#blueteam — Public Fediverse posts
Live and recent posts from across the Fediverse tagged #blueteam, aggregated by home.social.
-
CW: blogging about Formbook's sysmon evasion
New blog post: Abstracting Evasion: How a Fileless Formbook Variant Blinds Kernel Telemetry https://amethyst.systems/blog/posts/abstracting-evasion-how-a-fileless-formbook-variant-blinds-kernel-telemetry/ #malwareanalysis #threatintelligence #blueteam
-
Microsoft’s new notetaker block in Teams will drive AI notetakers more invisible, known as bot free. Many of them already support this.
They install to the user folder. Some are Chrome extensions. And a few gleefully tout how invisible they are.
Hunt in the windows registry
\ConsentStore\microphone\NonPackageto see what could be hijacking the mic and recording meetings.Expanded block list forthcoming. Then maybe a Windows & Mac sensor. What a ridiculous blight.
-
We’re excited to announce that BC Security is teaching at the first-ever Black Hat India! 🇮🇳
Join us on Oct. 27–30 in Bengaluru for the inaugural event and our brand-new course: Attacking and Defending AI Agents.
🔥 Early Bird pricing is live, but seats are moving fast! Reserve your seat before it fills up:
https://www.blackhat-india.com/training-schedule#attacking-and-defending-ai-agents-49915#BlackHatIndia #AIAgents #MITREATLAS #RedTeam #BlueTeam #AppSec #CloudSecurity #BCSecurity
-
I looked at reasons why Palo Alto Cortex uses this very old piece of public domain software in their EDR agent, and what can we learn from it.
https://death.sk/posts/clips_detection_engine/
#blueteam #dfir #xdr #edr -
Been here a while and haven’t found #hardware #hackers or those #building projects. Where’s the #bugbounty pros with the tips? #Blueteam with those new #YARA rules?
Here’s a $20 FPV scanner I’ll probably document and open source.
Hashtags might help? #infosec #detection #makestuff #reverseengineering #drones