Today we will see how we can identify malware urls / indicators of compromise from malware and the malware sample we will use is: https://bazaar.abuse.ch/sample/41f76926477c7f8759900567ced4e5e1f9057e40d2a151badc873d23f372997e/ Stage 1 - comprobante_s...
Introduction Kerberos is an authentication protocol that superseded NTLM with the release of Windows 2000 (technically…) Technically?! Well… It's complicated 😅 Long story short - NTLM is still alive and kicking and… it might still be the fall-back s...
Wazuh comes with a couple of external integrations by default - among them are Slack, Virustotal, shuffle, and Pagerduty. The one that I missed was Discord - so I decided to build it. Now you can forward your all or specific alerts to a discord chann...
In this article, we will go through the necessary steps to add installation disk images (iso and img files) to your proxmox server so that you can use them as installation media for virtual machines and lxc/lxd containers. First, make sure that you h...
Overview In this post I will guide you through the installation of Elasticsearch, Kibana and Winlogbeat. We will walk through each step on Amazon Linux 2 (but the concept is similar for other Linux distributions). In part 2 we will see how we can use...
Imagine you are working on a penetration test and you want to know how packets are traveling through the network. You want to identify routers and potentially other subnets, what tool do you use? traceroute to the rescue! Summary traceroute and its w...
Welcome to another episode of, Defender is blocking me and I don't like it. Your therapist says - Have you thought about AMSI, maybe that one is the problem? If you don't exactly know what these words mean but want to understand it better and are try...