2020-4-01
| 2020-04-30 | Johannes Ullrich | ISC Stormcast For Thursday, April 30th 2020 (oneliner) (0 Comments) |
| 2020-04-30 | Xavier Mertens | Collecting IOCs from IMAP Folder (0 Comments) |
| 2020-04-29 | Johannes Ullrich | Privacy Preserving Protocols to Trace Covid19 Exposure (4 Comments) |
| 2020-04-29 | Johannes Ullrich | ISC Stormcast For Wednesday, April 29th 2020 (oneliner) (0 Comments) |
| 2020-04-28 | Jan Kopriva | Agent Tesla delivered by the same phishing campaign for over a year (0 Comments) |
| 2020-04-28 | Johannes Ullrich | ISC Stormcast For Tuesday, April 28th 2020 (oneliner) (0 Comments) |
| 2020-04-27 | Xavier Mertens | Powershell Payload Stored in a PSCredential Object (0 Comments) |
| 2020-04-27 | Johannes Ullrich | ISC Stormcast For Monday, April 27th 2020 (oneliner) (0 Comments) |
| 2020-04-26 | Didier Stevens | Video: Malformed .docm File (0 Comments) |
| 2020-04-25 | Didier Stevens | MALWARE Bazaar (3 Comments) |
| 2020-04-24 | Johannes Ullrich | ISC Stormcast For Friday, April 24th 2020 (oneliner) (0 Comments) |
| 2020-04-24 | Xavier Mertens | Malicious Excel With a Strong Obfuscation and Sandbox Evasion (0 Comments) |
| 2020-04-23 | Johannes Ullrich | ISC Stormcast For Thursday, April 23rd 2020 (oneliner) (0 Comments) |
| 2020-04-22 | Johannes Ullrich | ISC Stormcast For Wednesday, April 22nd 2020 (oneliner) (0 Comments) |
| 2020-04-21 | Johannes Ullrich | ISC Stormcast For Tuesday, April 21st 2020 (oneliner) (0 Comments) |
| 2020-04-21 | Russ McRee | SpectX: Log Parser for DFIR (0 Comments) |
| 2020-04-20 | Johannes Ullrich | ISC Stormcast For Monday, April 20th 2020 (oneliner) (0 Comments) |
| 2020-04-20 | Didier Stevens | KPOT AutoIt Script: Analysis (0 Comments) |
| 2020-04-19 | Didier Stevens | KPOT Analysis: Obtaining the Decrypted KPOT EXE (0 Comments) |
| 2020-04-18 | Guy Bruneau | Maldoc Falsely Represented as DOCX Invoice Redirecting to Fake Apple Store (0 Comments) |
| 2020-04-17 | Johannes Ullrich | ISC Stormcast For Friday, April 17th 2020 (oneliner) (0 Comments) |
| 2020-04-17 | Xavier Mertens | Weaponized RTF Document Generator & Mailer in PowerShell (0 Comments) |
| 2020-04-16 | Johannes Ullrich | Using AppLocker to Prevent Living off the Land Attacks (0 Comments) |
| 2020-04-16 | Johannes Ullrich | ISC Stormcast For Thursday, April 16th 2020 (oneliner) (0 Comments) |
| 2020-04-15 | Rob VandenBrink | No IOCs? No Problem! Getting a Start Hunting for Malicious Office Files (10 Comments) |
| 2020-04-15 | Johannes Ullrich | ISC Stormcast For Wednesday, April 15th 2020 (oneliner) (0 Comments) |
| 2020-04-14 | Renato Marinho | Microsoft April 2020 Patch Tuesday (1 Comments) |
| 2020-04-14 | Johannes Ullrich | ISC Stormcast For Tuesday, April 14th 2020 (oneliner) (0 Comments) |
| 2020-04-13 | Jan Kopriva | Look at the same phishing campaign 3 months apart (0 Comments) |
| 2020-04-13 | Johannes Ullrich | ISC Stormcast For Monday, April 13th 2020 (oneliner) (0 Comments) |
| 2020-04-12 | Didier Stevens | Reader Analysis: "Dynamic analysis technique to get decrypted KPOT Malware." (0 Comments) |
| 2020-04-11 | Didier Stevens | Wireshark 3.2.3 Released: Mac Users Pay Attention Please (0 Comments) |
| 2020-04-10 | Scott Fendley | Critical Vuln in vCenter vmdir (CVE-2020-3952) (0 Comments) |
| 2020-04-10 | Xavier Mertens | PowerShell Sample Extracting Payload From SSL (0 Comments) |
| 2020-04-10 | Johannes Ullrich | ISC Stormcast For Friday, April 10th 2020 (oneliner) (0 Comments) |
| 2020-04-09 | Johannes Ullrich | ISC Stormcast For Thursday, April 9th 2020 (oneliner) (0 Comments) |
| 2020-04-08 | Johannes Ullrich | ISC Stormcast For Wednesday, April 8th 2020 (oneliner) (0 Comments) |
| 2020-04-08 | Brad Duncan | German malspam pushes ZLoader malware (0 Comments) |
| 2020-04-07 | Johannes Ullrich | Increase in RDP Scanning (0 Comments) |
| 2020-04-07 | Johannes Ullrich | ISC Stormcast For Tuesday, April 7th 2020 (oneliner) (0 Comments) |
| 2020-04-06 | Didier Stevens | Password Protected Malicious Excel Files (0 Comments) |
| 2020-04-06 | Johannes Ullrich | ISC Stormcast For Monday, April 6th 2020 (oneliner) (0 Comments) |
| 2020-04-05 | Guy Bruneau | Maldoc XLS Invoice with Excel 4 Macros (1 Comments) |
| 2020-04-04 | Didier Stevens | New Bypass Technique or Corrupt Word Document? (0 Comments) |
| 2020-04-03 | Xavier Mertens | Obfuscated with a Simple 0x0A (3 Comments) |
| 2020-04-03 | Johannes Ullrich | ISC Stormcast For Friday, April 3rd 2020 (oneliner) (0 Comments) |
| 2020-04-02 | Johannes Ullrich | ISC Stormcast For Thursday, April 2nd 2020 (oneliner) (0 Comments) |
| 2020-04-02 | Tom Webb | TPOT's Cowrie to ISC Logs (1 Comments) |
| 2020-04-01 | Johannes Ullrich | ISC Stormcast For Wednesday, April 1st 2020 (oneliner) (0 Comments) |
| 2020-04-01 | Brad Duncan | Qakbot malspam sent from an infected Windows host (0 Comments) |
https://www.sans.edu
