RegSetValue @_RegSetValue_

Cyber Security Research Joined January 2018

Tweets

37
Followers

26
Following

342
Likes

417

RegSetValue @_RegSetValue_

3 years ago

Hi, do you recommend any material/courses on botnet tracking and phishing? #cyberintel #csirt #cyber

0 0 0 66 0

RegSetValue @_RegSetValue_

3 years ago

Which tool would be most important for CSIRT and CTI teams? #cyberthreatintel #cti #csirt #incidentresponder #cyberintel

0 0 0 41 0

BleepingComputer @BleepinComputer

3 years ago

Emotet botnet starts blasting malware again after 5 month break - @LawrenceAbrams bleepingcomputer.com/news/security/…

1 108 182 0 12

RegSetValue @_RegSetValue_

3 years ago

What the most indicated course for malware, hunting, threat actor identification, cyber intel, etc? #malware #threathunting #cti #cyberintel

0 1 2 0 0

RegSetValue @_RegSetValue_

3 years ago

Is the default configuration of sysmon-modular better or more current than project SwiftOnSecurity? @olafhartong

1 0 0 0 0

Mick Douglas 🇺🇦🌻 @bettersafetynet

3 years ago

If defense is hard, you're doing it wrongly. Last week I wrapped up an interesting coaching type engagement for a defense crew. I'm not ever going to violate NDAs, but I can share with you some interesting themes. Let's dig in! 1

13 97 383 0 228

Florian Roth ⚡️ @cyb3rops

3 years ago

Every EDR or SIEM should light up like a Christmas tree when someone runs these commands on an endpoint #BlackByte #Ransomware blog.talosintelligence.com/2022/05/the-bl…

10 244 882 0 219

Download Image

Florian Roth ⚡️ @cyb3rops

4 years ago

Let's forget that wiper for a moment and let us extract all the other indicators to write YARA, Sigma rules and file name IOCs Symantec's report symantec-enterprise-blogs.security.com/blogs/threat-i… YARA github.com/Neo23x0/signat… Filename IOCs github.com/Neo23x0/signat… Sigma github.com/SigmaHQ/sigma/…

2 101 247 0 52

Download Image

RegSetValue @_RegSetValue_

4 years ago

CSIRT it does threat hunting? #CSIRT #DFIR #ThreatHunting

0 0 0 0 0

Costin Raiu @craiu

4 years ago

The Turkish USOM (National Cybersecurity Intervention Center) publishes a list of URLs and hostnames to be blocked at ISP level. These are very interesting from a TI point of view - eg. the list included #Pegasus IOCs before they were publicly known: usom.gov.tr/url-list.txt

2 60 207 0 31

Tatyana Shishkova @sh1shk0va

4 years ago

#Joker Android Trojans on Google Play: play.google.com/store/apps/det… Nov 4, 10+ installs play.google.com/store/apps/det… Nov 5, 1+ installs

2 15 27 0 3

Download Image

Tatyana Shishkova @sh1shk0va

4 years ago

#Joker Android Trojan on Google Play: play.google.com/store/apps/det… Nov 9, 10+ installs Payload: Step 1: https://banmama.oss-us-west-1.aliyuncs[.]com/easypdf Step 2: https://banmama.oss-us-west-1.aliyuncs[.]com/belong

0 21 32 0 4

Download Image

RegSetValue @_RegSetValue_

4 years ago

Win32 APIs that identify a keylogger. - SetWindowsHookEx - GetWindowThreatProcessId - CallNextHookEx - GetMessage - GetKeyboardState - GetSystemMetrics - TranslateMessage - GetAsyncKeyState - DispatchMessage #MalwareAnalysis #Malware #Keylogger

0 2 3 0 0

RegSetValue @_RegSetValue_

4 years ago

Win32 APIs hooked to intercept network communication. 😅🤪 #MalwareAnalysis

0 0 0 0 0

Download Image

RegSetValue @_RegSetValue_

4 years ago

Malicious extension for Google Chrome: Type: Trojan Name: Downloader for Instagram Link: chrome.google.com/webstore/detai… Virus Total: virustotal.com/gui/file/3dad0… #trojan #malware

0 0 0 0 0

Download Image

Steve @Northvein

4 years ago

@cyb3rops @GossiTheDog

4 10 102 0 2

Download Image

Florian Roth ⚡️ @cyb3rops

4 years ago

#XDR

14 92 563 0 17

Download Image

Global Cyber Threat Intel @cipherstorm

4 years ago

Winshark: github.com/airbus-cert/Wi… tech-wreckblog.blogspot.com/2021/09/winsha…

0 2 4 0 0

Germán Fernández @1ZRR4H

4 years ago

🚨 #Mirai #Botnet 🤖 está lanzando un ataque masivo vía CVE-2021-38647 #OMIGOD (RCE), aunque aún no descubro si su exploit "alternativo" funciona😄 lo están intentando!! IP origen: 60.161.194.195 🇨🇳 Payload: /212.192.241.72/lolol.sh --dport 5896 -j DROP 😏