OSSEM @OSSEM_Project
Open Source Security Event Metadata ! Data engineers! #ThreatHunting @OTR_Community github.com/OTRF/OSSEM https://ossemproject.com/intro Joined September 2019-
Tweets31
-
Followers2K
-
Following7
-
Likes41
@olafhartong @MITREattack @FDezeure @redcanary @mvelazco @jsecurity101 Thank you so much for sharing the @OSSEM_Project Detection Model 🙏 and all your contributions to it! Very happy to see the project helping others in the community 🌎🎊 github.com/OTRF/OSSEM-DM/…
@OSSEM_Project @Cyb3rPandaH Will be coming on Windows soon ;)
🚀 Any NEW fields on the schemas for #SysmonForLinux events compared to Windows🤔? @Cyb3rPandaH used our #Sysmon for Windows & Linux data dictionaries in a python 🐍 script to answer that😎 ✅ ParentUser (ProcessCreate) ✅ User (EID 5,9,11) 🖇️ Script: github.com/OTRF/OSSEM-DD/…
🚀 Any NEW fields on the schemas for #SysmonForLinux events compared to Windows🤔? @Cyb3rPandaH used our #Sysmon for Windows & Linux data dictionaries in a python 🐍 script to answer that😎 ✅ ParentUser (ProcessCreate) ✅ User (EID 5,9,11) 🖇️ Script: github.com/OTRF/OSSEM-DD/… https://t.co/5SC2ozQIrB
Today, Microsoft is open sourcing Cloud Katana, a cloud-native serverless application built on the top of Azure Functions to assess security controls in the cloud and hybrid cloud environments. Read about the design principles and learn how to deploy: msft.it/6011n46MT
🚨 We decided to re-brand Mordor to @SecDatasets 😈 We’ll cover new types of datasets to extend its application 💜 more coming soon.. 🍻 Help us build the largest library of datasets for the InfoSec community! 🚀 Site: securitydatasets.com/introduction.h… Repo: github.com/OTRF/Security-…
🚨 New version of the Windows Security Events connector from #AzureSentinel reached public preview Looking for a way to test & filter the collection of event logs via XPath queries? I got you! 💜🍻 @MSThreatProtect #MSTIC @OTR_Community @OSSEM_Project techcommunity.microsoft.com/t5/azure-senti…
🚨 In less than 24h 😉, we are sharing telemetry ( #Sysmon, Security & System) through the @Mordor_Project to help everyone 🌎 expedite the validation process of detection rules! @Cyb3rPandaH #CobaltStrike 🗒️Metadata: mordordatasets.com/notebooks/smal… 😈Dataset: raw.githubusercontent.com/OTRF/mordor/ma…
🚨 In less than 24h 😉, we are sharing telemetry ( #Sysmon, Security & System) through the @Mordor_Project to help everyone 🌎 expedite the validation process of detection rules! @Cyb3rPandaH #CobaltStrike 🗒️Metadata: mordordatasets.com/notebooks/smal… 😈Dataset: raw.githubusercontent.com/OTRF/mordor/ma… https://t.co/mScFav7AqP
What started w/ talks at ATT&CKcon & analysis of event logs, We're happy to see @Cyb3rPandaH & @Cyb3rWard0g initial research helping ATT&CK users improve their data collection strategies. Join us to collab 🍻 @OTR_Community 🎙️ bit.ly/OTRDiscord 🛡️ github.com/OTRF/OSSEM-DM/…
What started w/ talks at ATT&CKcon & analysis of event logs, We're happy to see @Cyb3rPandaH & @Cyb3rWard0g initial research helping ATT&CK users improve their data collection strategies. Join us to collab 🍻 @OTR_Community 🎙️ bit.ly/OTRDiscord 🛡️ github.com/OTRF/OSSEM-DM/…
Sharing some data samples (PCAP & WinEvents) to validate detection of lateral movement via remote scheduled task creation & update 🍻 @OTR_Community 1⃣ Creation: mordordatasets.com/notebooks/smal… 2⃣ Update: mordordatasets.com/notebooks/smal… @HunterPlaybook Library Doc: github.com/OTRF/ThreatHun…
Sharing some data samples (PCAP & WinEvents) to validate detection of lateral movement via remote scheduled task creation & update 🍻 @OTR_Community 1⃣ Creation: mordordatasets.com/notebooks/smal… 2⃣ Update: mordordatasets.com/notebooks/smal… @HunterPlaybook Library Doc: github.com/OTRF/ThreatHun…
💥😱 @tiraniddo added "named pipe RPC client transport" to NtObjectManager 🔥 Thank you very much James for all your work 👏! I'll create PS scripts to cover a few scenarios 🍻 (Img 4) If anyone would like to help me, let me know 😉 @OTR_Community github.com/Cyb3rWard0g/Wi…
Looking forward to it! 🍻 Let's talk about some of the steps taken before sharing a dataset with the community 💜
Looking forward to it! 🍻 Let's talk about some of the steps taken before sharing a dataset with the community 💜
Thinking about contributing to an os project during the holidays? 😉The @OTR_Community have updated our Detection Model 1⃣Contribute security events to @MITREattack data sources github.com/OTRF/OSSEM-DM/… 2⃣Provide feedback github.com/OTRF/OSSEM-DM/… 3⃣Have fun ossemproject.com/notebooks/dm/a…
#Eko2020 | @BlueSpaceSec | Roberto y Jose Luis Rodriguez: Open Threat Research (Keynote) "Open Threat Research: Compartiendo herramientas Open Source con el mundo para el desarrollo de detecciones desde casa", una charla de @Cyb3rWard0g y @Cyb3rPandaH. youtube.com/watch?v=6-UVaP…
🚨 New version of our "attackcti" Python 🐍 library to query @MITREattack in STIX format via their public TAXII server has been released! 1⃣ ICS ATT&CK Integration ✅ 2⃣ Basic Notebook to explore ICS Content ✅ 📔 Binder: mybinder.org/v2/gh/OTRF/ATT… 📦Repo: github.com/OTRF/ATTACK-Py…
In their #THIRSummit talk, @Cyb3rPandaH & @jamieantisocial illustrates how we can avoid the typical cat and mouse games by modeling the data sources defined in ATT&CK to recognize, track, and even predict the malicious scent of adversaries. Watch it now: youtu.be/eKeydMrXsOE
Thank you @jaredhaight 😊🙏 With the latest updates to @MITREattack data sources by @Cyb3rPandaH , we are translating that doc to YAML files to create additional documentation and hopefully get contributions from the InfoSec Community 😊 github.com/OTRF/OSSEM-DM/…
Formalizing the mapping of security events to the @MITREattack data source objects concepts 🍻 We would love to hear your feedback and see your contributions to this community-led effort!! 💜 Thank you @Cyb3rPandaH 💜 Blog: medium.com/threat-hunters…
🙏So happy to see our initial data modeling concepts applied to enhance @MITREattack . This is a more practical & less subjective approach to map event logs ➡️ att&ck data sources. We hope this helps the community to improve their data collection strategy. Thanks @Cyb3rPandaH 🍻
🙏So happy to see our initial data modeling concepts applied to enhance @MITREattack . This is a more practical & less subjective approach to map event logs ➡️ att&ck data sources. We hope this helps the community to improve their data collection strategy. Thanks @Cyb3rPandaH 🍻
Coinciding with @jamieantisocial's and his #ThreatHuntingSummit talk, we've just released part 1 of a blog series by ATT&CK team member @Cyb3rPandaH on a proposed method of enhancing an often overlooked part of ATT&CK, data sources. Check it out at medium.com/mitre-attack/d….
If you are a student or new to the InfoSec community and would like to attend the #ThreatHuntingSummit 2020 @sansforensics virtually😃, fill out this form by 3 pm (EST) today to win a guest pass (Only one available) Thank you @Cyb3rPandaH 🙏💜 bit.ly/THS20GuestPass
Katie Nickels @likethecoins
55K Followers 3K Following Director of Intel at @redcanary. SANS Certified Instructor for FOR578: CTI. Senior Fellow at @CyberStatecraft. She/her. Mastodon: @[email protected]
Nasreddine Benchercha... @nas_bench
11K Followers 1K Following Detection @Splunk & @cisco | previously @nextronsystems | @sigma_hq & @magicswordio maintainer | Eternal Learner
Christopher Peacock @SecurePeacock
7K Followers 2K Following #PurpleTeam | Ex @RaytheonTech MSSP, @SCYTHE_IO, & @GD_OTS | Taught at BlackHat & DEFCON | #100DaysofSigma | Keep exploring, keep learning, and stay curious
J⩜⃝mie Williams @jamieantisocial
10K Followers 7K Following threats && stuff || #UNC1799 forever 🤘|| @DistrictHeather ♥️ + 🍷 **𝚅𝚒𝚎𝚠𝚜 𝚎𝚡𝚙𝚛𝚎𝚜𝚜𝚎𝚍 𝚊𝚛𝚎 𝚖𝚈 օ𝚠𝚗**
The Haag™ @M_haggis
9K Followers 2K Following Threat Researcher | Co-Host of Atomics on a Friday | LOLDrivers & Atomic Red Team Maintainer | I'm Everywhere and Nowhere - BSG.
Ryan "Chaps" Chapman @rj_chap
8K Followers 3K Following DFIR & malware analyst. @sansforensics FOR528 Author & FOR610 Instructor. @CactusCon crew. Husband & father. Comments = own.
Ian Hellen @ianhellen
2K Followers 216 Following Principal Dev, Microsoft Threat Intelligence Center Author/maintainer of #msticpy and #msticnb Python packages for CyberSec.
xjftapiax @xjftapiax
15 Followers 115 Following Husband, Father, Passionate about all things Digital, Cloud and Cyber Security, Vynil Lover, Vynil Collector, and of course Linux User & VMware User !!
Ethan Aviel Leon @EthanAvielleon
7 Followers 469 Following 🛡️ Freelance Pentester & Security Consultant | 🔍 Bug Bounty Hunter | 🏅 HOF: Netflix, Mastercard, United Nation, OLX, Under Armour | 🎥 YouTuber |✍️ Blogger |
Gowtham Selvaraj 🇮... @GowthamSelvar19
116 Followers 2K Following Cyber Security Engineer @nike*, Cyber security Consultant - @EY_consulting Cyber Security Analyst - @Rockstargames, Senior Security Analyst - @Capgemini
Gheorghiu Alexandru @GheorghiuAlex7
0 Followers 38 Following
Xygeni @xygeni
193 Followers 315 Following Secure your Software Development and Delivery. #Cybersecurity #ASPM #OSS #DevSecOps #AppSec
GD @GD_pete49026964
0 Followers 22 Following
VEY SREYPICH @Sreypich999
6 Followers 366 Following
I. B. Baias @iBaias
37 Followers 153 Following
Nirvaan_x @NirvaanX
1 Followers 30 Following
amir @Amir__Alibeigi
0 Followers 55 Following
Orlando Lasso @olasso
142 Followers 468 Following
tedwjones @tedwjones
33 Followers 337 Following
Khushiswaraditya Ghid... @K_Swaraditya
2 Followers 46 Following
Leonel Marin @LeonelM41262107
29 Followers 244 Following Mis gustos son el café negro sin azúcar, la tranquilidad del campo y la Ciberseguridad
Goutham Rock star @harisad_7
45 Followers 895 Following
Falcon @F8i8495312
37 Followers 650 Following
Ruturaj Humbe @ruturaj_humbe_
29 Followers 680 Following
Jason @jasonkasih
0 Followers 499 Following
Shina Mashiro @ShiinaaM
403 Followers 3K Following Microsoft Sentinel Enthusiast | 4n6 Investigator | Cloud Security | 🇮🇩 S.Kom
𝓙𝓪𝓬𝓴2 @2RunJack2
1K Followers 3K Following #ThreatIntel Researcher @S2W_Official @TALON_INTEL Main Author of Threat Intel Report 'Campaign DOKKAEBI : Documents of Korean and Evil Binary' / Formerly FSI
Jux Mux @UxTruckLuck
59 Followers 166 Following if the rule you followed brought you to this, of what use was the rule?
csirtiocs @csirtiocs
0 Followers 56 Following
Aluor Daniel Nyamor @Okonkwo4Reel
59 Followers 234 Following Just your friendly local Barkeep and Cybersecurity Researcher.
clearance @clearance44941
1 Followers 192 Following
Monray Van huyssteen @MVHCyB3R
4 Followers 54 Following
Lenslok @LensLok
13 Followers 609 Following
Thomas Verheyden @ThomasVrhydn
544 Followers 672 Following Freelance Security Architect | blogs: https://t.co/txmlxWpzch Microsoft MVP
csgaee @csgaee
157 Followers 2K Following Malware researcher @EG_CERT | threat intelligence @nowhere_reallll
AJ King @ajkingio
160 Followers 728 Following Threat Research Manager @splunk / @SnapAttackhq now part of @Splunk now part of @Cisco / Detection Engineering / Dad
Keshava Das @KeshavD17925295
12 Followers 427 Following
Mattias Borg @MattiasBorg82
890 Followers 711 Following Microsoft Security MVP (SIEM & XDR) - Threat Hunting - CEH - Instructor (cyber security), Speaker | Happy Hunting #HappyHunting
alongkot @alongkot
1 Followers 74 Following
João Victor @JoaoAlves07070
67 Followers 2K Following Pentester | Red Team | OSINT | Autodidata | Polimata
Vxshellew @vxshellew
551 Followers 4K Following
b_quiet @next_trumpet_gr
7 Followers 181 Following
𝚝𝚑𝚎𝚜𝚎�... @T_0_r_nado
65 Followers 5K Following
Neil @Sec_Neil
91 Followers 797 Following I am an Information Security researcher. I fell in love with anything speaks. Malware analysis is my passion.
Cyb3rCuy @Cyb3rCuy
77 Followers 9 Following
ThreatHuntersForge @HuntersForge
2K Followers 2 Following Data Science, Threat Hunting & Open Source Projects 🍻 Founders: @Cyb3rward0g @Cyb3rPandaH
THE-HELK @THE_HELK
7K Followers 46 Following #ThreatHunting #BigDataAnalytics #MachineLearning Author: @Cyb3rWard0g
Security Datasets @SecDatasets
2K Followers 5 Following Contributing datasets, from different platforms, to the InfoSec community to expedite data analysis and threat research! https://t.co/j62Xx21lEc
ThreatHunter-Playbook @HunterPlaybook
6K Followers 7 Following I document #ThreatHunting playbooks in the form of #jupyter notebooks and share them with the world! https://t.co/djKSwSGXgA @Cyb3rWard0g
Jose Rodriguez 🇵�... @Cyb3rPandaH
6K Followers 342 Following #CyberDefense #AI #DataScience @GeorgeMasonU @NOVAcommcollege @pucp
Roberto Rodriguez �... @Cyb3rWard0g
26K Followers 628 Following AI Security Researcher @nvidia | Prev: @Microsoft | Founder of the @OTR_CommunityTrends for United States
You might like
