HTTPS Insecure Cipher DetectionOverviewOption 1: ADHOCOption 2:
Recurring (automatic) FeedInvestigating Feed TagsReview HTTPS Insecure
Cipher Detection If you find this blog useful or would like to see a
webinar on this type of configuration with a S...
Overview Havoc C2 CLI Banner The Havoc command and control (C2)
framework is a free and open-source (FOSS) post-exploitation toolkit,
created by that is publicly available via Github
(https://github.com/HavocFramework/Havoc). Supporting documentation...
Overview Cryptonite ransomware is a Free and Open Source Software (FOSS)
program that was made freely available to the public via a now-blocked
github repository. The toolkit, claimed as being used for research, grew
in popularity in Fall of 2022. Cr...
Hunting Misconfigured Web Applications If you are decrypting HTTPS
traffic, the queries in this post will return results since the
destination port of 443 will still be in the packet and the HTTP parser
will identify the service as 80. Overview This ...
Endpoint Alert Tuning Overview This blog post serves to help answer the
most common question I receive in regards to Endpoint... "How do I tune
the false positives?" This is not a guide on how to write new rules but
the information here will certainl...
