Digit Oktavianto

👁️ LOLC2 Collection of C2 frameworks abusing legitimate services to evade detection Major update: new projects tested, enriched data, and deeper insights. site: lolc2.github.io github: github.com/lolc2/lolc2.gi…

I don't know what they're putting in the water, but these anime profile-picture nerds are cookin' .@es3n1n reverse engineered Windows Security Center service and found how to interop with it. This includes disabling it and being a memester See attached post for details

Introduction to malware initial access techniques on Linux magonia.io/blog/commonly-… Credits @signalblur #infosec #Linux

Slides, code and #YARA rules from the workshop I recently teached internally covering various aspects including C and Python API usage, tips & tricks when developing rules and 5 challenges and its solutions. Thanks @wxs for reviewing the slides. #DFIR github.com/fboldewin/YARA…

@dlnsip Wah wah wah 🤔

When the company gets ransomwared but you installed Linux on your company laptop

We took a Cobalt Strike profile, modified it, and bypassed Crowdstrike & Sophos without encrypting the shellcode. Also bypassed all published YARA rules, sleep detections, and string detections around a CS beacon. Blog: whiteknightlabs.com/2023/05/23/unl… #CyberSecurity #redteam #infosec

Wakanda 😭😭😭

Today, me and @ateixei are releasing the EDR Telemetry project. This project aims to compare and evaluate the telemetry of various EDR products. ✅Introductory blog post: t.ly/9Ia3 ✅GitHub Repo: github.com/tsale/EDR-Tele… ✅Comparison Table: t.ly/HMht

@tintinnya @darktracer_int @infosecn1nja Ciat ciat ciat

@darktracer_int Lah Monas. Gimana ini @digitoktav @infosecn1nja ? 😁

DarkTracer platform has enhanced its location-based intelligence search feature. Users can now search for various information within a specific radius from a particular location. Here's an example of investigating credentials leaked from users infected with stealer malware within 1km radius from a certain location.

Wtf happened with Silicon Valley Bank ft. @dhtoomey

Time for another giveaway! We are going to send a t-shirt and a few goodies to one person who follows @PentesterLab and retweets this tweet!! And we are going to give a 12-month voucher to someone who follows @PentesterLab and likes this tweet!!

@cprofiler Which version begin to have this feature?

In our upcoming PowerShell beautifier package we have also implemented automatic naming of variables.

@CertifyGIAC @SANSInstitute Yes! Looking forward to the good news. I think it is great if GIAC has a threat hunting certification!

@digitoktav @SANSInstitute We'll get back to you ASAP on this!

Hi @SANSInstitute and @CertifyGIAC is there any plan for FOR608 to have a GIAC certification in the future?

@4n6lady @GERARDJOHANSEN @PacktPublishing Finger crossed

⭐️GIVEAWAY!⭐️ I'm giving away 10 digital copies of Digital Forensics and Incident Response, 3rd Edition by @GERARDJOHANSEN @PacktPublishing Winners will be announced Friday, @ 12pm EST 🥳 Enter by liking, sharing, and commenting 😊

My presentation on Cloud Scanning for Vulnerability Discovery is up on YouTube! youtube.com/watch?v=Izy9AP… Grab the companion article and notes PDF in the links.

New blog alert ⚠️ We worked with the @CadoSecurity team to investigate a cloud incident in AWS. Read the first part of the series today! link.medium.com/dJOmxioOmwb #stayInvictus #dfir #aws #incidentresponse