My Detecting Command and Control Frameworks via Sysmon and Windows Event Logging webcast just posted.

https://www.youtube.com/watch?v=x7xXEyTWgrs&list=PLs4eo9Tja8bj3__-glm8g0Bamd5kYm1SU

Here's the abstract: Prevention eventually fails. Bypassing tools such as Windows Defender Antivirus may be challenging, but it can be done. What then? What's left? Command and control (C2) frameworks such as Cobalt Strike, Sliver, and Metasploit typically leave telltale signs of their presence. This talk will largely be demo-based, showing how to analyze Windows event logs (including Sysmon logs) to hunt for traces left behind by modern C2 frameworks.

@Nerdpyle @carmencr @fpieces @ian_infosec @ajohnsocyber @khaxan @bjsplash @RichLang @zarchasmpgmr @Sqlcheesecake @blemley @markmorow

Sorry to bring up a sad subject. The edgelord is deleting inactive accounts, including those of deceased people.

https://mashable.com/article/twitter-purge-inactive-accounts-deceased-user-concerns

Semi-random photo #25. I spotted this walking home from my office today

Here's the backstory: https://www.pressherald.com/2023/04/07/police-chief-to-update-portland-council-on-response-to-neo-nazi-march/

I'm testing Sysmon 14.15, including FileBlockShredding.

https://learn.microsoft.com/en-us/sysinternals/downloads/sysmon

It works well against Sysinternals' sdelete.

But: it does not prevent Metasploit's sdel post module from doing the same thing

Semi-random photo #24. New York, New York, 1979 by Tseng Kwong Chi at the Tate Museum of Modern Art in London. I took this photo in July 2022.

https://www.tate.org.uk/art/artworks/tseng-new-york-new-york-empire-state-p82466

Semi-random photo #22. The Marina Bay Sands in Singapore. I took this photo in October 2018

https://en.wikipedia.org/wiki/Marina_Bay_Sands

Semi-random photo #21. <Dr Evil voice> One million dollars</Dr Evil voice> at the Chicago Federal Reserve Bank Money Museum

https://www.chicagofed.org/education/money-museum/index

The plaque says:

A Cube of Cash

Have you ever wondered what one million dollars looks like? You don't have to wonder anymore because you can see right in front of you! Walk around this four-foot-square cube of cash and enjoy this once-in-a-lifetime opportunity.

Did you know?

One million dollars weighs over 2,000 pounds or more than one ton.

A stack of one-million dollar bills would be one-and-a-half times the height of this building.

If you had one million $1 notes and spent one every second of every day, you would go broke in about 12 days.

Semi-random photo #20. Rembrandt Self Portrait (age 23, 1629).

One of the Rembrandt paintings that wasn't stolen from the Isabella Stewart Gardner Museum in 1990 (two others were stolen from the same room). I took this photo yesterday.

https://www.gardnermuseum.org/experience/collection/10955