OriginalFileName: hvsifltr.sys.mui
InternalFileName: hvsifltr.sys
Company Name: Microsoft Corporation
FileDescription: Microsoft Defender Application Guard Filter Driver
ProductVersion: 10.0.19041.1
Comments:
LegalCopyright: © Microsoft Corporation. All rights reserved.
LegalTrademarks:
Matched Keyword: [defender]

Suspicious Driver Module: WdNisDrv.sys
Driver FilePath: c:\windows\system32\drivers\wd\wdnisdrv.sys
Driver File Metadata:
ProductName: Microsoft® Windows® Operating System
OriginalFileName: wdnisdrv.sys
InternalFileName: wdnisdrv.sys
Company Name: Microsoft Corporation
FileDescription: Windows Defender Network Stream Filter
ProductVersion: 4.18.2109.6
Comments:
LegalCopyright: © Microsoft Corporation. All rights reserved.
LegalTrademarks:
Matched Keyword: [defender]
...
Find services matching EDR keywords $ .\EDRHunt.exe -s
Find drivers matching EDR keywords $ .\EDRHunt.exe -d
Find registry keys matching EDR keywords $ .\EDRHunt.exe -r
Detections EDR Detections Currently Available Windows Defender Kaspersky Security Symantec Security Crowdstrike Security Mcafee Security Cylance Security Carbon Black SentinelOne FireEye Elastic EDR More to be added soon. Community Would appreciate if you ran EDRHunt on your own deployments and test the detections! Thanks.

Download EDRHunt (https://github.com/FourCoreLabs/EDRHunt)

___________________________
@hacking_Attack
@Hacking_Video

Dark Reading: Attacks/Breaches
Cyber Terrorism Is a Growing Threat & Governments Must Take Action

With its benefits of deniability, relatively low costs, and the ability to attack from anywhere, cyber terrorism will increasingly threaten civilians everywhere.

Dark Reading: Attacks/Breaches
Vulnerability Scanning Triples, Leading to Two-Thirds Fewer Flaws

Companies are scanning more applications for vulnerabilities — and more often.

Dark Reading: Attacks/Breaches
Threat Actors Revive 20-Year-Old Tactic in Microsoft 365 Phishing Attacks

Recent attacks involving so-called "right-to-left override" spoofing aimed at Microsoft 365 users show how attackers sometimes modify and improve old methods to try and stay one step ahead of defenders.

Dark Reading: Attacks/Breaches
Get Started on Continuous Compliance Ahead of PCI DSS v4.0

Here's what vendors can do to prepare in the time remaining before the final release of PCI DSS 4.0 this quarter.

hacking: security in practice
Obscured windows directories

I've been trying to a link or demo for a more advanced method of hiding directories in windows.

the presentation showed a method of overriding the .. within a directory. So when you'd type cd .. the user would be in a new directory instead of traveling back up the directory path. Can't remember if this was in a sans class or some online video.

My Google fu on what to search for ia driving me nuts, and hope someone can help me w a link I'd really appreciate it.

submitted by /u/malbaisee
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
C# MS SQL enumeration and exploitation tool

https://external-preview.redd.it/hh2hxcWyYn3UXlO7xGPuYZ1muKIv3IHZ0LDX9y_87-o.jpg?width=640&crop=smart&auto=webp&s=740102df257c97bb8f4a6945810f5b1f494742ec submitted by /u/IamaCerealKilla
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
why does remcos 1.7 pro edition dosent work ?

why doesn't it work i put my local ip my public ip and a no ip dns and it still dosent work it works of i tried it to me but if i sent it to a friend it dosent work the error

submitted by /u/EnvironmentSad1649
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
How Can Nations Curb Cyberattacks?

https://cdn-images-1.medium.com/max/800/1*QCmM0t_V_E9hfOxxXvA1jg.jpeg
Global agreements plus these 4 tactics are part of the solution

Continue reading on MIT Initiative on the Digital Economy »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
94,000 Bitcoins seized from hackers

Two were arrested in Manhattan for conspiracy to launder crypto that was stolen during the centralized exhange Bitfinex, And so far over…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Empresas de espionaje NSO y QuaDream aprovechan vulnerabilidades del iPhone

https://cdn-images-1.medium.com/max/1642/0*SB4hO57eRhpkIFRD
PUBLICADO EN 8 FEBRERO, 2022POR EHACKING

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Deep Web
How DEEP is the Internet?

https://external-preview.redd.it/R_yYoCjjY33eRmxGtTCdlB-pbuwsZbf54KUPSPW23ow.jpg?width=320&crop=smart&auto=webp&s=981b8748021e4aff3955ff5097ad6b9be1520c5c submitted by /u/Gam3Ad1c
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Kubernetes for pentesters
https://www.reddit.com/r/redteamsec/comments/snyj8y/kubernetes_for_pentesters/

There’s countless article on hacking kubernetes clusters but is there any research or repos on how you can use k8s for pen testing? One idea is using a cluster in which each node is a “person” that has access to a specific machine or to a different machine. I’m open to other ideas regarding the usage of k8s to improve hacking automation submitted by /u/sirlordjax (https://www.reddit.com/user/sirlordjax)
[link] (https://www.reddit.com/r/redteamsec/comments/snyj8y/kubernetes_for_pentesters/) [comments] (https://www.reddit.com/r/redteamsec/comments/snyj8y/kubernetes_for_pentesters/)

___________________________
@hacking_Attack
@Hacking_Video

Dark Reading: Attacks/Breaches
Google Cuts User Account Compromises in Half With Simple Change

The online tech giant auto-enabled two-step verification for more than 150 million users, throwing up steep hurdles against scammers and attackers.