Threat Level: Infocon green

Diaries by Keyword: Windows 8

DateAuthorTitle

WINDOWS 8

2012-05-06Jim ClausingTool updates and Win 8

WINDOWS

2013-03-19Johannes UllrichWindows 7 SP1 and Windows Server 2008 R2 SP1 Being "pushed" today
2013-02-28Daniel WesemannParsing Windows Eventlogs in Powershell
2012-10-24Rob VandenBrinkTime to run Windows Update - - Microsoft Updates KB2755801 for Windows RT / IE10 / Flash Player - http://technet.microsoft.com/en-us/security/advisory/2755801
2012-07-19Mark BaggettDiagnosing Malware with Resource Monitor
2012-06-25Guy BruneauIssues with Windows Update Agent
2012-05-08Bojan ZdrnjaWindows Firewall Bypass Vulnerability and NetBIOS NS
2012-05-06Jim ClausingTool updates and Win 8
2012-04-10Swa FrantzenWindows Vista RIP
2011-12-21Johannes UllrichNew Vulnerability in Windows 7 64 bit
2011-07-09Chris MohanSafer Windows Incident Response
2011-06-30Rob VandenBrinkUpdate for RSA Authentication Manager
2011-06-01Johannes UllrichEnabling Privacy Enhanced Addresses for IPv6
2011-03-27Guy BruneauStrange Shockwave File with Surprising Attachments
2011-03-15Lenny ZeltserLimiting Exploit Capabilities by Using Windows Integrity Levels
2011-02-24Johannes UllrichWindows 7 / 2008 R2 Service Pack 1 Problems
2011-02-23Johannes UllrichWindows 7 Service Pack 1 out
2011-02-16Jason LamWindows 0-day SMB mrxsmb.dll vulnerability
2011-02-10Chris MohanBefriending Windows Security Log Events
2011-01-24Rob VandenBrinkWhere have all the COM Ports Gone? - How enumerating COM ports led to me finding a “misplaced” Microsoft tool
2011-01-04Johannes UllrichMicrosoft Advisory: Vulnerability in Graphics Rendering Engine
2010-11-24Bojan ZdrnjaPrivilege escalation 0-day in almost all Windows versions
2010-08-02Manuel Humberto Santander PelaezSecuring Windows Internet Kiosk
2010-06-15Manuel Humberto Santander PelaezMicrosoft Windows Help and Support Center vulnerability (CVE 2010-1885) exploit in the wild
2010-02-11Deborah HaleThe Mysterious Blue Screen
2009-11-14Adrien de BeaupreMicrosoft advisory for Windows 7 / Windows Server 2008 R2 Remote SMB DoS Exploit released
2009-11-12Rob VandenBrinkWindows 7 / Windows Server 2008 Remote SMB Exploit
2009-10-24Marcus SachsWindows 7 - How is it doing?
2009-09-08Guy BruneauVista/2008/Windows 7 SMB2 BSOD 0Day
2009-08-26Johannes UllrichWSUS 3.0 SP2 released
2009-07-16Guy BruneauChanges in Windows Security Center
2009-07-02Daniel WesemannTime to update updating on PCs for 3rd party apps
2009-04-16Adrien de BeaupreStrange Windows Event Log entry
2009-01-31Swa FrantzenWindows 7 - not so secure ?
2008-08-15Jim ClausingOMFW 2008 reflections
2008-06-12Bojan ZdrnjaSafari on Windows - not looking good
2008-05-17Lorna HutchesonXP SP3 Issues
2008-05-06John BambenekWindows XP Service Pack 3 Released
2008-05-01Adrien de BeaupreWindows XP SteadyState
2008-04-29Bojan ZdrnjaWindows Service Pack blocker tool
2008-04-16William StearnsWindows XP Service Pack 3 - unofficial schedule: Apr 21-28
2007-01-03Toby KohlenbergVLC Media Player udp URL handler Format String Vulnerability

8

2013-06-01Guy BruneauExploit Sample for Win32/CVE-2012-0158
2013-05-20Guy BruneauSafe - Tools, Tactics and Techniques
2013-05-04Kevin ShorttThe Zero-Day Pendulum Swings
2013-04-21John BambenekA Chargen-based DDoS? Chargen is still a thing?
2013-02-19Johannes UllrichAPT1, Unit 61398 and are state sponsored attacks real
2012-09-21Guy BruneauIE Cumulative Updates MS12-063 - KB2744842
2012-09-21Guy BruneauUpdate for Vulnerabilities in Adobe Flash Player in Internet Explorer 10 (2755801)
2012-09-17Rob VandenBrinkIE Zero Day is "For Real"
2012-07-25Johannes UllrichApple OS X 10.8 (Mountain Lion) released
2012-06-18Guy BruneauCVE-2012-1875 exploit is now available
2012-05-16Johannes UllrichGot Packets? Odd duplicate DNS replies from 10.x IP Addresses
2012-05-16Johannes UllrichReserved IP Address Space Reminder
2012-05-06Jim ClausingTool updates and Win 8
2012-01-12Rob VandenBrinkPHP 5.39 was release on the 10th, amongst other things, it addresses CVE-2011-4885 (prevents attacks based on hash collisions) and CVE-2011-4566 (integer overflow when parsing invalid exif header)
2011-10-06Rob VandenBrinkApache HTTP Server mod_proxy reverse proxy issue
2011-08-29Kevin ShorttInternet Worm in the Wild
2011-08-25Kevin ShorttIncreased Traffic on Port 3389
2011-08-03Johannes UllrichPort 3389 / terminal services scans
2011-06-30Rob VandenBrinkUpdate for RSA Authentication Manager
2011-04-28Guy BruneauVMware ESXi 4.1 Security and Firmware Updates
2011-01-15Jim ClausingWhat's up with port 8881?
2010-11-16Guy Bruneau OpenSSL TLS Extension Parsing Race Condition
2010-09-13Manuel Humberto Santander PelaezAdobe SING table parsing exploit (CVE-2010-2883) in the wild
2010-09-08John BambenekAdobe Acrobat/Reader 0-day in Wild, Adobe Issues Advisory
2010-07-29Rob VandenBrinkSnort 2.8.6.1 and Snort 2.9 Beta Released
2010-07-26Guy BruneauSophosLabs Released Free Tool to Validate Microsoft Shortcut
2010-07-20Manuel Humberto Santander PelaezLNK vulnerability now with Metasploit module implementing the WebDAV method
2010-06-15Manuel Humberto Santander PelaezMicrosoft Windows Help and Support Center vulnerability (CVE 2010-1885) exploit in the wild
2010-03-10Rob VandenBrinkMicrosoft re-release of KB973811 - attacks on Extended Protection for Authentication
2010-01-12Adrien de BeauprePoC for CVE-2009-0689 MacOS X 10.5/10.6 vulnerability
2009-11-14Adrien de BeaupreMicrosoft advisory for Windows 7 / Windows Server 2008 R2 Remote SMB DoS Exploit released
2009-11-12Rob VandenBrinkWindows 7 / Windows Server 2008 Remote SMB Exploit
2009-10-30Rob VandenBrinkNew version of NIST 800-41, Firewalls and Firewall Policy Guidelines
2009-10-25Lorna HutchesonCyber Security Awareness Month - Day 25 - Port 80 and 443
2009-10-09Rob VandenBrinkCyber Security Awareness Month - Day 9 - Port 3389/tcp (RDP)
2009-10-06Adrien de BeaupreCyber Security Awareness Month - Day 6 ports 67&68 udp - bootp and dhcp
2009-08-28Adrien de BeaupreWPA with TKIP done
2009-03-28Rick WannerNew Beta release of Nmap
2009-03-27David GoldsmithFirefox 3.0.8 Released
2009-03-24G. N. WhiteCanSecWest Pwn2Own: Would IE8 have been exploitable had the event waited one more day?
2009-03-19Mark HofmanBrace yourselves - IE8 reported to be released
2009-03-19Mark HofmanBrowsers Tumble at CanSecWest
2009-02-13Andre LudwigThird party information on conficker
2009-01-12William SaluskyDownadup / Conficker - MS08-067 exploit and Windows domain account lockout
2008-11-04Marcus SachsCyber Security Awareness Month 2008 - Summary and Links
2008-11-03Joel EslerDay 34 -- Feeding The Lessons Learned Back to the Preparation Phase
2008-11-02Mari NicholsDay 33 - Working with Management to Improve Processes
2008-11-01Koon Yaw TanDay 32 - What Should I Make Public?
2008-10-31Rick WannerDay 31 - Legal Awareness
2008-10-30Kevin ListonDay 30 - Applying Patches and Updates
2008-10-29Deborah HaleDay 29 - Should I Switch Software Vendors?
2008-10-28Jason LamDay 28 - Avoiding Finger Pointing and the Blame Game
2008-10-27Johannes UllrichDay 27 - Validation via Vulnerability Scanning
2008-10-25Koon Yaw TanDay 25 - Finding and Removing Hidden Files and Directories
2008-10-25Rick WannerDay 26 - Restoring Systems from Backup
2008-10-24Stephen HallDay 24 - Cleaning Email Servers and Clients
2008-10-22Johannes UllrichDay 22 - Wiping Disks and Media
2008-10-22Chris CarboniDay 23 - Turning off Unused Services
2008-10-21Johannes UllrichDay 21 - Removing Bots, Keyloggers, and Spyware
2008-10-20Raul SilesDay 20 - Eradicating a Rootkit
2008-10-19Lorna HutchesonDay 19 - Eradication: Forensic Analysis Tools - What Happened?
2008-10-17Patrick NolanDay 17 - Containing a DNS Hijacking
2008-10-17Rick WannerDay 18 - Containing Other Incidents
2008-10-16Mark HofmanDay 16 - Containing a Malware Outbreak
2008-10-15Rick WannerDay 15 - Containing the Damage From a Lost or Stolen Laptop
2008-10-14Swa FrantzenDay 14 - Containment: a Personal IdentityTheft Incident
2008-10-13Adrien de BeaupreDay 13 - Containment: Containing on Production Systems Such as a Web Server
2008-10-12Mari NicholsDay 12 Containment: Gathering Evidence That Can be Used in Court
2008-10-11Stephen HallDay 11 - Identification: Other Methods of Identifying an Incident
2008-10-10Marcus SachsDay 10 - Identification: Using Your Help Desk to Identify Security Incidents
2008-10-09Marcus SachsDay 9 - Identification: Log and Audit Analysis
2008-10-08Johannes UllrichDay 8 - Global Incident Awareness
2008-10-07Kyle HaugsnessDay 7 - Identification: Host-based Intrusion Detection Systems
2008-10-06Jim ClausingDay 6 - Network-based Intrusion Detection Systems
2008-10-05Stephen HallDay 5 - Identification: Events versus Incidents
2008-10-04Marcus SachsDay 4 - Preparation: What Goes Into a Response Kit
2008-10-03Jason LamDay 3 - Preparation: Building Checklists
2008-10-02Marcus SachsDay 2 - Preparation: Building a Response Team
2008-10-01Marcus SachsDay 1 - Preparation: Policies, Management Support, and User Awareness
2008-09-30Marcus SachsCyber Security Awareness Month - Daily Topics
2008-08-22Patrick NolanMS08-051 V2.0 Patch issued August 20, 2008
2008-08-15Jim ClausingAnother MS update that may have escaped notice
2008-04-10Deborah HaleSymantec Threatcon Level 2
2006-09-19Swa FrantzenYet another MSIE 0-day: VML
site/port/ip search:

Get ISC Swag!!

Advertisement

Security News Feeds

InternetStormCenter
SANS Newsbites
SANS @Risk

Diary Archives

WinLink Check-In - by: Kevin Liston (2013-06-19)

EMET 4.0 is now available for download - by: Russ McRee (2013-06-18)

Volatility rules...any questions? - by: Russ McRee (2013-06-18)

View Diary Archives

Search Diaries:

SANS Institute

View our Privacy Policy

Contact Us

Phone: (757) SANS-ISC (726-7472) - Voice Mail Only
Web Contact: handlers@isc.sans.edu
Report Bugs: Sourceforge Project
Debug Info: Browser Debug Info

"The experiences gained in the SANS Technology Institute program have helped me advance in IBM, taking a more public facing role."
- Jerome Radcliffe, SANS Technology Institute Student

"SANS is a 'giving back to the community factory.' SANS encourages and fosters growing security awareness and growing the security community."
- Rob VandenBrink, Alumni of SANS Technology Institute