Using agent forwarding comes with a risk, but stored private keys can also abused if the attacker has compromised the remote machine.
In this thread I want to discuss whether agent forwarding is safe to use or should not be used because of…
Type: Solution BriefsSecureworks Aligns With NIST-CSF and NIST SP 800-171 NIST Compliance Solution BriefSecureworks’ capabilities span the complete range of NIST-CSF general functional areas & NIST SP 800-171 specific information security categories. T…
Bad news, I lost my VeraCrypt password. (Yes, it was extremely stupid.) Good news I used a self-created formula to build the password. I do this because it makes the password long and complex, but easier for me to remember.
Well, it didn’t…
Regulatory Compliance Solutions: The Security Maturity JourneyFind a trusted partner to help you understand how to leverage available software and services when seeking to achieve regulatory complianceSecureworks can help you plot a course forward to m…
I can’t figure it out / understand. Need to write a rule that catches an HTTP POST request from one ip address more than three times in 10 seconds and logs it.
alert http $EXTERNAL_NET any -> $HOME_NET any (msg:"HTTP post packet fl…
Article Link: Event Log Chainsaw Massacre – Powerful Threat Detection – YouTube
1 post – 1 participant
Read full topic
For several days now I am receiving activation codes by SMS that look like this:
Your ToYou verification code is 8058
Some are from ToYou, that seems to be a delivery service, others are from similar services in Russia, other are written i…
Improve Penetration Testing Results With a Simple PasswordAccess to legitimate credentials can allow pentesters to effectively configure tooling and frees more time to focus on discovering potential attack vectors.Access to legitimate credentials can …
Type: VideosWhen Good Guys Go BadBeat the Threat: Adversarial Simulation Video SeriesThrough adversarial simulation and Red Team testing, the Secureworks Adversary Group thinks and acts like the adversary to beat the threat. Watch the video series.
I was learning volatility and in this room in tryhackme they used psxview to find the hidden processes.
The assignment was,
It’s fairly common for malware to attempt to hide itself and the
process associated with it. That being said, we c…
