Release Notes
New features

filter language grammar for sequence rules and decommission of sequence policy types Read more
bound fields and sequence aliases Read more
file path manipulation filter ...

Cyber Security Agency of Singapore.

Rules Shared by the Community from 100 Days of YARA 2023 - GitHub - 100DaysofYARA/2023: Rules Shared by the Community from 100 Days of YARA 2023

Sandbox for automated Linux malware analysis. Contribute to danielpoliakov/lisa development by creating an account on GitHub.

In this episode we cover the concept of disassembly items (code, data, unk), and flags then work with bytes and strings.

We also, indirectly, answer the question: "How to tell if one instruction jumps into the middle of another instruction?"

DLL hijacking has been a centerpiece of our operations for many years. During that time we’ve explored the deep caveats which make this technique difficult to actually use in the real world. Our implementations have expanded to include export table cloning…

In this post I’ll show Avast self-defense bypass: how I discovered a new undocumented way to intercept all system calls without a hypervisor and PatchGuard triggered BSOD, and, finally, based on the knowledge gained, implemented a bypass

To supplement the courses in our Cyber Security School, here is a list of the ​common commands in Wireshark.