Denis Legezo

Security Researcher/Engineer | Yandex SOC | ex-Kaspersky GReAT

[Denis Legezo @legezo]

If your identity is 40 yo, you would barely ever get another one with the same deep. But XXI looks like you could build up a lighter one above the original in many places, right? I mean, here goes the new ink, made in Yerevan

[Denis Legezo @legezo]

At a first glance Splunk's SPL looked weak comparing with Kusto\KQL. SPL's guesswork looks more like bash scripts in terms of "do I have to make it single or double quotes, space or no space and why?" But then lookups convinced me that Splunk is quite a tool for TH dashboards

[Denis Legezo @legezo]

My C++ reversing article is into shortlist of Habr technotext 2022 (RU) https://t.co/zvvbOJyKQi

[Denis Legezo @legezo]

If you are covering frameworks like CobaltStrike/BruteRatel by by some kind of your rules, take a look at BishopFox's Sliver as well. Go source code is available to understand the implants' specific, or just generate them with the keys for debug build and no strings obfuscation

[Denis Legezo @legezo]

Technically we got a co-working here without any permanent places, but I grow insolent and made a persistence on this one

[Denis Legezo @legezo]

One more place to store the remote code for the MS Office documents to execute - VSTO. Still needs "enable content", the place to search for URLs is custom.xml, I think it's better to check Office processes' connections to not-MS belonging AS-es https://t.co/tRCL7nP5TF

[NULLCON @nullcon]

⚡Tech Talk Alert! Rise of 📂Fileless #Malware 👾Attack

💡Denis @legezo & his team at Kaspersky discovered that Windows’ event logs participate in the infection chain which is highly critical

🎟️Grab your tickets➡️https://t.co/XgIsCvEDXi

#NullconGoa2022 #infosec #Cybersecurity

[Denis Legezo @legezo]

https://t.co/zvvbOJyKQi

[Denis Legezo @legezo]

@juanandres_gs Actually you could, in Capitol. Better not. I really hope DC wouldn't be among the many next Colombos this year

[Denis Legezo @legezo]

I just installed copilot and started to use it for Python and C++. For the first time I met the robot which could read my mind. Even for English in output messages. Yes, I heard about it, but to see it in you code is completely different feeling, quite a strong one

[Ivan Kwiatkowski @JusticeRage]

Very noteworthy research led by my APAC teammates presenting an attacker with man-on-the-side capabilities active in China: https://t.co/Z8RsgK1NVq
Recommended read!

[Denis Legezo @legezo]

Plato: everything is a number
Unix: everything is a file
Python: everything is an object

So the Guido's generalization seems better than Greek's or Berkeley's

[Denis Legezo @legezo]

CodeFest speakers photo. Really nice generic industrial conference (front/backend, QA, system analysis, etc)

[Denis Legezo @legezo]

Coffee cups here at CodeFest are like "drink, release, pray" (rhyme "пей, ре��изь, молись" in ru)

[Denis Legezo @legezo]

This Saturday at CodeFest conference in Novosibirsk we would discuss our research center (GReAT). If you can stand Russian language and midday, Siberian time - please be our guest https://t.co/MmqpSUbg7n

[Igor Kuznetsov @2igosha]

Our IDA API hash resolver plugin is available on Github: https://t.co/w8zc08dNZB

[Denis Legezo @legezo]

Indonesian stock exchange has its own bull

[Denis Legezo @legezo]

#cpprussia C++ Russia conference published the agenda. This year I would participate and at 6 of June I would try to show the developers how the reverser looks at the code https://t.co/4VILPkkW2a

[Denis Legezo @legezo]

Reversing training in Jakarta is over, thanks to all the participants and organisers