"When I was seventeen, my father was so stupid, I didn't want to be seen with him in public. When I was twenty-four, I was amazed at how much the old man had learned in just seven years." -- author #MarkTwain, born Samuel Langhorne Clemens in Florida, Missouri (1835-1910). R.I.P.
Turkey Hash - Take leftover turkey and mashed potatoes, stuffing, etc combine with sauteed onions, cider vinegar, tarragon, dill. Cover and rest in fridge overnight. Fry in a pan the following morning. Top with a soft-cooked egg.
The bosses we remember:
1 provided us a safe space to grow
2 opened career doors
3 defended us when we needed it
4 recognized and rewarded us
5 developed us as leaders
6 inspired us to stretch higher
7 led by example
8 told us our work mattered
9 forgave us when we made mistakes
This is awesome!
Cyber Threat Intelligence Summit
Open-Source Intelligence Summit
Blue Team 2021
DFIR Summit
Cyber Defense Summit
Threat Hunting Summit
All SANS Virtual Summits are free next year.
sans.org/blog/sans-virtual-s…
Our daughter’s pre-calc class was given this sheet of 59 trig identities to verify over Thanksgiving break. Her teacher says this work is important for understanding calculus. I call BS. This is just a massive amount of meaningless busywork that will help nobody.
Friday Pentest Tip: Got shell access and you can compile/download stuff, but can't set execute permission due to blocked chmod or its underlying syscalls.
Try
/lib/x86_64-linux-gnu/ld-2.27.so <ELF binary>
Look for dynamic linker in
/lib/ld-*
/lib/x86_64-linux-gnu/ld-*
Please take this one seriously!!! We've seen multiple intrusions that have started with exploitation of Fortinet vulnerabilities. Don't let that be you.
#CyberMentoringMonday Malware RE tip: When reading assembly, your goals change what you should focus on. Identifying capabilities => focus on API calls. Building Yara rules => focus on unique assembly code-blocks. Focus on goals and don't get lost down rabbit holes.
The Carrier book is very good—even though it only goes up to EXT3, there’s a lot of important info in there. Otherwise most of my knowledge comes from the developer docs.