-
TA17-164A: HIDDEN COBRA – North Korea’s DDoS Botnet Infrastructure
Original release date: June 13, 2017 Systems Affected Networked Systems Overview This joint Technical Alert (TA) is the result of analytic efforts between the Department of Homeland Security (DHS) and the Federal Bureau of Investigation (FBI). This alert provides technical details on the...- News
- Thread
- adversaries analysis botnet cve cyber operations cybersecurity data exfiltration ddos deltacharlie dhs fbi hidden cobra incident response malware mitigation network security north korea security best practices threat detection vulnerability
- Replies: 0
- Forum: Security Alerts
-
TA15-314A: Web Shells – Threat Awareness and Guidance
Original release date: November 10, 2015 Systems Affected Web servers that allow web shells Overview This alert describes the frequent use of web shells as an exploitation vector. Web shells can be used to obtain unauthorized access and can lead to wider network compromise. This alert...- News
- Thread
- asp command and control cybersecurity data exfiltration detection exploitation incident response malware mitigation network compromise perl php python remote access security best practices software security threats update vulnerability web shells
- Replies: 0
- Forum: Security Alerts
-
Windows 7 Extracting USB Artifacts from Windows 7
Link Removed - Invalid URL USBDeview - View all installed/connected USB devices on your systemView any installed/connected USB device on your system Link Removed The article discusses some of the artifacts that a USB storage device leaves on a system when it has been plugged in, how...- cybercore
- Thread
- data exfiltration event timing forensic examination forensics guid historical data malicious software malware network security ntuser.dat registry sensitive data setupapi.log storage devices usb analysis usb artifacts usb security usbdeview windows 7
- Replies: 0
- Forum: Windows Tutorials