#blueteam — Public Fediverse posts
Live and recent posts from across the Fediverse tagged #blueteam, aggregated by home.social.
-
SOC-Analyst Lern- & Praxishandbuch
Ich habe mir in den letzten Wochen ein eigenes SOC-Analyst Lern- & Praxishandbuch erstellt.
Gedacht ist es vor allem für Einsteiger, Interessierte und alle, die sich einen strukturierten Überblick über Security Operations und SOC verschaffen möchten.
Enthalten sind unter anderem Themen wie Netzwerke, SIEM, EDR/XDR, Threat Intelligence, Incident Response, Detection Engineering, Cloud Security, Malware-Analyse, Forensik sowie praktische Lernpfade und Tool-Empfehlungen.
Für mich war wichtig, Theorie und Praxis möglichst verständlich zusammenzubringen und gleichzeitig zu zeigen, was man als angehender SOC Analyst wirklich lernen und üben sollte.
Download: SOC-Analyst – Das umfassende Lern- & Praxishandbuch:
:boost_ok:
#CyberSecurity #SOC #BlueTeam #SecurityOperations #ITSecurity
-
Empty scoreboard.
80 teams.
14 days.Someone's name goes first.
WATCHLIST is a free 24-hour CTF built around one investigation.
24 challenges - memory forensics,
disk forensics, DNS exfil, ADSB analysis, live SSH honeypot.All connected to the same case.
First blood on each challenge gets logged permanently
by The Machine.Sep 19 03:30 UTC. Free entry. Teams 1-6.
Prizes: $750 / $500 / $250ctf.xposedornot.com
CTFtime: ctftime.org/event/3326 -
2026-09-04 RDP #Honeypot IOCs - 633 scans
Thread with top 3 features in each category and links to the full dataset
#DFIR #InfoSecTop IPs:
209.38.73.59 - 510
79.137.100.124 - 27
45.156.128.61 - 18Top ASNs:
AS14061 - 510
AS396982 - 27
AS16276 - 27Top Accounts:
hello - 549
Administr - 21
root - 18Top ISPs:
DigitalOcean, LLC - 510
Google LLC - 27
OVH SAS - 27Top Clients:
Unknown - 633Top Software:
Unknown - 633Top Keyboards:
Unknown - 633Top IP Classification:
hosting - 603
Unknown - 24
hosting & proxy - 6Pastebin links with full 24-hr RDP Honeypot IOC Lists:
Bad API request, invalid api_dev_key -
2026-09-04 RDP #Honeypot IOCs - 633 scans
Thread with top 3 features in each category and links to the full dataset
#DFIR #InfoSecTop IPs:
209.38.73.59 - 510
79.137.100.124 - 27
45.156.128.61 - 18Top ASNs:
AS14061 - 510
AS396982 - 27
AS16276 - 27Top Accounts:
hello - 549
Administr - 21
root - 18Top ISPs:
DigitalOcean, LLC - 510
Google LLC - 27
OVH SAS - 27Top Clients:
Unknown - 633Top Software:
Unknown - 633Top Keyboards:
Unknown - 633Top IP Classification:
hosting - 603
Unknown - 24
hosting & proxy - 6Pastebin links with full 24-hr RDP Honeypot IOC Lists:
Bad API request, invalid api_dev_key -
2026-09-04 RDP #Honeypot IOCs - 633 scans
Thread with top 3 features in each category and links to the full dataset
#DFIR #InfoSecTop IPs:
209.38.73.59 - 510
79.137.100.124 - 27
45.156.128.61 - 18Top ASNs:
AS14061 - 510
AS396982 - 27
AS16276 - 27Top Accounts:
hello - 549
Administr - 21
root - 18Top ISPs:
DigitalOcean, LLC - 510
Google LLC - 27
OVH SAS - 27Top Clients:
Unknown - 633Top Software:
Unknown - 633Top Keyboards:
Unknown - 633Top IP Classification:
hosting - 603
Unknown - 24
hosting & proxy - 6Pastebin links with full 24-hr RDP Honeypot IOC Lists:
Bad API request, invalid api_dev_key -
2026-09-04 RDP #Honeypot IOCs - 633 scans
Thread with top 3 features in each category and links to the full dataset
#DFIR #InfoSecTop IPs:
209.38.73.59 - 510
79.137.100.124 - 27
45.156.128.61 - 18Top ASNs:
AS14061 - 510
AS396982 - 27
AS16276 - 27Top Accounts:
hello - 549
Administr - 21
root - 18Top ISPs:
DigitalOcean, LLC - 510
Google LLC - 27
OVH SAS - 27Top Clients:
Unknown - 633Top Software:
Unknown - 633Top Keyboards:
Unknown - 633Top IP Classification:
hosting - 603
Unknown - 24
hosting & proxy - 6Pastebin links with full 24-hr RDP Honeypot IOC Lists:
Bad API request, invalid api_dev_key -
2026-09-04 RDP #Honeypot IOCs - 422 scans
Thread with top 3 features in each category and links to the full dataset
#DFIR #InfoSecTop IPs:
209.38.73.59 - 340
79.137.100.124 - 18
45.156.128.61 - 12Top ASNs:
AS14061 - 340
AS396982 - 18
AS16276 - 18Top Accounts:
hello - 366
Administr - 14
root - 12Top ISPs:
DigitalOcean, LLC - 340
Google LLC - 18
OVH SAS - 18Top Clients:
Unknown - 422Top Software:
Unknown - 422Top Keyboards:
Unknown - 422Top IP Classification:
hosting - 402
Unknown - 16
hosting & proxy - 4Pastebin links with full 24-hr RDP Honeypot IOC Lists:
Bad API request, invalid api_dev_key -
2026-09-04 RDP #Honeypot IOCs - 422 scans
Thread with top 3 features in each category and links to the full dataset
#DFIR #InfoSecTop IPs:
209.38.73.59 - 340
79.137.100.124 - 18
45.156.128.61 - 12Top ASNs:
AS14061 - 340
AS396982 - 18
AS16276 - 18Top Accounts:
hello - 366
Administr - 14
root - 12Top ISPs:
DigitalOcean, LLC - 340
Google LLC - 18
OVH SAS - 18Top Clients:
Unknown - 422Top Software:
Unknown - 422Top Keyboards:
Unknown - 422Top IP Classification:
hosting - 402
Unknown - 16
hosting & proxy - 4Pastebin links with full 24-hr RDP Honeypot IOC Lists:
Bad API request, invalid api_dev_key -
2026-09-04 RDP #Honeypot IOCs - 422 scans
Thread with top 3 features in each category and links to the full dataset
#DFIR #InfoSecTop IPs:
209.38.73.59 - 340
79.137.100.124 - 18
45.156.128.61 - 12Top ASNs:
AS14061 - 340
AS396982 - 18
AS16276 - 18Top Accounts:
hello - 366
Administr - 14
root - 12Top ISPs:
DigitalOcean, LLC - 340
Google LLC - 18
OVH SAS - 18Top Clients:
Unknown - 422Top Software:
Unknown - 422Top Keyboards:
Unknown - 422Top IP Classification:
hosting - 402
Unknown - 16
hosting & proxy - 4Pastebin links with full 24-hr RDP Honeypot IOC Lists:
Bad API request, invalid api_dev_key -
2026-09-04 RDP #Honeypot IOCs - 422 scans
Thread with top 3 features in each category and links to the full dataset
#DFIR #InfoSecTop IPs:
209.38.73.59 - 340
79.137.100.124 - 18
45.156.128.61 - 12Top ASNs:
AS14061 - 340
AS396982 - 18
AS16276 - 18Top Accounts:
hello - 366
Administr - 14
root - 12Top ISPs:
DigitalOcean, LLC - 340
Google LLC - 18
OVH SAS - 18Top Clients:
Unknown - 422Top Software:
Unknown - 422Top Keyboards:
Unknown - 422Top IP Classification:
hosting - 402
Unknown - 16
hosting & proxy - 4Pastebin links with full 24-hr RDP Honeypot IOC Lists:
Bad API request, invalid api_dev_key -
2026-09-04 RDP #Honeypot IOCs - 211 scans
Thread with top 3 features in each category and links to the full dataset
#DFIR #InfoSecTop IPs:
209.38.73.59 - 170
79.137.100.124 - 9
45.156.128.61 - 6Top ASNs:
AS14061 - 170
AS396982 - 9
AS16276 - 9Top Accounts:
hello - 183
Administr - 7
root - 6Top ISPs:
DigitalOcean, LLC - 170
Google LLC - 9
OVH SAS - 9Top Clients:
Unknown - 211Top Software:
Unknown - 211Top Keyboards:
Unknown - 211Top IP Classification:
hosting - 201
Unknown - 8
hosting & proxy - 2Pastebin links with full 24-hr RDP Honeypot IOC Lists:
Bad API request, invalid api_dev_key -
2026-09-04 RDP #Honeypot IOCs - 211 scans
Thread with top 3 features in each category and links to the full dataset
#DFIR #InfoSecTop IPs:
209.38.73.59 - 170
79.137.100.124 - 9
45.156.128.61 - 6Top ASNs:
AS14061 - 170
AS396982 - 9
AS16276 - 9Top Accounts:
hello - 183
Administr - 7
root - 6Top ISPs:
DigitalOcean, LLC - 170
Google LLC - 9
OVH SAS - 9Top Clients:
Unknown - 211Top Software:
Unknown - 211Top Keyboards:
Unknown - 211Top IP Classification:
hosting - 201
Unknown - 8
hosting & proxy - 2Pastebin links with full 24-hr RDP Honeypot IOC Lists:
Bad API request, invalid api_dev_key -
2026-09-04 RDP #Honeypot IOCs - 211 scans
Thread with top 3 features in each category and links to the full dataset
#DFIR #InfoSecTop IPs:
209.38.73.59 - 170
79.137.100.124 - 9
45.156.128.61 - 6Top ASNs:
AS14061 - 170
AS396982 - 9
AS16276 - 9Top Accounts:
hello - 183
Administr - 7
root - 6Top ISPs:
DigitalOcean, LLC - 170
Google LLC - 9
OVH SAS - 9Top Clients:
Unknown - 211Top Software:
Unknown - 211Top Keyboards:
Unknown - 211Top IP Classification:
hosting - 201
Unknown - 8
hosting & proxy - 2Pastebin links with full 24-hr RDP Honeypot IOC Lists:
Bad API request, invalid api_dev_key -
2026-09-04 RDP #Honeypot IOCs - 211 scans
Thread with top 3 features in each category and links to the full dataset
#DFIR #InfoSecTop IPs:
209.38.73.59 - 170
79.137.100.124 - 9
45.156.128.61 - 6Top ASNs:
AS14061 - 170
AS396982 - 9
AS16276 - 9Top Accounts:
hello - 183
Administr - 7
root - 6Top ISPs:
DigitalOcean, LLC - 170
Google LLC - 9
OVH SAS - 9Top Clients:
Unknown - 211Top Software:
Unknown - 211Top Keyboards:
Unknown - 211Top IP Classification:
hosting - 201
Unknown - 8
hosting & proxy - 2Pastebin links with full 24-hr RDP Honeypot IOC Lists:
Bad API request, invalid api_dev_key -
2026-09-03 RDP #Honeypot IOCs - 3168 scans
Thread with top 3 features in each category and links to the full dataset
#DFIR #InfoSecTop IPs:
45.88.138.5 - 2415
155.117.13.211 - 636
161.97.85.113 - 9Top ASNs:
AS213737 - 2415
AS16276 - 636
AS396982 - 36Top Accounts:
mstsc - 2424
hello - 666
Administr - 12Top ISPs:
Ayosoft LTD - 2415
OVH SAS - 636
Google LLC - 36Top Clients:
Unknown - 3168Top Software:
Unknown - 3168Top Keyboards:
Unknown - 3168Top IP Classification:
Unknown - 3069
hosting - 99Pastebin links with full 24-hr RDP Honeypot IOC Lists:
Bad API request, invalid api_dev_key -
2026-09-03 RDP #Honeypot IOCs - 3168 scans
Thread with top 3 features in each category and links to the full dataset
#DFIR #InfoSecTop IPs:
45.88.138.5 - 2415
155.117.13.211 - 636
161.97.85.113 - 9Top ASNs:
AS213737 - 2415
AS16276 - 636
AS396982 - 36Top Accounts:
mstsc - 2424
hello - 666
Administr - 12Top ISPs:
Ayosoft LTD - 2415
OVH SAS - 636
Google LLC - 36Top Clients:
Unknown - 3168Top Software:
Unknown - 3168Top Keyboards:
Unknown - 3168Top IP Classification:
Unknown - 3069
hosting - 99Pastebin links with full 24-hr RDP Honeypot IOC Lists:
Bad API request, invalid api_dev_key -
2026-09-03 RDP #Honeypot IOCs - 3168 scans
Thread with top 3 features in each category and links to the full dataset
#DFIR #InfoSecTop IPs:
45.88.138.5 - 2415
155.117.13.211 - 636
161.97.85.113 - 9Top ASNs:
AS213737 - 2415
AS16276 - 636
AS396982 - 36Top Accounts:
mstsc - 2424
hello - 666
Administr - 12Top ISPs:
Ayosoft LTD - 2415
OVH SAS - 636
Google LLC - 36Top Clients:
Unknown - 3168Top Software:
Unknown - 3168Top Keyboards:
Unknown - 3168Top IP Classification:
Unknown - 3069
hosting - 99Pastebin links with full 24-hr RDP Honeypot IOC Lists:
Bad API request, invalid api_dev_key -
2026-09-03 RDP #Honeypot IOCs - 3168 scans
Thread with top 3 features in each category and links to the full dataset
#DFIR #InfoSecTop IPs:
45.88.138.5 - 2415
155.117.13.211 - 636
161.97.85.113 - 9Top ASNs:
AS213737 - 2415
AS16276 - 636
AS396982 - 36Top Accounts:
mstsc - 2424
hello - 666
Administr - 12Top ISPs:
Ayosoft LTD - 2415
OVH SAS - 636
Google LLC - 36Top Clients:
Unknown - 3168Top Software:
Unknown - 3168Top Keyboards:
Unknown - 3168Top IP Classification:
Unknown - 3069
hosting - 99Pastebin links with full 24-hr RDP Honeypot IOC Lists:
Bad API request, invalid api_dev_key -
2026-09-03 RDP #Honeypot IOCs - 2112 scans
Thread with top 3 features in each category and links to the full dataset
#DFIR #InfoSecTop IPs:
45.88.138.5 - 1610
155.117.13.211 - 424
161.97.85.113 - 6Top ASNs:
AS213737 - 1610
AS16276 - 424
AS396982 - 24Top Accounts:
mstsc - 1616
hello - 444
Administr - 8Top ISPs:
Ayosoft LTD - 1610
OVH SAS - 424
Google LLC - 24Top Clients:
Unknown - 2112Top Software:
Unknown - 2112Top Keyboards:
Unknown - 2112Top IP Classification:
Unknown - 2046
hosting - 66Pastebin links with full 24-hr RDP Honeypot IOC Lists:
Bad API request, invalid api_dev_key -
2026-09-03 RDP #Honeypot IOCs - 2112 scans
Thread with top 3 features in each category and links to the full dataset
#DFIR #InfoSecTop IPs:
45.88.138.5 - 1610
155.117.13.211 - 424
161.97.85.113 - 6Top ASNs:
AS213737 - 1610
AS16276 - 424
AS396982 - 24Top Accounts:
mstsc - 1616
hello - 444
Administr - 8Top ISPs:
Ayosoft LTD - 1610
OVH SAS - 424
Google LLC - 24Top Clients:
Unknown - 2112Top Software:
Unknown - 2112Top Keyboards:
Unknown - 2112Top IP Classification:
Unknown - 2046
hosting - 66Pastebin links with full 24-hr RDP Honeypot IOC Lists:
Bad API request, invalid api_dev_key -
2026-09-03 RDP #Honeypot IOCs - 2112 scans
Thread with top 3 features in each category and links to the full dataset
#DFIR #InfoSecTop IPs:
45.88.138.5 - 1610
155.117.13.211 - 424
161.97.85.113 - 6Top ASNs:
AS213737 - 1610
AS16276 - 424
AS396982 - 24Top Accounts:
mstsc - 1616
hello - 444
Administr - 8Top ISPs:
Ayosoft LTD - 1610
OVH SAS - 424
Google LLC - 24Top Clients:
Unknown - 2112Top Software:
Unknown - 2112Top Keyboards:
Unknown - 2112Top IP Classification:
Unknown - 2046
hosting - 66Pastebin links with full 24-hr RDP Honeypot IOC Lists:
Bad API request, invalid api_dev_key -
2026-09-03 RDP #Honeypot IOCs - 2112 scans
Thread with top 3 features in each category and links to the full dataset
#DFIR #InfoSecTop IPs:
45.88.138.5 - 1610
155.117.13.211 - 424
161.97.85.113 - 6Top ASNs:
AS213737 - 1610
AS16276 - 424
AS396982 - 24Top Accounts:
mstsc - 1616
hello - 444
Administr - 8Top ISPs:
Ayosoft LTD - 1610
OVH SAS - 424
Google LLC - 24Top Clients:
Unknown - 2112Top Software:
Unknown - 2112Top Keyboards:
Unknown - 2112Top IP Classification:
Unknown - 2046
hosting - 66Pastebin links with full 24-hr RDP Honeypot IOC Lists:
Bad API request, invalid api_dev_key -
2026-09-03 RDP #Honeypot IOCs - 1056 scans
Thread with top 3 features in each category and links to the full dataset
#DFIR #InfoSecTop IPs:
45.88.138.5 - 805
155.117.13.211 - 212
161.97.85.113 - 3Top ASNs:
AS213737 - 805
AS16276 - 212
AS396982 - 12Top Accounts:
mstsc - 808
hello - 222
Administr - 4Top ISPs:
Ayosoft LTD - 805
OVH SAS - 212
Google LLC - 12Top Clients:
Unknown - 1056Top Software:
Unknown - 1056Top Keyboards:
Unknown - 1056Top IP Classification:
Unknown - 1023
hosting - 33Pastebin links with full 24-hr RDP Honeypot IOC Lists:
Bad API request, invalid api_dev_key -
2026-09-03 RDP #Honeypot IOCs - 1056 scans
Thread with top 3 features in each category and links to the full dataset
#DFIR #InfoSecTop IPs:
45.88.138.5 - 805
155.117.13.211 - 212
161.97.85.113 - 3Top ASNs:
AS213737 - 805
AS16276 - 212
AS396982 - 12Top Accounts:
mstsc - 808
hello - 222
Administr - 4Top ISPs:
Ayosoft LTD - 805
OVH SAS - 212
Google LLC - 12Top Clients:
Unknown - 1056Top Software:
Unknown - 1056Top Keyboards:
Unknown - 1056Top IP Classification:
Unknown - 1023
hosting - 33Pastebin links with full 24-hr RDP Honeypot IOC Lists:
Bad API request, invalid api_dev_key -
2026-09-03 RDP #Honeypot IOCs - 1056 scans
Thread with top 3 features in each category and links to the full dataset
#DFIR #InfoSecTop IPs:
45.88.138.5 - 805
155.117.13.211 - 212
161.97.85.113 - 3Top ASNs:
AS213737 - 805
AS16276 - 212
AS396982 - 12Top Accounts:
mstsc - 808
hello - 222
Administr - 4Top ISPs:
Ayosoft LTD - 805
OVH SAS - 212
Google LLC - 12Top Clients:
Unknown - 1056Top Software:
Unknown - 1056Top Keyboards:
Unknown - 1056Top IP Classification:
Unknown - 1023
hosting - 33Pastebin links with full 24-hr RDP Honeypot IOC Lists:
Bad API request, invalid api_dev_key -
2026-09-03 RDP #Honeypot IOCs - 1056 scans
Thread with top 3 features in each category and links to the full dataset
#DFIR #InfoSecTop IPs:
45.88.138.5 - 805
155.117.13.211 - 212
161.97.85.113 - 3Top ASNs:
AS213737 - 805
AS16276 - 212
AS396982 - 12Top Accounts:
mstsc - 808
hello - 222
Administr - 4Top ISPs:
Ayosoft LTD - 805
OVH SAS - 212
Google LLC - 12Top Clients:
Unknown - 1056Top Software:
Unknown - 1056Top Keyboards:
Unknown - 1056Top IP Classification:
Unknown - 1023
hosting - 33Pastebin links with full 24-hr RDP Honeypot IOC Lists:
Bad API request, invalid api_dev_key -
Exploitation of PAN-OS GlobalProtect Authentication Bypass Vulnerability (CVE-2026-0257)
In this article, I break down how the vulnerability works, affected configurations, exploitation scenarios, and the mitigation steps organizations should take to protect their remote access infrastructure.
https://denizhalil.com/2026/06/02/cve-2026-0257-pan-os-globalprotect-authentication-bypass/
#CyberSecurity #PaloAlto #GlobalProtect #PANOS #CVE20260257 #VulnerabilityManagement #ThreatDetection #NetworkSecurity #BlueTeam #RedTeam #InfoSec #DenizHalil
-
What is Silver Ticket Attack: A Comprehensive Guide
In this article, I cover how Silver Ticket attacks work, common exploitation scenarios, detection techniques, and mitigation strategies.
https://denizhalil.com/2026/05/27/silver-ticket-attack-comprehensive-guide/#CyberSecurity #ActiveDirectory #SilverTicket #Kerberos #CredentialAccess #RedTeam #BlueTeam #Pentesting #WindowsSecurity #InfoSec #ThreatDetection #DenizHalil
-
Kerbrute: Enumerating Active Directory Accounts
In this article, I cover how Kerberoasting works, common attack techniques, detection methods, and practical defense strategies.
🔗 https://denizhalil.com/2026/05/21/kerberoasting-attack-defense-guide/
#CyberSecurity #ActiveDirectory #Kerberoasting #Kerberos #CredentialAccess #RedTeam #BlueTeam #Pentesting #WindowsSecurity #InfoSec #ThreatDetection #DenizHalil
-
Basic Active Directory Enumeration: A Comprehensive Guide
In this article, I cover how Kerberoasting works, common attack techniques, detection methods, and practical defense strategies.
https://denizhalil.com/2025/05/05/basic-active-directory-enumeration-a-comprehensive-guide/#CyberSecurity #ActiveDirectory #Kerberoasting #Kerberos #CredentialAccess #RedTeam #BlueTeam #Pentesting #WindowsSecurity #InfoSec #ThreatDetection #DenizHalil
-
What is Kerberoasting Attack – Kerberoasting: A Comprehensive Guide
In this article, I cover how Kerberoasting works, common attack techniques, detection methods, and practical defense strategies.
https://denizhalil.com/2026/05/21/kerberoasting-attack-defense-guide/#CyberSecurity #ActiveDirectory #Kerberoasting #Kerberos #CredentialAccess #RedTeam #BlueTeam #Pentesting #WindowsSecurity #InfoSec #ThreatDetection #DenizHalil
-
Python C2 Server for Red Teaming: A Comprehensive Hands-On Guide
In this guide, I walk through building a Python-based C2 server, covering its architecture, encrypted communication, and real-world operational workflow.
https://denizhalil.com/2025/12/15/python-c2-server-red-teaming-guide/#CyberSecurity #RedTeam #C2 #commandandcontrol #Python #offensivesecurity #Pentesting #infosec #threatdetection #blueteam #securityengineering #ethicalhacking
-
Released v1.3.3. of #Yaralyzer, my surprisingly popular tool for visualizing YARA rule matches with colors (a lot of colors).
1. --export-png images lets you export images of the analysis
2. almost all command line options (including multi argument ones like --yara-rules-dir) can be permanently set via environment variables or .yaralyzer file
3. couple of small bug fixes and debugging related command line options
You can try it on the web here: https://yaratoolkit.securitybreak.io/
(I didn't build this website, Thomas Roccia from Microsoft just integrated Yaralyzer into his existing site)- Github: https://github.com/michelcrypt4d4mus/yaralyzer
- Pypi: https://pypi.org/project/yaralyzer/
- on macOS you can also get it with #Homebrew by installing Pdfalyzer: brew install pdfalyzer#ascii #asciiArt #blueteam #cybersecurity #detectionEngineering #DFIR #forensics #FOSS #GPL #hacking #infosec #KaliLinux #maldoc #malware #malwareAnalysis #malwareDetection #openSource #pypi #python #redteam #reverseEngineering #reversing #Threatassessment #threathunting #YARA #YARArule #YARArules
-
New blog post live for my Sentinel Saturday series! :1000: :apartyblobcat:
Read the blog 👉 https://marshsecurity.org/sentinel-saturday-using-tasks-with-automation/In this post, I explore the power of using Microsoft Sentinel Tasks as part of your automation workflows.
Most teams aren’t getting the full #value out of Tasks in Microsoft Sentinel. Are you? When you combine Sentinel Tasks with automation, they become a game-changer.
- Auto-create tasks when automation fails (so nothing slips through the cracks)
- Auto-complete tasks when automation succeeds
- Use tasks to verify automation outcomes
- Build engineering feedback loops and automation #QARead the blog 👉 https://marshsecurity.org/sentinel-saturday-using-tasks-with-automation/
#MicrosoftSentinel #SentinelAutomation #CyberSecurity #SOCAutomation
#CloudSecurity #AzureSecurity #SIEM #SecOps #Automation #InfoSec
#CyberSecurityCommunity #BlueTeam #ThreatDetection #SecurityEngineering #SecurityOperations -
Post-Earnings Dip: Why You Shouldn't Get Too Comfortable on Cybersecurity Gains
Just when you thought it was safe to go back in the market, cybersecurity stocks like Palo Alto Networks take a hit after strong quarterly results. But what does this mean for your online safety?
As cybersecurity companies continue to report impressive earnings, it's essential to remember that security is an ongoing battle. New vulnerabilities and threats emerge daily, making it crucial to stay vigilant.
So, are you taking the necessary steps to protect your digital fortress? What's your top concern when it comes to cybersecurity? Share with us in the comments below!
#CybersecurityMatters #DigitalSafetyFirst #StaySecure
#InfoSec # Cybersecurity #BlueTeam
Read more: https://short.steelefortress.com/ffww3t
-
Found this interesting article about the cyber incident at MITRE last year. Really appreciate the technical explanations and the sharing intention here.
-
Found this interesting article about the cyber incident at MITRE last year. Really appreciate the technical explanations and the sharing intention here.
-
🔵 Defending Microsoft Azure: A Blue Team Perspective
On 9. November 2024, Kristian Jacobsen will discuss the unique challenges of defending #Azure environments at BSides København.
Get insights into the attack surface, strategic logs, monitoring, and real-life incident response experiences.
🔗 Don’t miss out—get your ticket here: https://billetto.dk/en/e/bsides-kobenhavn-2024-billetter-1067567
#bsides #bsideskbh #infosec #cybersecurity #BlueTeam #logs #incidentresponse -
🔵 Defending Microsoft Azure: A Blue Team Perspective
On 9. November 2024, Kristian Jacobsen will discuss the unique challenges of defending #Azure environments at BSides København.
Get insights into the attack surface, strategic logs, monitoring, and real-life incident response experiences.
🔗 Don’t miss out—get your ticket here: https://billetto.dk/en/e/bsides-kobenhavn-2024-billetter-1067567
#bsides #bsideskbh #infosec #cybersecurity #BlueTeam #logs #incidentresponse -
🔵 Defending Microsoft Azure: A Blue Team Perspective
On 9. November 2024, Kristian Jacobsen will discuss the unique challenges of defending #Azure environments at BSides København.
Get insights into the attack surface, strategic logs, monitoring, and real-life incident response experiences.
🔗 Don’t miss out—get your ticket here: https://billetto.dk/en/e/bsides-kobenhavn-2024-billetter-1067567
#bsides #bsideskbh #infosec #cybersecurity #BlueTeam #logs #incidentresponse -
🔵 Defending Microsoft Azure: A Blue Team Perspective
On 9. November 2024, Kristian Jacobsen will discuss the unique challenges of defending #Azure environments at BSides København.
Get insights into the attack surface, strategic logs, monitoring, and real-life incident response experiences.
🔗 Don’t miss out—get your ticket here: https://billetto.dk/en/e/bsides-kobenhavn-2024-billetter-1067567
#bsides #bsideskbh #infosec #cybersecurity #BlueTeam #logs #incidentresponse -
🔵 Defending Microsoft Azure: A Blue Team Perspective
On 9. November 2024, Kristian Jacobsen will discuss the unique challenges of defending #Azure environments at BSides København.
Get insights into the attack surface, strategic logs, monitoring, and real-life incident response experiences.
🔗 Don’t miss out—get your ticket here: https://billetto.dk/en/e/bsides-kobenhavn-2024-billetter-1067567
#bsides #bsideskbh #infosec #cybersecurity #BlueTeam #logs #incidentresponse -
One example why to use strong #passwords for users who use file sharing over #SMB even when the file transfers are #encrypted.
If the SMB traffic is captured/eavesdropped, then the attacker can try to crack the user password.
The attacker is able to extract challenge/response values from the Session Setup and then use #passwordcracking tools such as #hashcatIf the attack is successful, the attacker will gain not only the access to the user account, but it is also possible to decrypt the captured SMB file transfers. There is lack of perfect forward secrecy in this encryption.
For more details and practical examples, see this blog post:
https://malwarelab.eu/posts/tryhackme-smb-decryption/
#networktrafficanalysis #networktraffic #encryption #netntlmv2 #netntlm #ntlm #windows #fileshare #pentesting #cybersecurity #hardening #password #cracking #offensivesecurity #offsec #blueteam #purpleteam
-
A rich #training #offer at BSides Milano we have top-notch trainings, in some case for the first time in #Italy! All #in-person! The #event will be held from 4 to 8 July 2023. From 4 to 7 we will be focus on #learnitall on the 8 we will deep dive in our #amazing #conference. Ticket will be available from tonight for the trainings. We have an early bird rate until 30th April.
Are you ready? We are!! join our group SecurityBsidesItalia #linkedin or on #discord https://lnkd.in/dBu7wkJG for detailed info! #cyber #threatintelligence #threatintel #cloud #redteaming #redteam #blueteam #threathunting #exploitation #secureboot #TTE #multicloud #hybridcloud #voip #Linux #Windows #LTE #baseband #deception #detection #evasion #edr #BSML23 #AWS #Azure #AzureAD #GCP #devops #cicd #RTOS #FalseFlag #HoneyNet #IDAPro #Python #reverseengineering #Ghidra #network #MITRE #TTPs #persistence #commandandcontrol #lateralmovement #osint #obfuscation #malware #malwareanalysis .
Reserve your your spot!! https://lnkd.in/dZf-yyPv