Grepton retweetledi
While we’re here: troyhunt.com/these-cookie-w…
Gold Coast, Queensland 🇦🇺 English
Grepton
6 posts
Grepton retweetledi
The power of community and open source to accelerate learning in #infosec
📎twitter.com/JohnLaTwC/stat…
John Lambert@JohnLaTwC
At #CERTEUConf2019 I spoke on advancing InfoSec learning by an open, community based approach I call the Githubification of InfoSec. Embrace @MITREattack, #Sigma, #jupyter notebooks. 👉🏻 github.com/JohnLaTwC/Shar…
English
Grepton retweetledi
Want to block [MS-EFSR] / #PetitPotam calls?🤔
Use RPC filters ! 🥳
put previous Tweet in a file: `block_efsr.txt` then:
> netsh -f block_efsr.txt
Just tested: it blocks remote connections & not local EFS usage
Thank you to @CraigKirby to remind us this RPC technology filter!
🥝🏳️🌈 Benjamin Delpy@gentilkiwi
rpc filter add rule layer=um actiontype=block add condition field=if_uuid matchtype=equal data=c681d488-d850-11d0-8c52-00c04fd90f7e add filter add rule layer=um actiontype=block add condition field=if_uuid matchtype=equal data=df1941c5-fe89-4e79-bf10-463657acf44d add filter quit
English
English
English
@atc_project @cyb3rops Is ATC the only project organising and structuring Sigma rule detections, dependencies & playbooks etc? I don't see anyone else doing it and the ATC project seems quiet
English