New checklist and video - writing better threat reports: zeltser.com/write-better-t…

Writing YARA rules for VT Livehunt. #ThreatHunting #threatintel #YARA support.virustotal.com/hc/en-us/artic…

Doh. Luckily I checked the stupid solution first - lame but effective way to change file hash.

Creating Registry Links scorpiosoftware.net/2020/07/17/cre…

Oh, cool! Looks like VT supports logical operators with VTGrep, so you can almost do yara searches in an indexed (read: fast) way. e.g. virustotal.com/gui/search/con…

Attributing cyber attacks is hard. But you probably already knew that. In our latest blog post, we look into why it's so hard, and what pitfalls private researchers and governments alike face cs.co/6018Gc8mr

"One of the hardest ways for an actor to avoid attribution is what you're going after really does give away what someone's doing". lawfareblog.com/lawfare-podcas…

It's not wrong to ask the "what happens when" question. I'm saying that "security" became so vast in the last 30 years that it's impossible to answer the question to everyone's satisfaction. So, cut an interviewee some slack if they don't know about your pet corner of the field.

In our continued research on election security, we have another paper out today on disinformation campaigns — or "fake news" as some people like to say. Here's what we're seeing from threat actors looking to sow discord cs.co/6011GWxpH

freemusicarchive.org/music/Eric_Ski… jump for joy on the weekend and hide in the sheets on other days🎶 #flareon7 🎵

So we just need to open the EXE and click three times? 😱 #flareon7

Learned a lot from Vitali... R.I.P. :(