bastradamus.bsky.social
All things SecOps, Cloud & Detection Engineering.
👤 Joined on 20 July 2023
Followers
Following
Total Posts
@b41ss.bsky.social@b41ss.bsky.social → @bastradamus.bsky.socialFortMajeure: Authentication Bypass in FortiWeb (CVE-2025-52970)
Show PostSilicon Valley is run by people who genuinely think the world as we know it is going to end in the next few decades. Many also WANT this to happen: they WANT the biological world to be replaced by a new digital world. They WANT "posthumans" to take the place of humans. A 🧵:
Show Post1/ I recently found out that Palo Alto’s WildFire antivirus solution saves its detections in a temporary file. This can be useful when a customer is using Palo Alto’s XDR, but we - as incident responders - don’t have access to their console and instead depend on our own deployed forensic agent.
Show PostThanks for the shoutout and for recognizing our work at DFIR Report in tracking these threats! 🔗Read the article here: www.proofpoint.com/us/blog/thre...
Show Post1/ I talked yesterday about my list of "N-IOCs ...". While reading about malicious Chrome installers, I read this sentence here: "A PowerShell command adds an exclusion path to the %appdata%\Roaming directory so that Windows Defender does not trigger when the malware payload is extracted." [1]
Show Post