Bashar @1337bash

I hunt for a living. I like breadcrumbs. Views expressed are my own. United States Joined June 2012

Tweets

756
Followers

209
Following

768
Likes

2K

X @TheMsterDoctor1

2 years ago

Free Offensive Security Notes (OSCP, OSWE, OSEP, OSED) OSCP NOTES AD: drive.google.com/file/d/14jirVK… OSCP Notes : drive.google.com/file/d/1eYUaea… OSWE Notes: drive.google.com/file/d/1KIc_qs… OSEP Notes: drive.google.com/file/d/1L9mfwf… OSED Notes: drive.google.com/file/d/1_mPHr3… #oscp #osed #oswe #osep #osce³…

28 884 2K 236K 3K

Download Image

Business email compromise doesn't get the same coverage as other cyber attacks, but it's still ubiquitous. If you use Sentinel or M365 Defender this article from @PeteABryan is an absolute must read. Great queries, guidance and threat intelligence for BEC- techcommunity.microsoft.com/t5/microsoft-s…

1 49 172 20K 106

Stroz Friedberg DFIR @StrozDFIR

2 years ago

More than half of the breaches investigated by @StrozDFIR in 2022 included phishing as an initial access technique. Learn more about evolving #phishing techniques in our latest blog where we talk about brand impersonation, consent phishing, and the usage of phishing kits.…

0 8 9 629 0

Download Image

Tony Lambert @ForensicITGuy

2 years ago

New blog post! I love when adversaries use VHD files to distribute malware because VHDs can potentially contain a lot more data than the adversary intends to distribute. To see what I mean, check out this post: forensicitguy.github.io/vhd-malware-an… #malware #vhd

3 78 184 28K 62

Clandestine @akaclandestine

2 years ago

Nice series here >> Hunting for Persistence in Linux (Part 1): Auditd, Sysmon, Osquery (and Webshells) pberba.github.io/security/2021/… (and good summary map in pberba.github.io/assets/posts/c…)

2 51 127 13K 59

Germán Fernández @1ZRR4H

2 years ago

Citrix Gateway VPN compromised via CVE-2023-3519 (a critical unauthenticated RCE) shows evidence of exploitation on 7th July, 11 days before the official patch. The attackers exfiltrated the system configuration file to then probably use the Metasploit module called…

10 227 594 138K 174

Download Image

Florian Roth ⚡️ @cyb3rops

2 years ago

Citrix NetScaler ADC CVE-2023-3519 resources -- Compromise Assessments @CISAgov advisory cisa.gov/sites/default/… Deyda guide deyda.net/index.php/en/2… -- Vuln Checks Python github.com/telekom-securi… Nmap NSE script github.com/RootUp/Persona… I'm gonna add more links in this🧵

5 152 367 67K 111

Jared Atkinson @jaredcatkinson

2 years ago

Yesterday, I presented @jsecurity101 and my Malware Morphology workshop at @NorthSec_io. Thanks to the organizers and everyone who attended. If you missed it, you’re in luck the recording is available! 📼 Video: youtube.com/live/KTAeUjDBW… 🗒️ GitHub: github.com/jaredcatkinson…

4 101 267 57K 121

Kostas @Kostastsale

2 years ago

Today, me and @ateixei are releasing the EDR Telemetry project. This project aims to compare and evaluate the telemetry of various EDR products. ✅Introductory blog post: t.ly/9Ia3 ✅GitHub Repo: github.com/tsale/EDR-Tele… ✅Comparison Table: t.ly/HMht

46 333 827 169K 309

Johan Berggren @jberggren

2 years ago

PSA: Major new Timesketch release - the open source #DFIR timeline analysis platform. We have been working on redesigning and improving the user experience. 🧵Thread with screenshots:

6 67 153 35K 39

Oddvar Moe @Oddvarmoe

2 years ago

Some really great sites you should bookmark loldrivers.io (just released) gtfobins.github.io lolbas-project.github.io lots-project.com filesec.io malapi.io

26 392 1K 117K 718

Greg Linares (Laughing Mantis) @Laughing_Mantis

2 years ago

Hey defense & blue team people ICYMI Kali released Kali Purple which is essentially SOC in a box with cool tools like TheHive, Suricata, Arkime, Elastic SIEM & Malcolm all bundled together & makes a great starting tool for getting defenses up gitlab.com/kalilinux/kali…

5 50 165 34K 53

Ali Hadi | B!n@ry @binaryz0ne

2 years ago

Hey #DFIR community... if you want to play with some basic Anti-Forensic stuff related to the NTFS file system, please check the challenge me & @maryst33d created. I don't want to spoil it, but there is probably something in it that not many know about! ashemery.com/dfir.html#Chal…

2 25 90 13K 35

mRr3b00t @UK_Daniel_Card

3 years ago

schtasks /create /tn "Task Name" /tr "C:\path\to\program.exe" /sc onstart /ru SYSTEM

19 79 377 89K 228

Download Image

Microsoft BlueHat @MSFTBlueHat

3 years ago

❗Exciting news!❗ We've published nearly all the #BlueHat 2023 videos on the Microsoft Security Response Center (MSRC) YouTube channel. Happy viewing! 📺 msft.it/60195lV6Z

2 105 284 32K 77

Ali Hadi | B!n@ry @binaryz0ne

3 years ago

"Parsing Multiple Registry Hives using VSC Toolset and RegRipper" #DFIR Probably one of those underrated tools that I really think you should check!... Hopefully this video will convince you to start using it in your investigations. Thanks @jasonshale youtube.com/watch?v=LokqW4…

0 5 26 3K 7

AWS Security @AWSSecurityInfo

3 years ago

The following 5 workshops simulate multiple security events. Brought to you by the AWS Customer Incident Response Team (CIRT) 👇

4 90 258 42K 147

Jeff McJunkin @jeffmcjunkin

3 years ago

Great new tool by @bananabr to find folders excluded from antivirus scanning by comparing file write times across tested folders. Writes to excluded folders finish much faster as they don't have their writes intercepted by AV. Clever! github.com/bananabr/TimeE…