We imported 1.6 millions of Windows 10 hashes including some common software such as WinRAR,Putty in hashlookup. #DFIR circl.lu/services/hashl… The import process uses github.com/CIRCL/factual-… a WiP software to fingerprint installed software on Windows. by David Cruciani

git-vuln-finder v1.2 released including support for GitHub Archive processing to analyse GitHub archive for potential vulnerabilities mentioned in commit logs. #opensource #infosec github.com/cve-search/git… Thanks to David Cruciani for the GHarchive.org support.

First release v1.0 of factual rules, a new open source tool to build YARA rules for known installed software on operating systems. Then using the generated YARA rules against digital forensic acquisition to ease #DFIR. github.com/CIRCL/factual-… #100DaysofYARA

First release of AIL typo squatting library - a generic library in Python supporting various typo-squatting algorithms easily extendable usable in AIL Project and other projects. By David Cruciani from CIRCL - @[email protected] #cybersecurity #typosquatting github.com/ail-project/ai…

We release a new public service to find potential typo-squatted domains. typosquatting-finder.circl.lu relying on our open source AIL Project typo-squatting library. You can select among algorithms, find the existing domains and download the results. #infosec #threatintel

First lightning talk, David Cruciani setting the bar high by presenting his new typo squatting tool. It’s his first conference talk, quite the feat to start by presenting such an awesome piece of work!

LT: Typosquatting-finder: Overview And Demo by David Cruciani #CTI-Summit youtu.be/76_NkrMA8ps

We are reviewing our MISP (@[email protected]) warning lists and we are looking for a maintained list of hosts which are domain parking. Do you know someone doing such thing? or should we start to build one from scratch? #threatintelligence

A new addition to the open source ecosystem, FlowIntel version 1.0, has been released! It's an open source case/task management tool with built-in integration with MISP and MISP modules. #opensource #cti #threatintel #infosec github.com/flowintel/flow… David Cruciani