Tue, Jan 19 2021

Last Updated: 2021-01-17 11:53:58 UTC Version 13.01 of Sysmon was released, a Windows Sysinternals tool to monitor and log system activity. This version adds detection for process tampering, like process hollowing and process herpaderping. You use…

A reader pointed us to a malicious Word document. First, I run my strings.py command on it, with option -a to get statistics (see my diary entry ' Strings 2021 '). There aren't any long strings in this file (the longest is 33 characters). So there…

The Pennsylvania woman was seen in footage near Pelosi's office Jan. 6. A mirror is seen damaged in the private office of House Speaker Nancy Pelosi after the Jan. 6 rioting in the Capitol. | 60 Minutes/CBSNews via AP The FBI is investigating…

The data regulator for the German state of Lower Saxony has fined a local laptop retailer a whopping €10.4 million ($12.5 million) for keeping its employees under constant video surveillance at all times for the past two years without a…

Gordon is a great website for security analysis and threat intelligence practitioners courtesy of Marc-Henry Geay of France. It's a fine offering that quickly provides threat and risk information about observables such as IPv4 addresses, URLs…