Defence Logic Limited retweeted
This is great. I hadn't heard of the Rivington Fund before.
Read all about our latest round of successful art & history loving applicants at the link! 👇🏻Thanks @Channeleyemedia
channeleye.media/rivington-f…
Defence Logic Limited retweeted
If you want to help us improve the public @sigma_hq rules, this 👇 is a guide on when we filter FPs and when we accept them
Also check the rule levels: github.com/SigmaHQ/sigma/wik…
Please provide filters for FPs with standard software as pull requests in the public repo
Replying to @yamatosecurity
Thanks for the feedback
These are the rules reg. false positives& tuning
critical - should never produce FPs
high - can produce FPs with custom software, shouldn't produce FPs with standard software
medium - noteworthy events, no alerting, FPs accepted
low + info - FPs accepted
Defence Logic Limited retweeted
In addition to the documented "-e/--exec" flag in #lolbas about the "wsl.exe" binary (lolbas-project.github.io/lol…). We can also use the "--system" flag to run Linux (as root) /Windows commands.
wsl --system [Command]
Defence Logic Limited retweeted
.@blubbfiction published a Cookiecutter template to facilitate the creation of backends for pySigma
xitter.cf/blubbfiction/status/15…
pySigma is the new basis for conversions
github.com/SigmaHQ/pySigma
Sigma-cli, which uses pySigma replaces the old&inflexible sigmac
github.com/SigmaHQ/sigma-cli
I've created a Cookiecutter template for pySigma conversion packends and processing pipelines:
github.com/SigmaHQ/cookiecut…
Create your own backend from this template with:
cookiecutter github.com/SigmaHQ/cookiecut…
Defence Logic Limited retweeted
UAC prompt bypass with some clicks extra over here.
xitter.cf/j00sean/status/1531773…
Not as cool as other things related to #Follina, but there's a chance to execute High IL payload with some additional clicks. UAC prompt bypass, though.
Defence Logic Limited retweeted
Scan for F5 BIG-IP iControl REST Auth Bypass RCE (CVE-2022-1388) using nuclei template shared by @dwisiswant0
Template PR: github.com/projectdiscovery/…
Advisory: support.f5.com/csp/article/K…
#hackwithautomation #security #bugbounty #appsec
Defence Logic Limited retweeted
Reverse Shell for #F5-Big IP CVE-2022-1388
Defence Logic Limited retweeted
Useful Security Tools and Resources for Digital Forensics github.com/mikeroyal/Digital…
Defence Logic Limited retweeted
Wow, @BleepinComputer nailed the deep dive on this one - check it out!
bleepingcomputer.com/news/mi…
Defence Logic Limited retweeted
#Ukraine: In some significant news, it appears that the Czech Republic is supplying "dozens" of T-72M1 tanks & BVP-1 IFV to the UA forces.
Whilst the T-72M1 is rather old (slightly altered T-72A1), & so are the BVP-1 (BMP-1 with very minor changes), they would still be of use.
Defence Logic Limited retweeted
Here is a little more info/context from local media: echo24.cz/a/SrjYb/cesko-posl… and some HQ images also of a few of the vehicles.
Note: This is totally separate from the supply of Pbv 501 (Mildly modernised BMP-1s formerly operated by Sweden) to Ukraine, which is also taking place.
Defence Logic Limited retweeted
Tributes to popular environmentalist who "modernised planning" | Bailiwick Express bailiwickexpress.com/jsy/new…
Defence Logic Limited retweeted
#Ukraine: This time, the Ukrainian farmers grabbed themselves a ZU-23-2 23mm autocannon from Russian forces.
Defence Logic Limited retweeted
For those that don’t already follow @shortxstack, proceeds are being donated to Ukraine support causes. #ghostofkyiv
Defence Logic Limited retweeted
Replying to @cyb3rops
Nice, but you would likely DoS your detection system with so much regex per packet..
Defence Logic Limited retweeted
Someone has built a huge regex to cover many obfuscated versions of the log4shell payloads
Really nice, I'll test it and update my gist
Repo
github.com/back2root/log4she…
Test
regex101.com/r/KqGG3W/3


































