The concept of multi-valued meta keys - those which can appear multiple times within single sessions - is not a new one, but has become more important and relevant in recent releases due to how other parts of the RSA NetWitness Platform handle them. The most notable of these other parts is the Correlation Server service, previously known as the… Show more
What are LotL tactics? Living-Off-The-Land tactics are those that involve the use of legitimate tools for malicious purposes. This is an old concept but a recent growing trend among threat actors because these types of techniques are very difficult to detect considering that the tools used are whitelisted most of the time. A good list of… Show more
Currently the Log Parser Tool is built for Windows and Mac. Using Wine 4.x you can install and run the Log Parser tool on Linux (Mint and Ubuntu) To install and run the LPT on linux you need to follow the following instructions: Install Wine 4.x Download the Log Parser Tool MSI File Execute the following statement from where the msi… Show more
(to Dave Glover) 3 days ago (Show moreShow less)
In this post we will cover CVE-2019-0604 (https://nvd.nist.gov/vuln/detail/CVE-2019-0604), albeit a somehwhat older vulnerability, it is one that is still being exploited. This post will also go a little further than just the initial exploitation of the Sharepoint server, and use EternalBlue to create a user on a remote endpoint to allow lateral… Show more
Loading...
