Maybe something important for your next year calendar, the https://t.co/J5YOkRvWjW 2023 and https://t.co/zuFtxtw2ub 2023 will take place in Luxembourg next year from Monday 16th October until Thursday 19th October.
This is a very cool process for creating intelligence requirements from the Red Hat infosec team! I'm a big fan of the Venn Diagram approach to explaining threat modeling. (h/t @cocaman)
✍️ Process: https://t.co/oMeqKK4WRV
📊 Spreadsheet: https://t.co/7KM4M1CS0J
Russian cyber operations in Ukraine: I’ve spent months collating and analyzing data on…
» Their military effectiveness
» Reasons why they weren’t more impactful
» Lessons for other states
The result is a very long paper and this 🧵... https://t.co/GX3TdoYryW
Investigation Scenario 🔎
A user reported their mouse moving around on the screen by itself for a few minutes. The cursor appeared to open and close a few documents on the desktop.
What do you look for to investigate whether an incident has occurred?
#InvestigationPath#DFIR
MISP Training Video December Edition - Best Practices for Encoding Threat Intelligence and Leveraging the information in MISP to Make Threat Landscape Report.
#threatintel#threatintelligence#misp#opensource
https://t.co/wyNPZjdhpy
We just published our yearly study of malicious #C2 infrastructure identified using proactive scanning and other collection methods throughout 2022. Key findings include:
North Korean cyber spies deploy new tactic: tricking foreign experts into writing research for them. With experiences from @DanDePetris & @j3nnyt0wn, and insight from @MsftSecIntel & @BAES_Digital https://t.co/vKpH0ijibt
BLOG POST: An update on some of our Iranian #APT tracking, showing continued victim connections to 107.173.231.114 (🇺🇸), a longstanding C2 server.
H/T @ChicagoCyber for the course correct on attribution. 🤜🤛
https://t.co/5Yh0kIX92g
🔔DING! DING!🔔#OpenCTI 5.4.0 is out! Huge joint effort from the #Filigran team and all community contributors 🙏! Bulk search, custom workflow, analyst workbench, performances improvement, #STIX grouping... #CTI#CyberSecurity#ThreatIntelligence
➡️https://t.co/TOxDjyCBvP
This was my favorite talk in @CYBERWARCON or #BRUNCHCON—as a dev and former red teamer that loves the infra and tooling side, and because of the ample and clear evidence given to relate the two loaders. I learned a lot from it 👏