Axel @botlabsDev

Threat Research. I build stuff to hunt stuff. (Batteries not included) | side project https://t.co/kxOluLpXG2 ioc.one Deutschland Joined September 2019

Tweets

66
Followers

271
Following

139
Likes

894

Axel @botlabsDev

7 months ago

Awesome team! Can recommend to check it out!

DCSO CyTec @DCSO_CyTec

7 months ago

Awesome team! Can recommend to check it out!

0 2 3 647 1

0 0 0 100 0

ioc.one @ioc_one_

a year ago

#ProgressUpdate The project now uses a staging system🥳. This prevents me from debugging in production and can be considered an invest into stability! The cat likes it! #ioc_one #cti

0 1 1 374 0

Download Image

Axel @botlabsDev

a year ago

Ready for the day. @pivot_con #pivotcon24

1 1 15 631 0

Download Image

The recent #XZBackdoor caused a lot of agitation in the Open Source Community. Today we publish a #ComprehensiveOverview what happened and how to check your system for affection. Read more at medium.com/@DCSO_CyTec/fb… #DCSO #DRIF #Cyber

1 5 13 1K 0

Axel @botlabsDev

2 years ago

I converted the new threat actor naming taxonomy from Microsoft (@MsftSecIntel) to json in case someone else needs the data in a machine readable format. gist.github.com/botlabsDev/e23… #threatintel #research #apt

John Lambert @JohnLaTwC

2 years ago

15 32 94 80K 24

Download Image

1 5 17 4K 3

Axel @botlabsDev

3 years ago

#CLT2023 Thanks for listening 😊 See you next year @clt_news

0 0 4 370 0

Axel @botlabsDev

3 years ago

Working with @jaydinbas on our next #ShortAndMalicious post was a lot of fun as always 😁 Check it out below! #PikaBot #iPikaBot #DCSO #CyTec

DCSO CyTec @DCSO_CyTec

3 years ago

Working with @jaydinbas on our next #ShortAndMalicious post was a lot of fun as always 😁 Check it out below! #PikaBot #iPikaBot #DCSO #CyTec

0 4 13 2K 0

0 0 2 496 0

Axel @botlabsDev

3 years ago

Ok. Let's call it a day. The "new future" wants me to take a break.

0 0 1 290 0

Download Image

DCSO CyTec @DCSO_CyTec

3 years ago

Check out our new blog post! This time we analyse and follow HZ Rat. A previously undocumented malware delivered through malicious documents and self extracting archives. We tracked the campaign and identified a lot of C2 servers. medium.com/@DCSO_CyTec/50… #HZRat #DCSO #CyTec

0 4 8 0 1

DCSO CyTec @DCSO_CyTec

3 years ago

We took a quick look at a new stealer utilizing polyglot files. Check it out. #CyTec #ShortAndMalicious #StrelaStealer ➡️ medium.com/@DCSO_CyTec/sh…

0 6 9 0 1

Axel @botlabsDev

3 years ago

Gooooood morning Berlin! Ready for @FIRSTdotOrg #CTI #firstcti #threatintel

0 0 12 0 1

Download Image

Cooper @Ministraitor

3 years ago

Back to full talks with Axel Wauer @botlabsDev who presents HZ Rat Goes China: Following The Tail Of An Unknown Backdoor #CTI-Summit

0 3 10 0 0

Download Image

DCSO CyTec @DCSO_CyTec

3 years ago

Part 2: Tracking down Maggie @DCSO_de's Incident Response Team (DIRT) provides insights on how to detect the novel MSSQL malware “Maggie” in your environment. #DFIR #threat_hunting #sigma #yara #mssql medium.com/@DCSO_CyTec/tr…

0 4 8 0 2

DCSO CyTec @DCSO_CyTec

3 years ago

MSSQL, meet Maggie! In our latest blog post, we analyze 'Maggie', a novel backdoor for MSSQL servers, implemented as an Extended Stored Procedure and only controlled using SQL queries. medium.com/@DCSO_CyTec/89…

0 10 21 0 0

Axel @botlabsDev

3 years ago

Thanks again @brucon for this awesome conference. I really enjoyed every single talk ❤️ #BruCon #BruCon0x0E 🍻

0 0 2 0 0

Download Image

Axel @botlabsDev

3 years ago

Historical IP to ASN Mapper. The script is slow and more a PoC. I just put it here if someone else needs it. #threathunting #ASN gist.github.com/botlabsDev/60b…

0 0 2 0 0

DCSO CyTec @DCSO_CyTec

3 years ago

Today we published “404 — File still found”, where we can confirm #SideWinder attribution and established even more relations between samples. medium.com/@DCSO_CyTec/40…