2022-6-01
| 2022-06-30 | Brad Duncan | Case Study: Cobalt Strike Server Lives on After Its Domain Is Suspended (0 Comments) |
| 2022-06-30 | Johannes Ullrich | ISC Stormcast For Thursday, June 30th, 2022 (oneliner) (0 Comments) |
| 2022-06-29 | Rob VandenBrink | It's New Phone Day! Time to migrate your MFA! (5 Comments) |
| 2022-06-29 | Johannes Ullrich | ISC Stormcast For Wednesday, June 29th, 2022 (oneliner) (0 Comments) |
| 2022-06-28 | Johannes Ullrich | Possible Scans for HiByMusic Devices (0 Comments) |
| 2022-06-28 | Johannes Ullrich | ISC Stormcast For Tuesday, June 28th, 2022 (oneliner) (0 Comments) |
| 2022-06-27 | Johannes Ullrich | Encrypted Client Hello: Anybody Using it Yet? (1 Comments) |
| 2022-06-27 | Johannes Ullrich | ISC Stormcast For Monday, June 27th, 2022 (oneliner) (0 Comments) |
| 2022-06-26 | Didier Stevens | More Decoding Analysis (0 Comments) |
| 2022-06-26 | Didier Stevens | My Paste Command (0 Comments) |
| 2022-06-25 | Xavier Mertens | Malicious Code Passed to PowerShell via the Clipboard (3 Comments) |
| 2022-06-24 | Xavier Mertens | Python (ab)using The Windows GUI (0 Comments) |
| 2022-06-23 | Johannes Ullrich | ISC Stormcast For Thursday, June 23rd, 2022 (oneliner) (0 Comments) |
| 2022-06-23 | Xavier Mertens | FLOSS 2.0 Has Been Released (0 Comments) |
| 2022-06-22 | Johannes Ullrich | ISC Stormcast For Wednesday, June 22nd, 2022 (oneliner) (0 Comments) |
| 2022-06-22 | Xavier Mertens | Malicious PowerShell Targeting Cryptocurrency Browser Extensions (0 Comments) |
| 2022-06-21 | Johannes Ullrich | Experimental New Domain / Domain Age API (4 Comments) |
| 2022-06-21 | Johannes Ullrich | ISC Stormcast For Tuesday, June 21st, 2022 (oneliner) (0 Comments) |
| 2022-06-20 | Johannes Ullrich | Odd TCP Fast Open Packets. Anybody understands why? (0 Comments) |
| 2022-06-20 | Johannes Ullrich | ISC Stormcast For Monday, June 20th, 2022 (oneliner) (0 Comments) |
| 2022-06-19 | Didier Stevens | Video: Decoding Obfuscated BASE64 Statistically (0 Comments) |
| 2022-06-19 | Didier Stevens | Wireshark 3.6.6 Released (0 Comments) |
| 2022-06-18 | Didier Stevens | Decoding Obfuscated BASE64 Statistically (0 Comments) |
| 2022-06-17 | Bojan Zdrnja | Critical vulnerability in Splunk Enterprise?s deployment server functionality (1 Comments) |
| 2022-06-17 | Johannes Ullrich | ISC Stormcast For Friday, June 17th, 2022 (oneliner) (0 Comments) |
| 2022-06-17 | Brad Duncan | Malspam pushes Matanbuchus malware, leads to Cobalt Strike (0 Comments) |
| 2022-06-16 | Johannes Ullrich | ISC Stormcast For Thursday, June 16th, 2022 (oneliner) (0 Comments) |
| 2022-06-16 | Xavier Mertens | Houdini is Back Delivered Through a JavaScript Dropper (0 Comments) |
| 2022-06-15 | Johannes Ullrich | Terraforming Honeypots. Installing DShield Sensors in the Cloud (0 Comments) |
| 2022-06-15 | Johannes Ullrich | ISC Stormcast For Wednesday, June 15th, 2022 (oneliner) (0 Comments) |
| 2022-06-14 | Renato Marinho | Microsoft June 2022 Patch Tuesday (1 Comments) |
| 2022-06-14 | Johannes Ullrich | ISC Stormcast For Tuesday, June 14th, 2022 (oneliner) (0 Comments) |
| 2022-06-13 | Renato Marinho | Translating Saitama's DNS tunneling messages (0 Comments) |
| 2022-06-13 | Johannes Ullrich | ISC Stormcast For Monday, June 13th, 2022 (oneliner) (0 Comments) |
| 2022-06-12 | Didier Stevens | Quickie: Follina, RTF & Explorer Preview Pane (0 Comments) |
| 2022-06-10 | Russ McRee | EPSScall: An Exploit Prediction Scoring System App (0 Comments) |
| 2022-06-10 | Johannes Ullrich | ISC Stormcast For Friday, June 10th, 2022 (oneliner) (0 Comments) |
| 2022-06-09 | Brad Duncan | TA570 Qakbot (Qbot) tries CVE-2022-30190 (Follina) exploit (ms-msdt) (0 Comments) |
| 2022-06-09 | Johannes Ullrich | ISC Stormcast For Thursday, June 9th, 2022 (oneliner) (0 Comments) |
| 2022-06-08 | Johannes Ullrich | ISC Stormcast For Wednesday, June 8th, 2022 (oneliner) (0 Comments) |
| 2022-06-07 | Johannes Ullrich | Atlassian Confluence Exploits Seen By Our Honeypots (CVE-2022-26134) (0 Comments) |
| 2022-06-07 | Johannes Ullrich | ISC Stormcast For Tuesday, June 7th, 2022 (oneliner) (0 Comments) |
| 2022-06-06 | Didier Stevens | "ms-msdt" RTF Maldoc Analysis: oledump Plugins (0 Comments) |
| 2022-06-06 | Johannes Ullrich | ISC Stormcast For Monday, June 6th, 2022 (oneliner) (0 Comments) |
| 2022-06-05 | Didier Stevens | Analysis Of An "ms-msdt" RTF Maldoc (0 Comments) |
| 2022-06-04 | Guy Bruneau | Spam Email Contains a Very Large ISO file (0 Comments) |
| 2022-06-03 | Johannes Ullrich | ISC Stormcast For Friday, June 3rd, 2022 (oneliner) (0 Comments) |
| 2022-06-03 | Xavier Mertens | Sandbox Evasion... With Just a Filename! (0 Comments) |
| 2022-06-02 | Johannes Ullrich | Quick Answers in Incident Response: RECmd.exe (0 Comments) |
| 2022-06-02 | Johannes Ullrich | ISC Stormcast For Thursday, June 2nd, 2022 (oneliner) (0 Comments) |
| 2022-06-01 | Jan Kopriva | HTML phishing attachments - now with anti-analysis features (1 Comments) |
| 2022-06-01 | Johannes Ullrich | ISC Stormcast For Wednesday, June 1st, 2022 (oneliner) (0 Comments) |
https://www.sans.edu
