😈 [ markrussinovich, Mark Russinovich ]

Check out my Microsoft Build interview with @sethjuarez on Azure Container Apps + Dapr, a big step in the evolution of serverless: https://t.co/mqla60UZFz

🔗 https://www.youtube.com/watch?v=dplT6YL66Mg

🐥 [ tweet ]

😈 [DirectoryRanger, DirectoryRanger]

ADeleg. Active Directory delegation management tool. It allows you to make a detailed inventory of delegations set up so far in a forest, along with their potential issues
https://t.co/sbqcK2mPHW

🔗 https://github.com/mtth-bfft/adeleg

🐥 [tweet]

😈 [DirectoryRanger, DirectoryRanger]

Offensive Windows IPC Internals, by @0xcsandker
Part 1: Named Pipes https://t.co/Ug3gPKZANi
Part 2: RPC https://t.co/cfgY8dTLTa
Part 3: ALPC https://t.co/avXPjhqml4

🔗 https://csandker.io/2021/01/10/Offensive-Windows-IPC-1-NamedPipes.html
🔗 https://csandker.io/2021/02/21/Offensive-Windows-IPC-2-RPC.html
🔗 https://csandker.io/2022/05/24/Offensive-Windows-IPC-3-ALPC.html

🐥 [tweet]

😈 [DirectoryRanger, DirectoryRanger]

Hunting for Active Directory Certificate Services Abuse, by @HeirhabarovT
https://t.co/adwuv53TOL

🔗 https://speakerdeck.com/heirhabarov/hunting-for-active-directory-certificate-services-abuse

🐥 [tweet]

😈 [cyb3rops, Florian Roth 🏝]

Remember, when you write #YARA rules for RTF files that "{\rtf" isn’t the header that you should look for, since the „f“ isn’t required by Microsoft Word to open the file

Better use:

uint32be(0) == 0x7B5C7274

which is "{\rt" at position 0

https://t.co/vzBbEcZJd1

🔗 https://furoner.wordpress.com/2017/07/06/analysis-of-new-rtf-malware-obfuscation-method/

🐥 [tweet]