NEW BLOG: How works Microsoft Defender Threat Intelligence / Defender TI – and what is the difference between free and paid

Included in the blog is the Sentinel TI feed integration and UI experience in Defender 365 which is recently announced.

https://jeffreyappel.nl/how-works-microsoft-defender-threat-intelligence-defender-ti-and-what-is-the-difference-between-free-and-paid/
🗣JeffreyAppel7


🎖@malwr

I created a GitHub repo for learning application security from scratch. It's perfect for beginners and includes a comprehensive list of reference links. But it's not complete yet! Contributors are welcome to add more details. https://github.com/Anof-cyber/Application-Security
🗣_r_netsec


🎖@malwr

#Malware_analysis
1. Malware Analysis Course at Hack Space Con 2023
https://github.com/archcloudlabs/HackSpaceCon_Malware_Analysis_Course
2. Privacy-invasive/Clicker Android Adware
https://www.mcafee.com/blogs/other-blogs/mcafee-labs/goldoson-privacy-invasive-and-clicker-android-adware-found-in-popular-apps-in-south-korea
3. BabLock/Rorschach Ransomware
https://www.trendmicro.com/en_us/research/23/d/an-analysis-of-the-bablock-ransomware.html
🗣akaclandestine


🎖@malwr

Enterprise DevSecOps Strategy Guide
Source: US DoD
Download Link: https://dodcio.defense.gov/Portals/0/Documents/Library/DoD%20Enterprise%20DevSecOps%20Strategy%20Guide_DoD-CIO_20211019.pdf
For more unique resources and tools for the cyber community, please visit:
https://cyberstartupobservatory.com/cyber-startup-observatory-community/
#CyberSecurity #InfoSec #InformationSecurity
🗣JMonteagudoE


🎖@malwr

Ghidra Setup Guide for World of Warcraft 4.1.0.13850
🗣LifeIsACurse

Took the time to also create a Ghidra Setup Guide for World of Warcraft 4.1.0.13850

This was a PTR version compiled for MacOS x86 during Cataclysm.

A lot closer to my targeted 3.3.5a.12340 and for another OS, but still a lot of info which can be mined from this one.

The video not only shows how to set up the Ghidra repository, but also how to correct some of the missing struct definitions in order to improve the decompilation output.

You can download a copy of my repository by following the link in the pinned post on the video - a tutorial video how to import local Ghidra projects (or exporting them yourself) can be found on that post as well.

Maybe there are some interesting tidbits for you - happy reversing :)
👤LifeIsACurse


🎖@malwr

Getting Started with Windows Malware Development
🗣digicat

Thanks for sharing. Very interesting talk on malware development.
👤handroid2049


🎖@malwr

Uncovering CVE-2022-37985: A Unique Information Disclosure Vulnerability in Windows Graphics Component - discovered a native network channel that could be utilized to exfiltrate the leaked memory data - we set the Filename field to start with “\??\UNC\172.16.96.***@8888\”, which directs to a WebDAV
🗣digicat

Signature opportunity for the Yara will be UNC named paths in docx with EMP signatures
👤digicat


🎖@malwr

CTI researcher @BushidoToken looks at a financially motivated Kenyan threat actor. GreenMwizi set up 12 fake Booking[.]com Twitter accounts targeting users who make public complaints, the aim being to socially engineer them into sending funds via Remitly. https://blog.bushidotoken.net/2023/05/greenmwizi-kenyan-scamming-campaign.html
🗣virusbtn


🎖@malwr