Defence Logic Limited retweetledi
Defence Logic Limited
364 posts
Defence Logic Limited
@DefenceLogic
A boutique cyber security firm based in Jersey offering various services and solutions.
Bailiwick of Jersey. Katılım Eylül 2017
237 Takip Edilen85 Takipçiler
Defence Logic Limited retweetledi
If you want to help us improve the public @sigma_hq rules, this 👇 is a guide on when we filter FPs and when we accept them
Also check the rule levels: #level" target="_blank" rel="nofollow noopener">github.com/SigmaHQ/sigma/…
Please provide filters for FPs with standard software as pull requests in the public repo
Florian Roth ⚡️@cyb3rops
@yamatosecurity Thanks for the feedback These are the rules reg. false positives& tuning critical - should never produce FPs high - can produce FPs with custom software, shouldn't produce FPs with standard software medium - noteworthy events, no alerting, FPs accepted low + info - FPs accepted
English
Defence Logic Limited retweetledi
In addition to the documented "-e/--exec" flag in #lolbas about the "wsl.exe" binary (lolbas-project.github.io/lolbas/OtherMS…). We can also use the "--system" flag to run Linux (as root) /Windows commands.
wsl --system [Command]
English
Defence Logic Limited retweetledi
.@blubbfiction published a Cookiecutter template to facilitate the creation of backends for pySigma
twitter.com/blubbfiction/s…
pySigma is the new basis for conversions
github.com/SigmaHQ/pySigma
Sigma-cli, which uses pySigma replaces the old&inflexible sigmac
github.com/SigmaHQ/sigma-…
Thomas Patzke@blubbfiction
I've created a Cookiecutter template for pySigma conversion packends and processing pipelines: github.com/SigmaHQ/cookie… Create your own backend from this template with: cookiecutter github.com/SigmaHQ/cookie…
English
Defence Logic Limited retweetledi
@cyb3rops UAC prompt bypass with some clicks extra over here.
twitter.com/j00sean/status…
j00sean@j00sean
Not as cool as other things related to #Follina, but there's a chance to execute High IL payload with some additional clicks. UAC prompt bypass, though.
English
Defence Logic Limited retweetledi
Scan for F5 BIG-IP iControl REST Auth Bypass RCE (CVE-2022-1388) using nuclei template shared by @dwisiswant0
Template PR: github.com/projectdiscove…
Advisory: support.f5.com/csp/article/K2…
#hackwithautomation #security #bugbounty #appsec
English
Defence Logic Limited retweetledi
Defence Logic Limited retweetledi
Defence Logic Limited retweetledi
Useful Security Tools and Resources for Digital Forensics github.com/mikeroyal/Digi…
English
Defence Logic Limited retweetledi
Wow, @BleepinComputer nailed the deep dive on this one - check it out!
bleepingcomputer.com/news/microsoft…
Lee Holmes@Lee_Holmes
@SwiftOnSecurity It does.
English
Defence Logic Limited retweetledi
#Ukraine: In some significant news, it appears that the Czech Republic is supplying "dozens" of T-72M1 tanks & BVP-1 IFV to the UA forces.
Whilst the T-72M1 is rather old (slightly altered T-72A1), & so are the BVP-1 (BMP-1 with very minor changes), they would still be of use.
English
Defence Logic Limited retweetledi
Here is a little more info/context from local media: echo24.cz/a/SrjYb/cesko-… and some HQ images also of a few of the vehicles.
Note: This is totally separate from the supply of Pbv 501 (Mildly modernised BMP-1s formerly operated by Sweden) to Ukraine, which is also taking place.
English
Defence Logic Limited retweetledi
Tributes to popular environmentalist who "modernised planning" | Bailiwick Express bailiwickexpress.com/jsy/news/senio…
English
Defence Logic Limited retweetledi
#Ukraine: This time, the Ukrainian farmers grabbed themselves a ZU-23-2 23mm autocannon from Russian forces.
English
Defence Logic Limited retweetledi
For those that don’t already follow @shortxstack, proceeds are being donated to Ukraine support causes. #ghostofkyiv
English
Defence Logic Limited retweetledi
@cyb3rops Nice, but you would likely DoS your detection system with so much regex per packet..
English
Defence Logic Limited retweetledi
Someone has built a huge regex to cover many obfuscated versions of the log4shell payloads
Really nice, I'll test it and update my gist
Repo
github.com/back2root/log4…
Test
regex101.com/r/KqGG3W/3
English