Cyber Threat Intelligence

On my previous post i’ve explained about the openVAS, If you’re not aware of an openVAS tool kindly check there. Here i’m going to share about the installation process of OpenVAS. Let’s get started Before installing any software it’s crucial to decide how to install the software .We always consider…

Alienvault OTX, dünya çapında 100.000’den fazla katılımcının katkılarıyla siber tehdit istihbarat paylaşımı ve analizi sunan ağdır. OTX ile en son tehdit istihbaratı verilerine, trendlere ve tekniklere erişmeye imkan vermektedir. Alienvault OTX’e giriş yaptıktan sonra API Integration butonunu tıklayalım. Sonra sağ ekranda karşımıza çıkan OTX keyi kopyalayalım.

Attribution of Advanced Persistent Threats: How to Identify the Actors Behind Cyber-Espionage by Timo Steffens is a useful, informative resource on APT group attribution, covering the process, reasons, and considerations. It includes plenty of examples. My notes follow. This page contains one or more affiliate links. …

TL;DR: Determine what purple culture means to you then develop a plan. RSAC 2022 Dark Arts Village — YouTube Video Introduction A friend asked if I would give a talk, but the caveat was that it must be recorded in about a week. I’ve spent the majority of my time the…

Author: Sigma| S2W TALON Last Modified: 2022.05.30. About Raidforums.com Raidforums.com was launched by Omnipotent on January 1, 2015, and was operated for about seven years until February 2022. In this forum, user account information on specific corporate-related websites, personal information by country, VPN/RDP credentials, and ransomware-related leakage information were mainly sold. Raidforums…

This is a walkthrough for the Malware Traffic Analysis packet capture exercise called BURNINCANDLE. The exercise requires the use of Wireshark and OSINT for enrichment purposes. It’s been months since I’ve done a packet capture analysis. I’ve enjoyed diving into packet captures again! Below, we are provided with the domain…

In honor of mental health awareness month and because it is such an important topic in the cyber threat intelligence (CTI) field, I’ve decided to write a short blog post on the topic. In it, I’ll outline some of the cultural realities and provide some emotional intelligence (EIQ) resources towards…

The Unified Kill Chain is a combination of the Cyber Kill Chain and MITRE ATT&CK tactics. It’s meant to be an updated version of the Cyber Kill Chain to better fit modern attacks. Attack Phases (Tactics) The Unified Kill Chain includes 18 phases or tactics, which are the steps a cyberattack may progress…