درسی برای همگان
بحث فیمابین تنیبل و مایکروسافت درمورد مشکلات یکی از وصله هایش
نیاز است اولا پیگیر اخبار آسیب پذیری ها بوده و ثانیا فارق از وندور ؛ در این مواقع ما خودمان راهکاری داشته باشیم
#آکادمی_روزبه
https://socradar.io/critical-microsoft-power-platform-vulnerability-proactive-security-methods-to-prevent-exploitation/
بحث فیمابین تنیبل و مایکروسافت درمورد مشکلات یکی از وصله هایش
نیاز است اولا پیگیر اخبار آسیب پذیری ها بوده و ثانیا فارق از وندور ؛ در این مواقع ما خودمان راهکاری داشته باشیم
#آکادمی_روزبه
https://socradar.io/critical-microsoft-power-platform-vulnerability-proactive-security-methods-to-prevent-exploitation/
SOCRadar® Cyber Intelligence Inc.
Critical Microsoft Power Platform Vulnerability: Proactive Security Methods to Prevent Exploitation - SOCRadar® Cyber Intelligence…
Microsoft fixed a critical vulnerability in its Power Platform after facing criticism for the delayed response. Tenable reported the vulnerability to
کمکهایی که ابزارهایی چون Chat-GPT به تیمهای قرمز و آبی دارند
#آکادمی_روزبه
https://www.csoonline.com/article/648266/how-llms-are-making-red-and-blue-teams-more-efficient.html
#آکادمی_روزبه
https://www.csoonline.com/article/648266/how-llms-are-making-red-and-blue-teams-more-efficient.html
CSO Online
How LLMs are making red and blue teams more efficient
Cybersecurity experts have incorporated ChatGPT-like tools into their work, and they use them for tasks from source-code analysis to identifying vulnerabilities.
۱۱ ابزار ویندوز که علیه شما بکار گرفته میشوند
#آکادمی_روزبه
https://thehackernews.com/2023/08/lolbas-in-wild-11-living-off-land.html?m=1
#آکادمی_روزبه
https://thehackernews.com/2023/08/lolbas-in-wild-11-living-off-land.html?m=1
لینوکسی آماده برای امور فارنزیک
#آکادمی_روزبه
https://medium.com/nerd-for-tech/csi-linux-a-new-linux-distribution-for-cyber-and-osint-investigation-3d9498fac6aa
نسخه کاستومایز شده :
https://github.com/riotsecurity/csil-mod
#آکادمی_روزبه
https://medium.com/nerd-for-tech/csi-linux-a-new-linux-distribution-for-cyber-and-osint-investigation-3d9498fac6aa
نسخه کاستومایز شده :
https://github.com/riotsecurity/csil-mod
Medium
CSI Linux: A New Linux Distribution For Cyber and OSINT Investigation
A new cyber investigation platform has been released which is called CSI Linux.
بررسی کپی های بدافزاری از ChatGPT
#آکادمی_روزبه
https://cybersecuritynews-com.cdn.ampproject.org/c/s/cybersecuritynews.com/creating-chatgpt-clones/?amp
#آکادمی_روزبه
https://cybersecuritynews-com.cdn.ampproject.org/c/s/cybersecuritynews.com/creating-chatgpt-clones/?amp
Cyber Security News
Hackers are Creating ChatGPT Clones to Launch Malware and Phishing Attacks
Generative AI's ChatGPT rapid growth is actively reshaping the current threat landscape, as hackers are exploiting it for illicit purposes
بررسی تحلیلی فیچرهای جدید در BloodHound
#آکادمی_روزبه
وبینار در پلتفرم زووم :
۱۷ آگوست
https://ghst.ly/3Om0jDo
https://posts.specterops.io/bloodhound-community-edition-a-new-era-d64689806e90
#آکادمی_روزبه
وبینار در پلتفرم زووم :
۱۷ آگوست
https://ghst.ly/3Om0jDo
https://posts.specterops.io/bloodhound-community-edition-a-new-era-d64689806e90
Zoom
Welcome! You are invited to join a webinar: A Tour of BloodHound Community Edition. After registering, you will receive a confirmation…
Join us for an in-depth look into BloodHound Community Edition (CE), the free and open source version of BloodHound. We'll show you new and improved features such as:
* Greatly simplified setup
* Dramatically higher performing GUI
* API interaction use-cases…
* Greatly simplified setup
* Dramatically higher performing GUI
* API interaction use-cases…
ابزاری جالب برای بصری سازی آنالیز بد افزار
#آکادمی_روزبه
https://www.socinvestigation.com/procdot-a-revolutionary-visual-malware-analysis-tool/
#آکادمی_روزبه
https://www.socinvestigation.com/procdot-a-revolutionary-visual-malware-analysis-tool/
Security Investigation - Be the first to investigate
ProcDOT- A Revolutionary Visual Malware Analysis Tool - Security Investigation
ProcDOT is an interactive malware analysis tool created by Christian Wojner, offered as a free and open-source solution. Its primary objective is to aid malware analysts in comprehending and scrutinizing the actions of malicious software. The name "ProcDOT"…
استفاده از پروفایل های کبالت استرایک برای دور زدن آنتی ویروس و EDR
#آکادمی_روزبه
https://whiteknightlabs.com/2023/05/23/unleashing-the-unseen-harnessing-the-power-of-cobalt-strike-profiles-for-edr-evasion/
#آکادمی_روزبه
https://whiteknightlabs.com/2023/05/23/unleashing-the-unseen-harnessing-the-power-of-cobalt-strike-profiles-for-edr-evasion/
White Knight Labs
Unleashing the Unseen: Harnessing the Power of Cobalt Strike Profiles for EDR Evasion | White Knight Labs
In this blog post, we will go through the importance of each profile's option, and explore the differences between default and customized Malleable C2
NIST CSF 2.0, draft. Overview -1.pdf
4.5 MB
خلاصه ای بر تغییرات NIST CSF
مهلت اعلام نظرات تا ۴ نوامبر
#آکادمی_روزبه
**مستند درفت کامل در چند پست قبل آمده است
مهلت اعلام نظرات تا ۴ نوامبر
#آکادمی_روزبه
**مستند درفت کامل در چند پست قبل آمده است
یک نمونه حمله در اکتیو دایرکتوری
#آکادمی_روزبه
When we have permission to modify an OU, we can modify its gpLink attribute in order to compromise any computer or user that belongs to that OU or its child OUs.
https://labs.withsecure.com/publications/ou-having-a-laugh
#آکادمی_روزبه
When we have permission to modify an OU, we can modify its gpLink attribute in order to compromise any computer or user that belongs to that OU or its child OUs.
https://labs.withsecure.com/publications/ou-having-a-laugh
Withsecure
OU having a laugh?
tl;dr When we have permission to modify an OU, we can modify its gpLink attribute in order to compromise any computer or user that belongs to that OU or its child OUs.