🔥ThreatHunting-keywords April update🔥
35380 detection patterns
152 tools updated github.com/mthcht/ThreatH…
WebSite: mthcht.github.io/ThreatHunting-…
Individual Tool Lists: github.com/mthcht/ThreatH…
Yara Rules: github.com/mthcht/ThreatH…
Specific Artifact Lists Updated: github.com/mthcht/awesome…

How lateral movement with ⏲️ WMI event subscriptions works.

#ThreatHunting #DFIR

How the ESC14 technique is used to take over computer accounts.

#ThreatHunting #DFIR

We've added argument decoders for CertServerRequest to the Extended Telemetry fork of RPC Firewall. This can reveal AD CS abuse in real time with:

• source user/IP
• the requested certificate template
• subject alt names

github.com/ACE-Responder/…

#ThreatHunting #DFIR

As a DFIR Engineer, you should notice something suspicious going on here!!
But how many techniques do you know that an attacker can use to hide this easy detection from you?!
#C5W #DFIR #Malware #ThreatHunting #Cybersecurity

Extended telemetry for RPC Firewall decodes RPC call parameters. The context gives a single authoritative event for:

• Lateral movement
• Forced authentication
• Remote enumeration

github.com/ACE-Responder/…

#ThreatHunting #DFIR

We published #korean version's report '2023 ACTIVITIES SUMMARY OF SECTORB GROUPS REPORT' tinyurl.com/yb9k5ujm #APT #Malware #cybercrime #threatintel #ThreatIntelligence #threathunting #phishing #vulnerability

.Jess Garcia is here to cover what you need to know to integrate #GenAI into your everyday #DFIR tasks.

Register for Free & Join Here: sans.org/u/1uVn

#SANSAiForum #DigitalForensics #IncidentResponse #ThreatHunting #AI

Learn how #Edgewater 's team of experts works together to review the data, share insights, and develop strategies for improving our Federal client's security posture. edgewaterit.com/2024/05/02/thr…
#EFS #Edgewater Cyber #ThreatHunting #MidnightBlizzard #ATPs #Cybersecurity #CyberDefense

In the latest episode of the Adversary Universe podcast, CrowdStrike's Andrew Munchbach breaks down the concept of OODA in #ThreatHunting .

1️⃣ Observe what's happening
2️⃣ Orient yourself around what's happening
3️⃣ Decide
4️⃣ Act

🎧 Full episode on Spotify: crwdstr.ke/6018jrWwj

Time for some reading #threathunting

In the latest episode of the Adversary Universe podcast, CrowdStrike's Andrew Munchbach breaks down the concept of OODA in #ThreatHunting .

1️⃣ Observe what's happening
2️⃣ Orient yourself around what's happening
3️⃣ Decide
4️⃣ Act

🎧 Full episode on Spotify: crwdstr.ke/6014bNYem

In the latest episode of the Adversary Universe podcast, CrowdStrike's Andrew Munchbach breaks down the concept of OODA in #ThreatHunting .

1️⃣ Observe what's happening
2️⃣ Orient yourself around what's happening
3️⃣ Decide
4️⃣ Act

🎧 Full episode on Spotify: crwdstr.ke/6012b0aRm

In the latest episode of the Adversary Universe podcast, CrowdStrike's Andrew Munchbach breaks down the concept of OODA in #ThreatHunting .

1️⃣ Observe what's happening
2️⃣ Orient yourself around what's happening
3️⃣ Decide
4️⃣ Act

🎧 Full episode on Spotify: crwdstr.ke/6016b0aM8

In the latest episode of the Adversary Universe podcast, CrowdStrike's Andrew Munchbach breaks down the concept of OODA in #ThreatHunting .

1️⃣ Observe what's happening
2️⃣ Orient yourself around what's happening
3️⃣ Decide
4️⃣ Act

🎧 Full episode on Spotify: crwdstr.ke/6012bauwI

In the latest episode of the Adversary Universe podcast, CrowdStrike's Andrew Munchbach breaks down the concept of OODA in #ThreatHunting .

1️⃣ Observe what's happening
2️⃣ Orient yourself around what's happening
3️⃣ Decide
4️⃣ Act

🎧 Full episode on Spotify: crwdstr.ke/6010jHPcY

In the latest episode of the Adversary Universe podcast, CrowdStrike's Andrew Munchbach breaks down the concept of OODA in #ThreatHunting .

1️⃣ Observe what's happening
2️⃣ Orient yourself around what's happening
3️⃣ Decide
4️⃣ Act

🎧 Full episode on Spotify: crwdstr.ke/6010jDoCa

In the latest episode of the Adversary Universe podcast, CrowdStrike's Andrew Munchbach breaks down the concept of OODA in #ThreatHunting .

1️⃣ Observe what's happening
2️⃣ Orient yourself around what's happening
3️⃣ Decide
4️⃣ Act

🎧 Full episode on Spotify: crwdstr.ke/6010jBTfi

Dive deep into #cybersecurity with our hands-on #training by 0xbad53c and Thomas Eugène! Join red and blue teams in live attack-defense exercises against simulated APT 0x00. Learn #ThreatHunting , #DetectionEngineering , and #IncidentResponse techniques 🛡️
x33fcon.com/#!t/DennisVanE…