Powershell.fyi

blog

#PowerShellFyi #PowerShell
#SecurityRecommendations

[Powershell.fyi @PowerShellFYI]

APT32 , DEV-0054 or OceanLotus campaigns 2019

https://t.co/ogl2RfBCYh

#apt32 #APT #OceanLotus #backdoor #implants #EDR #Mitre #malicious #blueteam #CyberAttack #cybersecurity

[Powershell.fyi @PowerShellFYI]

Dont forget to enable Microsoft Edge in #WSUS

[Powershell.fyi @PowerShellFYI]

WDigest #credential #harvesting

https://t.co/5jfn5amfMH

#Analysis
#Mitigations
#Detection
#EDR
#AntiVirus
#ATP
#CurrentControlSet
#administrator
#exploits
#WDigest
#LSASS
#cleartext
#credentials

[Powershell.fyi @PowerShellFYI]

Possible EoP via the Text Services Framework

https://t.co/UjsAYT5h78

#ProjectZero #Google #EoP #TextServicesFramework #Antivirus #EDR #CTF

[Powershell.fyi @PowerShellFYI]

Remote code execution vulnerabilities (CVE-2019-1181 and CVE-2019-1182) in Remote Desktop Services on Windows7, Server 2008 R2,2012 R2, Windows10

https://t.co/CgKXfvF6TU

#RDP #CVE #Microsoft #Intel #threatintel #Windows #Advancedhunting #NLA #vulnerable #inthewild #exploit

[Powershell.fyi @PowerShellFYI]

#Operation #Soft #Cell

https://t.co/C0X0Shw6Bx

#apt10 #China #Chopper #attack #RAT #Trojan #Telco #CDR #Web #Shell #threatintel #C2 #MITRE #Cyber #Security #InfoSec #Redteam #blueteam #twitter #nation #Detection #EDR #Advanced #hunting #ntbscan #Suspicious #tomcat #httpd

[Powershell.fyi @PowerShellFYI]

How to #Onboard machines to #Microsoft #Defender #ATP via #Intune

https://t.co/NhB65XN8Ng

#Desktop #Intune #ATP #Azure #portal #howto #microsoft #it #ITSM #Sysadmin #lazy #trick #deployment #Configuration #MassDeployment

[Powershell.fyi @PowerShellFYI]

#Zacinlo (#Detrahere) #rootkit

https://t.co/YHWhl3OiIH

#trojan #malware #Win32 #SquareNet #s5Mark #MSRT #HTTP #HTTPS #FTP #SMTP #adware #malwaremustdie #detection #response

[Powershell.fyi @PowerShellFYI]

#Motivated #miners #attackers who take advantage of #tools, #techniques, and #procedures (#TTPs) developed by #advanced #threat #actors to spread #unwanted #cryptocurrency #mining

https://t.co/dkItPha1Ld

#bitcoin #altcoin #cyberattacks #BlackSquid #XMRig #Meralifea #EDR #ATP

[Powershell.fyi @PowerShellFYI]

APT32 , DEV-0054 or OceanLotus campaigns 2019

https://t.co/ogl2RfBCYh

#apt32 #APT #OceanLotus #backdoor #implants #EDR #Mitre #malicious #blueteam #CyberAttack #cybersecurity

[Powershell.fyi @PowerShellFYI]

Wormable RCE vulnerability in RDP bluekeep
https://t.co/wwBocT9gek

[Powershell.fyi @PowerShellFYI]

mimikittenz is a post-exploitation powershell tool that utilizes the Windows function ReadProcessMemory()

https://t.co/RUecTVuY2V

#mimikatz #Kiwi #hash #password #security #securitytools #redteam #logonpasswords #sekurlsa #lsa #ntlm #debug #infosec #Crypto #Events #Terminal

[Powershell.fyi @PowerShellFYI]

#ALPC #local #privilege #elevation

https://t.co/03pEIhi5PL

#APT33 #APT34 #Shamoon #wiper #iran #oilrig #cybercrime #cybersecurity #infosec #malware #vulnerability #Antivirus #Windows #WindowsDefender #blueteam #risk #Remediation #cyberhygiene #baseline #trojans #apt10

[Powershell.fyi @PowerShellFYI]

#List of #Default #Credentials

https://t.co/moUNjJSWcm

#3COM #AMI #Administrator #guest #Alcatel #Cisco #CISCO15 #Cobalt #Comcast #DLink #Datacom #Dell #EMC #F5 #FatWire #Freetech #Fujitsu #Gandalf #Gericom #Google #urchin #broadband #HP #Huawei #IBM #Lucent #mMmM #MySQL

[Powershell.fyi @PowerShellFYI]

#Disable '#Domain #controller: #Allow #server #operators to #schedule #tasks'

https://t.co/0uy57HtVrR

#risk #Remediation #SYSTEM #HowTo

[Powershell.fyi @PowerShellFYI]

#How to #set '#Remote #Desktop #security #level' to '#TLS'

https://t.co/z1tC4p5Gif

#Windows #connections #RDP #GroupPolicy #Terminal #Tcp #TLS #authentication #Remediation #risk #Defender #regedit #BaseLine #HowTo

[Powershell.fyi @PowerShellFYI]

APT32 , DEV-0054 or OceanLotus campaigns 2019

https://t.co/ogl2RfBCYh

#apt32 #APT #OceanLotus #backdoor #implants #EDR #Mitre #malicious #blueteam #CyberAttack #cybersecurity #China #Panda #offensivesecurity #Report #cybercrime #CyberAttack

[Powershell.fyi @PowerShellFYI]

APT32 , DEV-0054 or OceanLotus campaigns 2019

https://t.co/ogl2RfBCYh

#apt32 #APT #OceanLotus #backdoor #implants #EDR #Mitre #malicious #blueteam #CyberAttack #cybersecurity

[Powershell.fyi @PowerShellFYI]

badrabbit #Ransomware #Analysis #Impact #Mitigation #Detection

https://t.co/QX8ZtngLEn

#badrabbit #apt #vulnerability #infosec #Microsoft #redteam #blueteam #infosecnews #cybersecurity #Analysis #russia #ThreatIntelligence #threatintel

[Powershell.fyi @PowerShellFYI]

mimikittenz is a post-exploitation powershell tool that utilizes the Windows function ReadProcessMemory()

https://t.co/RUecTVuY2V

#mimikatz #Kiwi #hash #password #security #securitytools #redteam #logonpasswords #sekurlsa #lsa #ntlm #debug #infosec #Crypto #Events #Terminal

[Powershell.fyi @PowerShellFYI]

WannaCrypt Analysis , Impact , Mitigations & Detection details

https://t.co/cbX7QxIbqN

#rdp #eternalblue #apt #vulnerability #infosec #0day #CVE #news #patch #windows #Microsoft #rce #redteam #blueteam #infosecnews #cybersecurity

[Powershell.fyi @PowerShellFYI]

Dont forget to patch #bluekeep vuln

https://t.co/wwBocT9gek

#rdp #bluekeep #apt #vulnerability #infosec #0day #CVE #news #patch #windows #Microsoft #rce #redteam #blueteam #infosecnews #cybersec

[Powershell.fyi @PowerShellFYI]

Wormable RCE vulnerability in RDP bluekeep
https://t.co/wwBocT9gek