securityaura.bsky.social
GCIH, GCFE | DFIR, Threat Hunting, Detection Engineering | @CuratedIntel DFIR Member SecurityAura.com http://infosec.exchange/@SecurityAura
👤 Joined on 08 August 2023
Followers
Following
Total Posts
@securityaura.bsky.socialCert Central has an unauthenticated API endpoint to return the database as a csv: certcentral[.]org/api/download_csv It used in CCCS' AssembyLine as a blacklist. @securityaura.bsky.social uses it for threat hunting github.com/SecurityAura... Looking forward to see what others do with it.
Show PostAs more companies deploy the Huntress SIEM, we've enjoyed finding the "Door Rattlers"🚪 We see an attacker failing to log in across a number of environments and then eventually succeeding in 1 organization. Stopping attacks at initial access ❤️
Show PostBaby: I have rolled onto my stomach and I don't like this Also baby: wtf are you doing don't roll me onto my back I worked hard to get here and I want to be angry
Show PostI found some time and wrote a blog on the fake reCAPTCHA phishing issue. Wrote a blog on how it all unfolded, the risks of making these tools widely available, and my take on the whole situation. If you're interested, give it a read! 👇 🔗
Show Post