll do some housekeeping — add a README and LICENSE file for example — and open source the app soon™️.

[Lars @larsborn]

I'm trying this Twitch thing now. In ~1h, I'll live stream some software development. PHP, Symfony, Python, and ArangoDB is the tech stack of my choosing and we'll improve a web app for searching leaked emails (mainly from #ddosecrets). See you at https://t.co/3XO57IGqBR!

[Silas Cutler (p1nk) @silascutler]

Lets break this down. Yes, it's a pain to track the 10 names for every group, but it's important and I'll break it down.

For general consumers, multiple actor names get confusing. The model of tracking clusters of activity or adversaries is a old intelligence practice.

🧵1/5

[Armchair Investigators @armchairgators]

Wenn ihr erfahren wollt, was Serebriakov vorher so angestellt hat, wir haben zufällig gerade eine Podcast Folge darüber veröffentlicht: https://t.co/Nrxxz9isCx

[Armchair Investigators @armchairgators]

🧵1/3 Evgeniy Serebriakov🇷🇺 reiste zu den olympischen Spielen🏅 in Rio de Janeiro im Jahr 2016, kurz danach besuchte er eine Konferenz der World Anti-Doping Agency (WADA)💊 in Luasanna in der Schweiz🇨🇭.