Malvidin

[Malvidin @malvidin]

@jfslowik This Python script decodes each line, and provides a summary by GUID. The output is more verbose and more complete than the @netresec decoder. https://t.co/sSKyuLjgZr

[Malvidin @malvidin]

@fabio_viggiani You can get additional and more complete "Decoded Internal Names" using this decoder, forked from @RedDrip7
https://t.co/sSKyuLjgZr

[Malvidin @malvidin]

@RedDrip7 @intel @Cisco Updated to decode encoded data across multiple DNS queries.
Thanks to @netresec for the CreateSecureString info. Also decodes CCB19334A6D32DAA and CDCC93B50477F52F (@netresec decoder does not yet)

[Malvidin @malvidin]

@RedDrip7 @intel @Cisco Refactored for readability and Python2/3 compatibility: https://t.co/1SqhDmmg02

[Malvidin @malvidin]

@stvemillertime @wxs @cyb3rops If you are running YARA 3.12.0/4.0.0, you can use more spices

[Sean Whalen👨🏼‍🦼🏳️‍🌈🇺🇦🕊️ @SeanTheGeek]

New blog post: Proofpoint is forcing their customers to pay for Email Fraud Defense to get aggregate DMARC data from their own gateways https://t.co/Oi7qIVH9CH

[Malvidin @malvidin]

Verifying myself: I am malvidin on Keybase.io. w9VoLC6j6XdpM1DeM7Cjzhx5Hqt6h8tZKwIk / https://t.co/mquMKx0KcE