DetectRaptor

DetectRaptor Un repositorio para compartir contenido público de detección masiva con Velociraptor de forma fácil de consumir. Simplemente toma el VQL zip de la versión publicada e impórtalo en Velociraptor. Esto se puede hacer fácilmente mediante el intercambio de artefactos de Velociraptor:...

Malicious code in antsrcsrctest (npm)

The npm package antsrcsrctest masquerades as a "simple date formatting utility" index.js exports a harmless formatDate function that is never referenced by the malicious code but is a credential-harvesting and cloud-metadata-stealing reconnaissance tool. It declares a preinstall: node preinstall....

Evidence at the Moment of Attack. Answers at AI Speed.

Wiz Sensor Forensics is now generally available - automatically capturing forensic artifacts at the moment of detection and using AI to accelerate investigation for SOC and IR teams...