Webinar takeaway – Making MITRE ATT&CK Actionable
My key takeaways ATT&CK is a framework, not a how to or step by step instruction How do we protect ourselves from techniques like Powershell used for attacks? deep technical knowledge Read More
My key takeaways
- Secrets everywhere, even on a parachute landing a mars rover
- CyberChef is a GCHQ project, so be aware using it with client data
- There is even a receipe for OCR in CyberChef
- There is even a receipe for Creating QR-codes in CyberChef
- you can use it to extract all URLs eg from a web page source code
Env
- Provided by BHIS
- Presenter: Brian B King
additional links
- https://gchq.github.io/CyberChef/
- https://projects.noahliebman.net/encodemightythings/
- https://blog.cryptohack.org/twitter-secrets
- https://github.com/gchq/CyberChef/issues/1046
- https://wildwesthackinfest.com/training/regular-expressions-your-new-lifestyle/
- https://github.com/mattnotmax/cyberchef-recipes
- https://medium.com/mii-cybersec/malicious-powershell-deobfuscation-using-cyberchef-dfb9faff29f
Tags
cryptography, hashing, tools
You may also like
Event takeaways: BSidesMeSh21 – day 2
My key takeaways 11 min from publishing credentials (accidently) to github till pwn 2019: ~200k credentials in Github ; 2021: +20% runtime secrets go to application secrets managers AWS Secrets Manager GCP Secrets Manager Hashicorp Vault Azure Vault InfoSec’s dirty little secret: We can’t know all the options, but we still need to help secure
Read More