#threathunting — Public Fediverse posts

Malwoverview 8.2.0 (codename: Revolutions)

This version adds a component vulnerability search, gives every NIST query a chosen ordering reference, and repairs the queries themselves.

https://github.com/alexandreborges/malwoverview

To install it:

python -m pip install -U malwoverview[all]

[+] New — --nist 6, list the CVEs of a component

Give it a component name, or the path to a local binary:

malwoverview --nist 6 --NIST openssl malwoverview --nist 6 --NIST "C:\Windows\System32\drivers\afd.sys"

The same works by name on any platform: ksmbd and nf_tables on Linux, iCloud and WebKit on macOS and iOS.

[+] New — --sort-by

Chooses what "most recent" means: the year in the CVE ID (default) or the NVD publication date. NVD often publishes a record years after the ID was assigned, so the two disagree on about 30% of rows. --time now bounds results by the same reference.

Note: check the ## WHAT IS NEW IN 8.2.0, BY EXAMPLE section from README.md to learn how to use the new options.

#malware #cybersecurity #infosec #informationsecurity #vulnerability #cve #threathunting #threatintelligence

Malwoverview 8.2.0 (codename: Revolutions)

This version adds a component vulnerability search, gives every NIST query a chosen ordering reference, and repairs the queries themselves.

https://github.com/alexandreborges/malwoverview

To install it:

python -m pip install -U malwoverview[all]

[+] New — --nist 6, list the CVEs of a component

Give it a component name, or the path to a local binary:

malwoverview --nist 6 --NIST openssl malwoverview --nist 6 --NIST "C:\Windows\System32\drivers\afd.sys"

The same works by name on any platform: ksmbd and nf_tables on Linux, iCloud and WebKit on macOS and iOS.

[+] New — --sort-by

Chooses what "most recent" means: the year in the CVE ID (default) or the NVD publication date. NVD often publishes a record years after the ID was assigned, so the two disagree on about 30% of rows. --time now bounds results by the same reference.

Note: check the ## WHAT IS NEW IN 8.2.0, BY EXAMPLE section from README.md to learn how to use the new options.

#malware #cybersecurity #infosec #informationsecurity #vulnerability #cve #threathunting #threatintelligence

Malwoverview 8.2.0 (codename: Revolutions)

This version adds a component vulnerability search, gives every NIST query a chosen ordering reference, and repairs the queries themselves.

https://github.com/alexandreborges/malwoverview

To install it:

python -m pip install -U malwoverview[all]

[+] New — --nist 6, list the CVEs of a component

Give it a component name, or the path to a local binary:

malwoverview --nist 6 --NIST openssl malwoverview --nist 6 --NIST "C:\Windows\System32\drivers\afd.sys"

The same works by name on any platform: ksmbd and nf_tables on Linux, iCloud and WebKit on macOS and iOS.

[+] New — --sort-by

Chooses what "most recent" means: the year in the CVE ID (default) or the NVD publication date. NVD often publishes a record years after the ID was assigned, so the two disagree on about 30% of rows. --time now bounds results by the same reference.

Note: check the ## WHAT IS NEW IN 8.2.0, BY EXAMPLE section from README.md to learn how to use the new options.

#malware #cybersecurity #infosec #informationsecurity #vulnerability #cve #threathunting #threatintelligence

Malwoverview 8.2.0 (codename: Revolutions)

This version adds a component vulnerability search, gives every NIST query a chosen ordering reference, and repairs the queries themselves.

https://github.com/alexandreborges/malwoverview

To install it:

python -m pip install -U malwoverview[all]

[+] New — --nist 6, list the CVEs of a component

Give it a component name, or the path to a local binary:

malwoverview --nist 6 --NIST openssl malwoverview --nist 6 --NIST "C:\Windows\System32\drivers\afd.sys"

The same works by name on any platform: ksmbd and nf_tables on Linux, iCloud and WebKit on macOS and iOS.

[+] New — --sort-by

Chooses what "most recent" means: the year in the CVE ID (default) or the NVD publication date. NVD often publishes a record years after the ID was assigned, so the two disagree on about 30% of rows. --time now bounds results by the same reference.

Note: check the ## WHAT IS NEW IN 8.2.0, BY EXAMPLE section from README.md to learn how to use the new options.

#malware #cybersecurity #infosec #informationsecurity #vulnerability #cve #threathunting #threatintelligence

Malwoverview 8.2.0 (codename: Revolutions)

This version adds a component vulnerability search, gives every NIST query a chosen ordering reference, and repairs the queries themselves.

https://github.com/alexandreborges/malwoverview

To install it:

python -m pip install -U malwoverview[all]

[+] New — --nist 6, list the CVEs of a component

Give it a component name, or the path to a local binary:

malwoverview --nist 6 --NIST openssl malwoverview --nist 6 --NIST "C:\Windows\System32\drivers\afd.sys"

The same works by name on any platform: ksmbd and nf_tables on Linux, iCloud and WebKit on macOS and iOS.

[+] New — --sort-by

Chooses what "most recent" means: the year in the CVE ID (default) or the NVD publication date. NVD often publishes a record years after the ID was assigned, so the two disagree on about 30% of rows. --time now bounds results by the same reference.

Note: check the ## WHAT IS NEW IN 8.2.0, BY EXAMPLE section from README.md to learn how to use the new options.

#malware #cybersecurity #infosec #informationsecurity #vulnerability #cve #threathunting #threatintelligence