Discover and read the best of Twitter Threads about #Hunting

Most recents (5)

Wait is over .. Read final part 2 which is focused on aws log data ingestion , #hunting and investigation of Capital one breach TTPs in #AzureSentinel techcommunity.microsoft.com/t5/Azure-Senti…
T1078: Privileged role attached to Instance.
#AzureSentinel #MITRE #AWS #threathunting
github.com/Azure/Azure-Se…
T1078 : Suspicious credential token access of valid IAM Roles
#AzureSentinel #MITRE #AWS #threathunting
github.com/Azure/Azure-Se…
Read 5 tweets
Someone's trying to backdoor "hexcalc.exe" from GitHub and not doing a great job. Here's a quick exploration of the VT tester's 6 files, the corresponding PDB anomalies, PS1 & Cobalt Strike shellcode, and Yara #hunting rules.

Thread 1/n
The first file tested by the VT account is hexcalc.exe
0433aeff0ed2cdf5776856f2c37be975
PDB: D:\codes\WinHexCalc\Release\hexcalc.pdb

This led me to search for the original (shady) project from Github: github.com/azlan/WinHexCa…
and this indeed contains this initial hexcalc.exe

2/n
They attempt to backdoor the file 4 different times with PS1 shellcode, uploading all to VT:
ae73fe66415edbfd5669ab567793536b
d7c7c9ef1c1725f497ef5feaa654fc2e
7feaa6255459dcba370252e8905a9a4a
ddc442bd5e5d157011ae79c48ee2189a
PDB: F:\Devel\WinHexCalc-master\Release\hexcalc.pdb
3/n
Read 9 tweets
Stoked to announce @ZooKeys_Journal published our @BatumiRaptors data paper! It explains how our #citizenscience project monitors the autumn #migration of >1.000.000 #raptors in the Eastern Black Sea Flyway, and how to use our #openaccess data @GBIF/@NLBIF! - 1/n

#ornithology
Many #raptors migrate primarily by thermal #soaring. To do so they travel by day and avoid high mtns and open sea. This leads to spectacular raptor aggregations in overland #flyways. One of the world´s largest raptor flyways occurs along the eastern Black Sea coast in SW Georgia.
The Eastern Black Sea Flyway has its narrowest point just north of #Batumi, where the coast and Lesser Caucasus form a clear "bottleneck". The mtns are not extremely high but present a significant barrier for #raptors on #migration due to low and dense cloud cover. @BatumiRaptors
Read 21 tweets
One of the reasons we do not want the #BRITISH in #Africa is because of the rubbish about we, the Natives. We do not want you here, even if you 'spoke to our 'leaders''... peddling your #bigwhitelies to a population for pity. You know NOTHING ABOUT us..
#propaganda
#LiesLiesLies
Nor do you make an 'effort' to ASK - instead, with a mule-headed white stubborness, you say we know nothing. Well, let us educate you 101 @BBCBreaking and @theresa_may. The picture you used - those elephants were NAPPING - SLEEPING 😂
#thebigwhitelie
#thebigwhiteconservationlie
Because the Brits are so QUICK to judge the 'AFRICAN' as 'backward' and use this propaganda that we're a 'wild and wicked bunch of helpless idiots' who cannot take care of their own wild life when the truth is - the poaching trade is controlled by CAUCASIANS and called #hunting
Read 4 tweets

Related hashtags

Did Thread Reader help you today?

Support us! We are indie developers!


This site is made by just three indie developers on a laptop doing marketing, support and development! Read more about the story.

Become a Premium Member ($3.00/month or $30.00/year) and get exclusive features!

Become Premium

Too expensive? Make a small donation by buying us coffee ($5) or help with server cost ($10)

Donate via Paypal Become our Patreon

Thank you for your support!