A boutique cyber security firm based in Jersey offering various services and solutions.

Bailiwick of Jersey.
Joined September 2017
Defence Logic Limited retweeted
If you want to help us improve the public @sigma_hq rules, this 👇 is a guide on when we filter FPs and when we accept them Also check the rule levels: github.com/SigmaHQ/sigma/wik… Please provide filters for FPs with standard software as pull requests in the public repo
Replying to @yamatosecurity
Thanks for the feedback These are the rules reg. false positives& tuning critical - should never produce FPs high - can produce FPs with custom software, shouldn't produce FPs with standard software medium - noteworthy events, no alerting, FPs accepted low + info - FPs accepted
Defence Logic Limited retweeted
In addition to the documented "-e/--exec" flag in #lolbas about the "wsl.exe" binary (lolbas-project.github.io/lol…). We can also use the "--system" flag to run Linux (as root) /Windows commands. wsl --system [Command]
6
180
3
611
Defence Logic Limited retweeted
.@blubbfiction published a Cookiecutter template to facilitate the creation of backends for pySigma xitter.cf/blubbfiction/status/15… pySigma is the new basis for conversions github.com/SigmaHQ/pySigma Sigma-cli, which uses pySigma replaces the old&inflexible sigmac github.com/SigmaHQ/sigma-cli
I've created a Cookiecutter template for pySigma conversion packends and processing pipelines: github.com/SigmaHQ/cookiecut… Create your own backend from this template with: cookiecutter github.com/SigmaHQ/cookiecut…
12
42
Defence Logic Limited retweeted
Replying to @j00sean @cyb3rops
UAC prompt bypass with some clicks extra over here. xitter.cf/j00sean/status/1531773…
Not as cool as other things related to #Follina, but there's a chance to execute High IL payload with some additional clicks. UAC prompt bypass, though.
3
4
Defence Logic Limited retweeted
Scan for F5 BIG-IP iControl REST Auth Bypass RCE (CVE-2022-1388) using nuclei template shared by @dwisiswant0 Template PR: github.com/projectdiscovery/… Advisory: support.f5.com/csp/article/K… #hackwithautomation #security #bugbounty #appsec
1
113
2
284
Defence Logic Limited retweeted
Reverse Shell for #F5-Big IP CVE-2022-1388
5
135
7
574
Defence Logic Limited retweeted
#CVE-2022-1388 F5's BIG-IP Unauth RCE Connection: keep-alive, X-F5-Auth-Token Authorization: Basic YWRtaW46 X-F5-Auth-Token: anything https://x.x.x.x:443/mgmt/tm/util/bash
6
214
23
548
Defence Logic Limited retweeted
#Ukraine: In some significant news, it appears that the Czech Republic is supplying "dozens" of T-72M1 tanks & BVP-1 IFV to the UA forces. Whilst the T-72M1 is rather old (slightly altered T-72A1), & so are the BVP-1 (BMP-1 with very minor changes), they would still be of use.
257
1,101
106
9,654
Defence Logic Limited retweeted
Here is a little more info/context from local media: echo24.cz/a/SrjYb/cesko-posl… and some HQ images also of a few of the vehicles. Note: This is totally separate from the supply of Pbv 501 (Mildly modernised BMP-1s formerly operated by Sweden) to Ukraine, which is also taking place.
35
197
6
2,080
Defence Logic Limited retweeted
#Ukraine: This time, the Ukrainian farmers grabbed themselves a ZU-23-2 23mm autocannon from Russian forces.
250
1,708
301
11,094
For those that don’t already follow @shortxstack, proceeds are being donated to Ukraine support causes. #ghostofkyiv
1
6
1
8
Defence Logic Limited retweeted
Replying to @cyb3rops
Nice, but you would likely DoS your detection system with so much regex per packet..
2
1
22
Defence Logic Limited retweeted
Someone has built a huge regex to cover many obfuscated versions of the log4shell payloads Really nice, I'll test it and update my gist Repo github.com/back2root/log4she… Test regex101.com/r/KqGG3W/3
13
228
5
724