سرمایه گذاری ۵ بیلیون دلاری مایکروسافت در استرالیا برای ارتقای امنیت
#آکادمی_روزبه
https://www-csoonline-com.cdn.ampproject.org/c/s/www.csoonline.com/article/656781/microsoft-leads-the-build-of-australias-cyber-shields.html/amp/
#آکادمی_روزبه
https://www-csoonline-com.cdn.ampproject.org/c/s/www.csoonline.com/article/656781/microsoft-leads-the-build-of-australias-cyber-shields.html/amp/
CSO Online
Microsoft leads the build of Australia’s cyber shields
Microsoft announced a $5 billion investment over two years in Australia that will see the vendor collaborate with the Australian Signals Directorate on the cyber shields’ initiative.
In-depth investigation and analysis of the Active Directory with ADRecon!
https://github.com/tomwechsler/Active_Directory_Advanced_Threat_Hunting/blob/main/Different_hunting_methods/In-depth_investigation_active_directory.md
https://github.com/tomwechsler/Active_Directory_Advanced_Threat_Hunting/blob/main/Different_hunting_methods/In-depth_investigation_active_directory.md
GitHub
Active_Directory_Advanced_Threat_Hunting/Different_hunting_methods/In-depth_investigation_active_directory.md at main · tomwec…
This repo is about Active Directory Advanced Threat Hunting - tomwechsler/Active_Directory_Advanced_Threat_Hunting
بدافزاری برای لینوکس و ویندوز
بنا بر نظر کسپرسکی ، با توجه به پیچیده بودن آن ، احتمالا APT میباشد
#آکادمی_روزبه
https://www-bleepingcomputer-com.cdn.ampproject.org/c/s/www.bleepingcomputer.com/news/security/stripedfly-malware-framework-infects-1-million-windows-linux-hosts/amp/
بنا بر نظر کسپرسکی ، با توجه به پیچیده بودن آن ، احتمالا APT میباشد
#آکادمی_روزبه
https://www-bleepingcomputer-com.cdn.ampproject.org/c/s/www.bleepingcomputer.com/news/security/stripedfly-malware-framework-infects-1-million-windows-linux-hosts/amp/
www-bleepingcomputer-com.cdn.ampproject.org
StripedFly malware framework infects 1 million Windows, Linux hosts
A sophisticated cross-platform malware platform named StripedFly flew under the radar of cybersecurity researchers for five years, infecting over a million Windows and Linux systems during that time.
دات نت ۷ و تعامل بهتر در حوزه رمزنگاری
#آکادمی_روزبه
https://medium.com/asecuritysite-when-bob-met-alice/c-net-7-and-aes-gcm-a9ba34b49369
#آکادمی_روزبه
https://medium.com/asecuritysite-when-bob-met-alice/c-net-7-and-aes-gcm-a9ba34b49369
Medium
C# (.NET 7) and AES GCM
.NET is a standard software platform that manages executable code. With .NET 7, Microsoft further advanced their .NET Core infrastructure…
حفاظت در برابر حمله DCSync
اکتیو دایرکتوری خود را مقاوم بسازید
#آکادمی_روزبه
https://www.sentinelone.com/blog/active-directory-dcsync-attacks/
اکتیو دایرکتوری خود را مقاوم بسازید
#آکادمی_روزبه
https://www.sentinelone.com/blog/active-directory-dcsync-attacks/
SentinelOne
DCSync Attack Protection Against Active Directory
A well-known credential dumping technique allows attackers to siphon Active Directory credentials. Learn how this attack works & how to detect it.
یک رایت آپ بخوانیم
سطح : متوسط
تهیه و اجرای C2 با استفاده از HTA فایل
**بدلیل همین استفاده های نابجا از VBscript، مایکروسافت پشتیبانی از آنرا دیگر انجام نمیدهد
** این رایت آپ امکان پیچیده تر شدن در چند مرحله دارد نظیر درهم سازی دستور پاورشل
https://bhaveshl.medium.com/cobalt-strike-hta-files-b06f778570df
سطح : متوسط
تهیه و اجرای C2 با استفاده از HTA فایل
**بدلیل همین استفاده های نابجا از VBscript، مایکروسافت پشتیبانی از آنرا دیگر انجام نمیدهد
** این رایت آپ امکان پیچیده تر شدن در چند مرحله دارد نظیر درهم سازی دستور پاورشل
https://bhaveshl.medium.com/cobalt-strike-hta-files-b06f778570df
Medium
Cobalt Strike & .HTA files
As per Mitre ATT&CK, ID S0154 tracks Cobalt Strike as a “commercial, full-featured, remote access tool that bills itself as “adversary…
گزارش تحلیلی بدافزار
#آکادمی_روزبه
https://securityscorecard.com/research/apt28s-stealer-called-credomap/
#آکادمی_روزبه
https://securityscorecard.com/research/apt28s-stealer-called-credomap/
SecurityScorecard
A Deep Dive Into the APT28’s stealer called CredoMap
Initially discovered by Google and CERT-UA, CredoMap is a stealer developed by the Russian APT28/Sofacy/Fancy Bear that was used to target users in Ukraine in the context of the ongoing war between Russia and Ukraine. Learn more about this malware and how…
ویدئو هایی جدید و رایگان درخصوص SOC و IR
#آکادمی_روزبه
https://youtube.com/playlist?list=PLQ8_y8jaKwSWlkxqnEZUOihOuieN3gvbe&si=G7SU1VKDwMRuxa4L
#آکادمی_روزبه
https://youtube.com/playlist?list=PLQ8_y8jaKwSWlkxqnEZUOihOuieN3gvbe&si=G7SU1VKDwMRuxa4L
Detect WS_FTP Server Exploitation with Splunk Attack Range
recently disclosed CVE-2023-40044, which targets Progress Software WS_FTP Server Ad Hoc module, highlights the importance of providing detection developer environments where they can replicate, validate, and produce data of ongoing exploitations campaigns with the purpose of developing detections to protect their organizations.
https://www.splunk.com/en_us/blog/security/detect-ws-ftp-server-exploitation-with-splunk-attack-range.html
recently disclosed CVE-2023-40044, which targets Progress Software WS_FTP Server Ad Hoc module, highlights the importance of providing detection developer environments where they can replicate, validate, and produce data of ongoing exploitations campaigns with the purpose of developing detections to protect their organizations.
https://www.splunk.com/en_us/blog/security/detect-ws-ftp-server-exploitation-with-splunk-attack-range.html
Splunk
Detect WS_FTP Server Exploitation with Splunk Attack Range | Splunk
The Splunk Threat Research Team shares how they used Splunk Attack Range to develop detection content related to CVE-2023-40044.
آشنایی با امنیت تطبیقی
بخشی از مدل زیرو تراست
#آکادمی_روزبه
https://www.citrix.com/solutions/secure-access/what-is-adaptive-security.html
بخشی از مدل زیرو تراست
#آکادمی_روزبه
https://www.citrix.com/solutions/secure-access/what-is-adaptive-security.html
Citrix.com
What is Adaptive Security? - Citrix
Adaptive security is a security approach that’s used to respond to potential cyberthreats in real-time by continually monitoring user sessions.
در نسخه جدید ویندوز ۱۱ چه برای حرفه ای های IT وجود دارد؟
https://techcommunity.microsoft.com/t5/windows-it-pro-blog/what-s-new-for-it-pros-in-windows-11-version-23h2/ba-p/3967814
https://techcommunity.microsoft.com/t5/windows-it-pro-blog/what-s-new-for-it-pros-in-windows-11-version-23h2/ba-p/3967814
TECHCOMMUNITY.MICROSOFT.COM
What’s new for IT pros in Windows 11, version 23H2 | Windows IT Pro Blog
Get details on commercial availability, deployment tools, and fast installation using an enablement package.
مدل بلوغ تدوین لیست عناصر نرم افزار BOM از سوی OWASP تدوین شد
#آکادمی_روزبه
https://www.einpresswire.com/article/665343822/owasp-launches-bom-maturity-model-new-benchmark-for-sbom-quality
#آکادمی_روزبه
https://www.einpresswire.com/article/665343822/owasp-launches-bom-maturity-model-new-benchmark-for-sbom-quality
EIN Presswire
OWASP Launches BOM Maturity Model; New Benchmark For SBOM Quality
Today at AppSec Global in Washington DC, the OWASP Foundation launched the much anticipated BOM Maturity Model. The model provides a formalized structure in
ISC2_Cybersecurity_Workforce_Study_2023.pdf
1.3 MB
آمارها از نیروی متخصص امنیت سایبری و نیازهای کارفرماها در جهان
براساس پیمایش سازمان ISC2
#آکادمی_روزبه
براساس پیمایش سازمان ISC2
#آکادمی_روزبه