Reveals APTs with one easy application! | Artificial amateurs, aren't at all amazing // Analytically, I assault, animate things
Dec 3, 2020 • 20 tweets • 5 min read
Thinking more on my snarky response to recent publicity surrounded alleged targeting of the COVID-19 vaccine cold chain,¹ I wanted to more positively explain some errors 1/n
__
¹ securityintelligence.com/posts/ibm-unco…
I don't have a blog or presume that anyone would be interested enough to read it on the regular, so please indulge me with a dreaded Tweet thread 🙏🏻 Please note I don't want to point the finger at the authors, who were researching as part of their job 2/n
Sep 20, 2019 • 10 tweets • 6 min read
There are several #infosec data "event horizons" that significantly impact the ability to perform serious malware archeology, depending on the capabilities available to an analyst. I thought it was worth mentioning a few horizons as I've hit a few recently (1/7)
⚫️🔚 YARA retro hunts (~3m/1y/custom if doing it yourself)
Helps in identifying existing samples, but commercial services limit searches. If you can't index yourself you are probably out of luck here (2/7)
