günther netzer

[Angel Hun @SeraphimDomain]

@chroniclesec and @virustotal have released a behemoth guide to advanced tools and use cases on https://t.co/20sjgkn4ug (warning, its a 155 page PDF with my notes)

[Swisscom Business @Swisscom_B2B]

Die Bedrohungslage 2019 im Swisscom #CyberSecurity Report. Mit Fokusthema Advanced Persistent Threats (#APT).

[markus neis @markus_neis]

@HostileSpectrum @BrianPKime @jckichen In #threatintel we have to accept that we work with limited visibility during our collection efforts. If I can affect this effort in a positive way and reduce uncertainty I will for sure try to do that first

[JD Work @HostileSpectrum]

@markus_neis @BrianPKime @jckichen Credential recovery is generally either result of limited conception of intel as an activity by cyber threat intel vendors racing towards the commodity threshold, or the opportunistic byproduct of other more purposeful collection. Either way it should not be reason for engagement

[markus neis @markus_neis]

@BrianPKime @jckichen This in turn affects the Preparation of the Cyber Environment and my collection efforts as I have a better defined focus what I need to collect and where it affects my network. In the end its nice to understand the battlefield but ultimately we want to win War :)

[markus neis @markus_neis]

@BrianPKime @jckichen From that perspective I want to take away the adversaries opportunity to leverage those leaked credentials and enforce 2FA for suppliers as trying to fight on the capability side (collection of leaked credentials) is limited in efficacy and implementation.

[Binni Shah @binitamshah]

Comprehensive Python Cheatsheet : https://t.co/okImhtwvPB

[SwiftOnSecurity @SwiftOnSecurity]

Google #Stadia is proof that with hundreds of computer science PhDs on staff you can get video games to run on Linux.

[J. A. Guerrero-Saade @juanandres_gs]

Ok. I love both @RobertMLee and @cnoanalysis but today I have to say our views are diametrically opposed.

[Drunk Binary @DrunkBinary]

Turla PS Script
7b5acabb4c81f76c1d46d5c02c0e8bed

Thanks to @clucianomartins and @CodexGigasSys for the submission.
Thanks to @markus_neis for the detection.

[günther netzer @nice2kn0w]

@fitundheilch @Swisscom_B2B_de Meinen Namen haben sie neulich auch aufgeschrieben, als ich zu schnell gefahren bin.

[Vitali Kremez @VK_Intel]

More: #Kazuar Agent Watermarks w/ Dbg:
Anti-Analysis & Shellcode Code Injection into explorer
Sniffer found: '{0}'!
{ megadumper, smartsniff,snoopypro, wireshark, ethereal, tcpview, tcpdump, windump, portmon, dsniff } 😉

[markus neis @markus_neis]

#BREAKING NEW @MITREattack DUCKTACK employed by #Turla Comrat - e160c93ef55ee29a4b1a4ae45cc0764f - https://t.co/DUBFJRW0rW #FUZZYSNUGGLYDUCK

[Ted Lieu @tedlieu]

The arrest of @realDonaldTrump friend Roger Stone by the @FBI confirms, again, the following fact:

MOST SUCCESSFUL WITCH HUNT EVER

[markus neis @markus_neis]

123.doc #Zebrocy is on to it https://t.co/okcRYRGaJz @thor_scanner by @cyb3rops has you covered

[Andreas Sfakianakis / @[email protected] @asfakian]

Another year has passed and lots of good CTI/DFIR stuff have been presented! I took some time to watch again some of my favourite talks within 2018 and list my favourite 20 ones. I hope you enjoy it!
https://t.co/FoSDhP2550 #dfir #cti #ThreatIntel #CyberSecurity #infosec #apt

[x0rz @x0rz]

This website is absolutely awesome when it comes to DNS analysis, really cool graphs too https://t.co/irgexrGDYO #DNS #OSINT

[Florian Roth ⚡️ @cyb3rops]

Windows: Administrative Tools and Logon Types
> when do reusable credentials remain on destination?
https://t.co/whNciymL5g

[günther netzer @nice2kn0w]

@ollie_ollerton I think @jason_carl_fox is winning whats his number though? 😁

[günther netzer @nice2kn0w]

@cem_oezdemir Genau, die sollten sich mal an der deutschen Politik ein Beispiel nehmen. Den Karren gegen die Wand fahren, bis nichts mehr geht und trotzdem fröhlich weitermachen.