پادکست برای آخر شب:
ارائه دیوید هولزر( استاد سنز) از کشف حملات و هوش مصنوعی
#آکادمی_روزبه
https://www.sans.org/podcasts/blueprint/blueprint-david-hoelzer-threat-detection-with-machine-learning-and-ai-27/?utm_medium=Social&utm_source=LinkedIn&utm_content=CD%20newsletter%20July%202023&utm_campaign=Newsletter
ارائه دیوید هولزر( استاد سنز) از کشف حملات و هوش مصنوعی
#آکادمی_روزبه
https://www.sans.org/podcasts/blueprint/blueprint-david-hoelzer-threat-detection-with-machine-learning-and-ai-27/?utm_medium=Social&utm_source=LinkedIn&utm_content=CD%20newsletter%20July%202023&utm_campaign=Newsletter
www.sans.org
David Hoelzer: Threat Detection with Machine Learning and AI | 27 | SANS Institute
In this episode we discuss what AI and ML are best used for, and what they can, can’t, and shouldn’t be used for with guest Dave Hoelzer.
مروری بر تحلیل رجیستری
#آکادمی_روزبه
https://gbhackers-com.cdn.ampproject.org/c/s/gbhackers.com/windows-registry-analysis-tracking-everything-you-do-on-the-system/amp/
#آکادمی_روزبه
https://gbhackers-com.cdn.ampproject.org/c/s/gbhackers.com/windows-registry-analysis-tracking-everything-you-do-on-the-system/amp/
GBHackers Security | #1 Globally Trusted Cyber Security News Platform
Windows Registry Analysis - Tracking Every Activity That You Do on the Windows System
Windows Registry Analysis-Tracking Every activity, Windows registry, SOC, IDS, IPS, Hacking news, Cybersecurity updates, Forensic Analysis
دیگر ابزار بررسی و واکاوی رجیستری
Regripper
https://www.sans.org/blog/regripper-ripping-registries-with-ease/
Regripper
https://www.sans.org/blog/regripper-ripping-registries-with-ease/
www.sans.org
SANS Digital Forensics and Incident Response Blog | RegRipper: Ripping Registries With Ease | SANS Institute
SANS Digital Forensics and Incident Response Blog blog pertaining to RegRipper: Ripping Registries With Ease
ابزاری برای آسان نمودن هک
WormGPT
توسط این ابزار ؛ هکر های تازه کار می‌توانند در سطح بالاتری اقدامات خرابکارانه را انجام دهند. 😱
#آکادمی_روزبه
https://www.scmagazine.com/news/threat-intelligence/crimeware-tool-wormgpt-ai-bec
WormGPT
توسط این ابزار ؛ هکر های تازه کار می‌توانند در سطح بالاتری اقدامات خرابکارانه را انجام دهند. 😱
#آکادمی_روزبه
https://www.scmagazine.com/news/threat-intelligence/crimeware-tool-wormgpt-ai-bec
SC Media
Crimeware tool WormGPT: AI for BEC attacks
Cybercriminals are cashing in on the generative AI hype with a dedicated version of the technology catering to crooks
جایی که باید دانست همیشه نمی‌توان دانست :
مایکروسافت هنوز نمی‌داند!⛳️
Microsoft says it still doesn't know how Chinese hackers stole an inactive Microsoft account (MSA) consumer signing key used to breach the Exchange Online and Azure AD accounts of two dozen organizations, including government agencies.
https://www-bleepingcomputer-com.cdn.ampproject.org/c/s/www.bleepingcomputer.com/news/microsoft/microsoft-still-unsure-how-hackers-stole-azure-ad-signing-key/amp/
مایکروسافت هنوز نمی‌داند!⛳️
Microsoft says it still doesn't know how Chinese hackers stole an inactive Microsoft account (MSA) consumer signing key used to breach the Exchange Online and Azure AD accounts of two dozen organizations, including government agencies.
https://www-bleepingcomputer-com.cdn.ampproject.org/c/s/www.bleepingcomputer.com/news/microsoft/microsoft-still-unsure-how-hackers-stole-azure-ad-signing-key/amp/
www-bleepingcomputer-com.cdn.ampproject.org
Microsoft still unsure how hackers stole Azure AD signing key
Microsoft says it still doesn't know how Chinese hackers stole an inactive Microsoft account (MSA) consumer signing key used to breach the Exchange Online and Azure AD accounts of two dozen organizations, including government agencies.
کتابی که در راه است :
معماری زیرو تراست
از سیسکو
#آکادمی_روزبه
https://www.ciscopress.com/store/zero-trust-architecture-9780137899609
معماری زیرو تراست
از سیسکو
#آکادمی_روزبه
https://www.ciscopress.com/store/zero-trust-architecture-9780137899609
Ciscopress
Zero Trust Architecture | Cisco Press
Today's organizations need a new security model that more effectively adapts to the complexity and risks of modern environments, embraces hybrid workplaces, and protects people, devices, apps, and data wherever they're located. Zero Trust is the first model…
برنامه هایی که امروزه می‌نویسید یا خریداری میکنید باید قابلیتRASPداشته باشند. با استفاده از این قابلیت ؛ سنسور تشخیص و بلاک حمله به برنامه، درون خود آن برنامه نهاده می‌شود. این امر برای SOC هم مزیت دارد چرا که لاگ در سطح برنامه کاربردی از داخل برنامه در دسترس میباشد
Runtime Application Self-Protection (RASP)
#آکادمی_روزبه
https://www.crowdstrike.com/cybersecurity-101/cloud-security/runtime-application-self-protection-rasp/
Runtime Application Self-Protection (RASP)
#آکادمی_روزبه
https://www.crowdstrike.com/cybersecurity-101/cloud-security/runtime-application-self-protection-rasp/
crowdstrike.com
Runtime Application Self-Protection (RASP) – CrowdStrike
Runtime Application Self-Protection (RASP) is a security technology that can detect attacks on software applications in real-time.
بار دیگر تجربه ای از اینکه هرچیزی را در سایت ویروس توتال آپلود نکنید
نشت ایمیل و نام افراد حوزه نظامی و جاسوسی بدلیل آپلود یک فایل توسط کارمند گوگل
#آکادمی_روزبه
https://therecord.media/virustotal-user-email-addresses-leaked-google-military-intelligence
نشت ایمیل و نام افراد حوزه نظامی و جاسوسی بدلیل آپلود یک فایل توسط کارمند گوگل
#آکادمی_روزبه
https://therecord.media/virustotal-user-email-addresses-leaked-google-military-intelligence
therecord.media
Google exposes intelligence and defense employee names in VirusTotal leak
A list of 5,600 of the malware repository’s customers was uploaded, accidentally, to the platform itself, Der Spiegel reported. Google said it took the document down within an hour.
Extraordinary SOC SIEM Use Cases.pdf
494.3 KB
یوزکیس هایی برای SOC
فریم ورکی از گوگل برای امنیت سیستم های هوش مصنوعی
#آکادمی_روزبه
https://blog.google/technology/safety-security/introducing-googles-secure-ai-framework/
#آکادمی_روزبه
https://blog.google/technology/safety-security/introducing-googles-secure-ai-framework/
Google
Introducing Google’s Secure AI Framework
Today Google released released the Secure AI Framework to help collaboratively secure AI technology.
استانداردی برای تبادل اطلاعات آسیب پذیری ها
نسخه Version 1.5.0 (April 26, 2023)
#آکادمی_روزبه
https://ossf.github.io/osv-schema/
نسخه Version 1.5.0 (April 26, 2023)
#آکادمی_روزبه
https://ossf.github.io/osv-schema/
ossf.github.io
Open Source Vulnerability format - Open Source Vulnerability schema
Open Source Vulnerability schema.
DDexec - a technique to run binaries filelessly and stealthily on Linux using dd to replace the shell with another process
#آکادمی_روزبه
https://hakin9.org/ddexec-a-technique-to-run-binaries-filelessly-and-stealthily-on-linux-using-dd-to-replace-the-shell-with-another-process/ب
#آکادمی_روزبه
https://hakin9.org/ddexec-a-technique-to-run-binaries-filelessly-and-stealthily-on-linux-using-dd-to-replace-the-shell-with-another-process/ب
Hakin9 - IT Security Magazine
404 - Hakin9 - IT Security Magazine