Just saw an "Advanced Threat Protection" tool from a vendor that rewrites the URL of all incoming mails to redirect the users to their own website where a cloned version of the original website is presented by them. User should enter their credentials and the tool acts as a MitM.

If you need to monitor Linux systems in your #SIEM, you should take a look at "Laurel". Laurel provides #auditd logging in JSON format. github.com/threathunters-… Credits to threathunters.io community.

Our powerintern Fabian strikes again, teamed up with thefLink and developed SysmonEnte: a hard to detect attack on Sysmon. Check out our new blogpost: codewhitesec.blogspot.com/2022/09/attack…

Your job as a Red Teamer is to help the Blue Team get better at catching you. If you're hoarding your intrusion points because Blue will catch you too fast, you're misunderstanding the point. Your job isn't to exploit vulns. Its to help blue defend / detect more effectively.

Had so much fun delivering my “AWS Security Masterclass” training at /ˈziːf-kɒn/ this year 🥳 After having a great time in Gdynia, now off to a sweet vacation 🚀 Until next time /ˈziːf-kɒn/, see ya 👋

Hey BruCON. My friends and me reached 3rd place with the team CSG9 at your CTF in September, but didn‘t received any book voucher yet. We verified onsite that the mail addresses were correct.