Threat Level: green Handler on Duty: Russ McRee

SANS ISC: Diaries by Keyword Diaries by Keyword

Participate: Learn more about our honeypot network
https://isc.sans.edu/honeypot.html

Sign Up for Free!   Forgot Password?
Log In or Sign Up for Free!
Date Author Title

POWER OUTAGE

2011-09-09Johannes UllrichLarge power outage in Southern California may last until Friday. http://www.sdge.com
2011-08-15Rob VandenBrink8 Years since the Eastern Seaboard Blackout - Has it Been that Long?

POWER

2020-08-06/a>Xavier MertensA Fork of the FTCode Powershell Ransomware
2020-08-04/a>Johannes UllrichReminder: Patch Cisco ASA / FTD Devices (CVE-2020-3452). Exploitation Continues
2020-08-03/a>Xavier MertensPowershell Bot with Multiple C2 Protocols
2020-06-12/a>Xavier MertensMalicious Excel Delivering Fileless Payload
2020-05-23/a>Xavier MertensAgentTesla Delivered via a Malicious PowerPoint Add-In
2020-05-15/a>Rob VandenBrinkHashes in PowerShell
2020-05-15/a>Rob VandenBrinkSHA3 Hashes (on Windows) - Where Art Thou?
2020-04-27/a>Xavier MertensPowershell Payload Stored in a PSCredential Object
2020-04-24/a>Xavier MertensMalicious Excel With a Strong Obfuscation and Sandbox Evasion
2020-04-17/a>Xavier MertensWeaponized RTF Document Generator & Mailer in PowerShell
2020-04-10/a>Xavier MertensPowerShell Sample Extracting Payload From SSL
2020-02-28/a>Xavier MertensShow me Your Clipboard Data!
2020-01-23/a>Xavier MertensComplex Obfuscation VS Simple Trick
2019-12-26/a>Xavier MertensBypassing UAC to Install a Cryptominer
2019-12-09/a>Didier Stevens(Lazy) Sunday Maldoc Analysis
2019-09-30/a>Didier StevensMaldoc, PowerShell & BITS
2019-09-17/a>Rob VandenBrinkInvestigating Gaps in your Windows Event Logs
2019-09-06/a>Xavier MertensPowerShell Script with a builtin DLL
2019-07-28/a>Didier StevensVideo: Analyzing Compressed PowerShell Scripts
2019-07-11/a>Xavier MertensRussian Dolls Malicious Script Delivering Ursnif
2019-07-10/a>Rob VandenBrinkDumping File Contents in Hex (in PowerShell)
2019-06-28/a>Rob VandenBrinkVerifying Running Processes against VirusTotal - Domain-Wide
2019-06-27/a>Rob VandenBrinkFinding the Gold in a Pile of Pennies - Long Tail Analysis in PowerShell
2019-06-21/a>Rob VandenBrinkNetstat Local and Remote -new and improved, now with more PowerShell!
2019-06-03/a>Didier StevensTip: BASE64 Encoded PowerShell Scripts are Recognizable by the Amount of Letter As
2019-05-28/a>Didier StevensOffice Document & BASE64? PowerShell!
2019-04-25/a>Rob VandenBrinkService Accounts Redux - Collecting Service Accounts with PowerShell
2019-04-24/a>Rob VandenBrinkWhere have all the Domain Admins gone? Rooting out Unwanted Domain Administrators
2019-03-30/a>Didier Stevens"404" is not Malware
2019-03-20/a>Rob VandenBrinkUsing AD to find hosts that aren't in AD - fun with the [IPAddress] construct!
2019-03-10/a>Didier StevensMalicious HTA Analysis by a Reader
2019-03-10/a>Didier StevensQuick and Dirty Malicious HTA Analysis
2019-03-05/a>Rob VandenBrinkPowershell, Active Directory and the Windows Host Firewall
2019-02-21/a>Xavier MertensSimple Powershell Keyloggers are Back
2019-02-17/a>Didier StevensVideo: Finding Property Values in Office Documents
2019-02-16/a>Didier StevensFinding Property Values in Office Documents
2019-02-10/a>Didier StevensVideo: Maldoc Analysis of the Weekend
2019-02-09/a>Didier StevensMaldoc Analysis of the Weekend
2019-01-24/a>Brad DuncanMalspam with Word docs uses macro to run Powershell script and steal system data
2019-01-14/a>Rob VandenBrinkMicrosoft LAPS - Blue Team / Red Team
2019-01-02/a>Xavier MertensMalicious Script Leaking Data via FTP
2018-12-19/a>Xavier MertensRestricting PowerShell Capabilities with NetSh
2018-12-15/a>Didier StevensDe-DOSfuscation Example
2018-12-12/a>Didier StevensYet Another DOSfuscation Sample
2018-12-03/a>Didier StevensWord maldoc: yet another place to hide a command
2018-11-22/a>Xavier MertensDivided Payload in Multiple Pasties
2018-11-16/a>Xavier MertensBasic Obfuscation With Permissive Languages
2018-11-06/a>Xavier MertensMalicious Powershell Script Dissection
2018-10-26/a>Xavier MertensDissecting Malicious Office Documents with Linux
2018-10-22/a>Xavier MertensMalicious Powershell using a Decoy Picture
2018-09-30/a>Didier StevensWhen DOSfuscation Helps...
2018-09-05/a>Xavier MertensMalicious PowerShell Compiling C# Code on the Fly
2018-07-30/a>Didier StevensMalicious Word documents using DOSfuscation
2018-07-26/a>Xavier MertensWindows Batch File Deobfuscation
2018-06-19/a>Xavier MertensPowerShell: ScriptBlock Logging... Or Not?
2018-06-04/a>Rob VandenBrinkDigging into Authenticode Certificates
2018-05-19/a>Xavier MertensMalicious Powershell Targeting UK Bank Customers
2018-05-09/a>Xavier MertensNice Phishing Sample Delivering Trickbot
2018-05-06/a>Guy BruneauScans Attempting to use PowerShell to Download PHP Script
2017-12-19/a>Xavier MertensExample of 'MouseOver' Link in a Powerpoint File
2017-11-29/a>Xavier MertensFileless Malicious PowerShell Sample
2017-11-15/a>Xavier MertensIf you want something done right, do it yourself!
2017-11-11/a>Xavier MertensKeep An Eye on your Root Certificates
2017-10-31/a>Xavier MertensSome Powershell Malicious Code
2017-09-11/a>Russ McReeWindows Auditing with WINspect
2017-08-23/a>Xavier MertensMalicious script dropping an executable signed by Avast?
2017-08-20/a>Didier StevensIt's Not An Invoice ...
2017-08-01/a>Rob VandenBrinkRooting Out Hosts that Support Older Samba Versions
2017-05-03/a>Bojan ZdrnjaPowershelling with exploits
2017-03-30/a>Xavier MertensDiverting built-in features for the bad
2017-02-17/a>Rob VandenBrinkRTRBK - Router / Switch / Firewall Backups in PowerShell (tool drop)
2016-12-02/a>Rob VandenBrinkProtecting Powershell Credentials (NOT)
2016-11-23/a>Tom WebbMapping Attack Methodology to Controls
2016-10-31/a>Russ McReeSEC505 DFIR capture script: snapshot.ps1
2016-06-12/a>Guy BruneauDNS Sinkhole ISO Version 2.0
2016-06-03/a>Tom ListonMySQL is YourSQL
2016-04-28/a>Rob VandenBrinkDNS and DHCP Recon using Powershell
2016-04-15/a>Xavier MertensWindows Command Line Persistence?
2016-01-26/a>Rob VandenBrinkPentest Time Machine: NMAP + Powershell + whatever tool is next
2016-01-25/a>Rob VandenBrinkAssessing Remote Certificates with Powershell
2016-01-19/a>Rob VandenBrinkPowershell and HTTPS ? It Ain?t All Rainbows And Lollipops! (or is it?)
2016-01-06/a>Russ McReetoolsmith #112: Red vs Blue - PowerSploit vs PowerForensics
2015-12-14/a>Russ McReeAD Security's Unofficial Guide to Mimikatz & Command Reference
2015-12-10/a>Rob VandenBrinkUninstalling Problem Applications using Powershell
2015-12-09/a>Xavier MertensEnforcing USB Storage Policy with PowerShell
2015-12-02/a>Rob VandenBrinkNessus and Powershell is like Chocolate and Peanut Butter!
2015-08-12/a>Rob VandenBrinkWindows Service Accounts - Why They're Evil and Why Pentesters Love them!
2015-06-29/a>Rob VandenBrinkThe Powershell Diaries 2 - Software Inventory
2015-06-24/a>Rob VandenBrinkThe Powershell Diaries - Finding Problem User Accounts in AD
2014-10-23/a>Russ McReeDigest: 23 OCT 2014
2014-04-06/a>Basil Alawi S.Taher"Power Worm" PowerShell based Malware
2013-02-28/a>Daniel WesemannParsing Windows Eventlogs in Powershell
2012-06-04/a>Rob VandenBrinkvSphere 5.0 Hardening Guide Officially Released
2011-11-10/a>Rob VandenBrinkStuff I Learned Scripting - - Parsing XML in a One-Liner
2011-09-09/a>Johannes UllrichLarge power outage in Southern California may last until Friday. http://www.sdge.com
2011-08-15/a>Rob VandenBrink8 Years since the Eastern Seaboard Blackout - Has it Been that Long?
2006-09-28/a>Swa FrantzenPowerpoint, yet another new vulnerability

OUTAGE

2017-02-28/a>Xavier MertensAmazon S3 Outage
2015-03-11/a>Rob VandenBrinkApple iTunes Store is seeing an extended outage (11 Mar) - watch https://www.apple.com/support/systemstatus/ for status changes. (12 Mar) - service restored, all green!
2013-04-17/a>Richard PorterApple iTunes Services Outage
2013-01-09/a>Rob VandenBrinkHotmail seeing some temporary access issues
2012-02-29/a>Johannes UllrichCOX Network Outage
2011-09-27/a>donald smithNew feature in JUNOS to drop or ignore path attributes.
2011-09-09/a>Johannes UllrichLarge power outage in Southern California may last until Friday. http://www.sdge.com
2011-08-15/a>Rob VandenBrink8 Years since the Eastern Seaboard Blackout - Has it Been that Long?
2011-04-25/a>Rob VandenBrinkSony PlayStation Network Outage - Day 5
2011-01-30/a>Richard PorterThe Modern Dark Ages?
2010-12-30/a>Rick WannerObvious Lessons from the Skype outage
2010-04-09/a>Mark HofmanOutage Update - isc.sans.org
2010-04-07/a>Johannes Ullrichour primary datacenter is currently experiencing a network outage
2010-03-24/a>Kyle HaugsnessWikipedia outage
2009-11-24/a>Johannes UllrichThe ISC and DShield websites will be unavailable on Wednesday Nov 25th from 8-8:30 am EST.
2009-08-18/a>Deborah HaleDomain tcpdump.org unavailable
2008-12-28/a>Raul SilesAT&T Wireless Outage
2008-12-28/a>Raul SilesLevel3 Outage?
2008-08-14/a>Mari NicholsSBC Outage?
2008-08-09/a>Deborah HaleCleveland Outage
2008-06-01/a>Swa FrantzenThe Planet outage - what can we all learn from it?
2008-04-06/a>Tony CarothersHappenings in the Northeast US