A PNG Image With an Embedded Gift, (Sat, May 31st) read file error: read notes: is a directory... 2025-5-31 05:34:31 | 阅读: 16 | 收藏 | SANS Internet Storm Center, InfoCON: green - isc.sans.edu iend xhttp objshell user32 python

ISC Stormcast For Friday, May 30th, 2025 https://isc.sans.edu/podcastdetail/9472, (Fri, May 30th) ISC Stormcast 播客于2025年5月30日发布，值班人员为Jesse La Grew，当前威胁级别为绿色。... 2025-5-30 02:0:2 | 阅读: 15 | 收藏 | SANS Internet Storm Center, InfoCON: green - isc.sans.edu jul feeds 14th papers

Usage of "passwd" Command in DShield Honeypots, (Fri, May 30th) read file error: read notes: is a directory... 2025-5-30 00:33:50 | 阅读: 23 | 收藏 | SANS Internet Storm Center, InfoCON: green - isc.sans.edu passwd sshd username ssh uname

ISC Stormcast For Thursday, May 29th, 2025 https://isc.sans.edu/podcastdetail/9470, (Thu, May 29th) read file error: read notes: is a directory... 2025-5-29 02:0:2 | 阅读: 13 | 收藏 | SANS Internet Storm Center, InfoCON: green - isc.sans.edu papers jul feeds 19th security

Alternate Data Streams ? Adversary Defense Evasion and Detection [Guest Diary], (Wed, May 28th) 本文探讨了Windows NTFS文件系统中的替代数据流（ADS），解释其隐藏恶意数据的能力及其在网络安全中的威胁。文章介绍了如何利用ADS隐藏恶意软件，并举例说明BitPaymer勒索软件如何利用ADS来规避检测。此外，还讨论了检测和防范ADS的方法，包括使用工具如Streams.exe和自动化脚本监控文件系统。... 2025-5-29 00:2:44 | 阅读: 19 | 收藏 | SANS Internet Storm Center, InfoCON: green - isc.sans.edu alternate windows microsoft malicious bitpaymer

[Guest Diary] Exploring a Use Case of Artificial Intelligence Assistance with Understanding an Attack, (Wed, May 28th) Jennifer Wilson作为ISC实习生，在实习中使用Raspberry Pi设置并维护了一个DShield蜜罐实例。她记录了一次来自IP地址63[.]212[.]157[.]187的攻击，并通过分析攻击者运行的命令（如查看系统信息、搜索加密货币挖矿进程、访问特定文件路径）发现该攻击可能涉及credential harvesting或SMS hijacking活动。她利用ChatGPT对其中的关键字符串“D877F783D5D3EF8Cs”进行了分析，并验证了其与Telegram相关联的可能性。... 2025-5-28 13:48:55 | 阅读: 20 | 收藏 | SANS Internet Storm Center, InfoCON: green - isc.sans.edu chatgpt attacker tdata honeypot

ISC Stormcast For Wednesday, May 28th, 2025 https://isc.sans.edu/podcastdetail/9468, (Wed, May 28th) read file error: read notes: is a directory... 2025-5-28 02:0:3 | 阅读: 11 | 收藏 | SANS Internet Storm Center, InfoCON: green - isc.sans.edu papers security 19th isc jul

Securing Your SSH authorized_keys File, (Tue, May 27th) 文章提醒用户注意SSH `authorized_keys`文件的安全性。建议设置文件权限为只读（0444），由root所有，并考虑集中管理密钥文件以增强安全性。... 2025-5-27 15:44:43 | 阅读: 15 | 收藏 | SANS Internet Storm Center, InfoCON: green - isc.sans.edu ssh owned keys2 personally integrating

ISC Stormcast For Tuesday, May 27th, 2025 https://isc.sans.edu/podcastdetail/9466, (Tue, May 27th) 该文章介绍了网络威胁监控平台ISC Stormcast的相关信息，包括值班人员、威胁级别、即将举办的网络安全课程以及提供的工具和服务等。... 2025-5-27 02:0:3 | 阅读: 13 | 收藏 | SANS Internet Storm Center, InfoCON: green - isc.sans.edu 14th papers security isc feeds

SVG Steganography, (Mon, May 26th) read file error: read notes: is a directory... 2025-5-26 16:31:33 | 阅读: 21 | 收藏 | SANS Internet Storm Center, InfoCON: green - isc.sans.edu observer expressed 20px diaries

ISC Stormcast For Friday, May 23rd, 2025 https://isc.sans.edu/podcastdetail/9464, (Fri, May 23rd) read file error: read notes: is a directory... 2025-5-23 02:0:2 | 阅读: 11 | 收藏 | SANS Internet Storm Center, InfoCON: green - isc.sans.edu 14th 19th feeds isc papers

Resilient Secure Backup Connectivity for SMB/Home Users, (Thu, May 22nd) 文章介绍了如何通过设置“Jump Host”和内部主机实现家庭网络的备用远程访问和监控。Jump Host提供静态IP地址和安全边界，内部主机负责监控备用连接并通过SSH或VPN与Jump Host通信。整个方案利用云服务和自动化工具确保在网络故障时仍能安全访问家庭系统。... 2025-5-22 17:27:38 | 阅读: 19 | 收藏 | SANS Internet Storm Center, InfoCON: green - isc.sans.edu backup twilio network speedtest ssh

ISC Stormcast For Thursday, May 22nd, 2025 https://isc.sans.edu/podcastdetail/9462, (Thu, May 22nd) read file error: read notes: is a directory... 2025-5-22 02:0:2 | 阅读: 12 | 收藏 | SANS Internet Storm Center, InfoCON: green - isc.sans.edu security 14th isc 19th

New Variant of Crypto Confidence Scam, (Wed, May 21st) 文章描述了一种新型加密钱包诈骗，通过X平台直接消息传播。骗子提供看似有钱的账户，诱导受害者支付注册费或VIP会员费以转移资金，最终骗取钱财。... 2025-5-21 15:26:9 | 阅读: 9 | 收藏 | SANS Internet Storm Center, InfoCON: green - isc.sans.edu victim scammer fee isc cheap

ISC Stormcast For Wednesday, May 21st, 2025 https://isc.sans.edu/podcastdetail/9460, (Wed, May 21st) read file error: read notes: is a directory... 2025-5-21 02:0:2 | 阅读: 10 | 收藏 | SANS Internet Storm Center, InfoCON: green - isc.sans.edu jul 14th feeds papers

Researchers Scanning the Internet, (Tue, May 20th) 文章讨论了研究人员进行互联网扫描的行为及其潜在影响。作者指出需遵守RFC 9511规范，标识身份以减少误伤，并建议利用现有数据资源而非自行扫描。... 2025-5-20 13:59:12 | 阅读: 13 | 收藏 | SANS Internet Storm Center, InfoCON: green - isc.sans.edu scanners identify honeypots originates isc

ISC Stormcast For Tuesday, May 20th, 2025 https://isc.sans.edu/podcastdetail/9458, (Tue, May 20th) read file error: read notes: is a directory... 2025-5-20 02:0:2 | 阅读: 11 | 收藏 | SANS Internet Storm Center, InfoCON: green - isc.sans.edu security isc papers feeds

RAT Dropped By Two Layers of AutoIT Code, (Mon, May 19th) read file error: read notes: is a directory... 2025-5-19 05:37:10 | 阅读: 11 | 收藏 | SANS Internet Storm Center, InfoCON: green - isc.sans.edu autoit swiftwrite wales windows wordgenius

ISC Stormcast For Monday, May 19th, 2025 https://isc.sans.edu/podcastdetail/9456, (Mon, May 19th) read file error: read notes: is a directory... 2025-5-19 02:0:2 | 阅读: 12 | 收藏 | SANS Internet Storm Center, InfoCON: green - isc.sans.edu 19th security papers isc feeds

xorsearch.py: Python Functions, (Sat, May 17th) read file error: read notes: is a directory... 2025-5-17 09:22:18 | 阅读: 10 | 收藏 | SANS Internet Storm Center, InfoCON: green - isc.sans.edu xorsearch python didier isprintable printable