327 matches found
sysmon-config
sysmon-config | Un file di configurazione di Sysmon per tutti da forkare Questo è un modello di file di configurazione di Sysmon di Microsoft Sysinternals con tracciamento degli eventi di alta qualità predefinito. Il file dovrebbe fungere da ottimo punto di partenza per il monitoraggio delle...
CVE-2021-34486
CVE-2021-34486 Windows Etw LPE testato solo su Windows 20H2 x64 ed2k://|file|cnwindows10businesseditionsversion20h2updatedmarch2021x64dvdca61aaaa.iso|6074574848|B6741C4E4B09337471B02DC95E953992|/ Grazie a @yongchuank https://www.pixiepointsecurity.com/blog/advisory-cve-2021-34486.html...
Fuck-Etw
「⚙️」Bypass di ETW e Unhooking di Ntdll Bypassa l'Event Trace Windows ETW e rimuovi l'hook di ntdll. root@kitploit: |\ /| | \ /\ \ /|\ /| | /| || /| \ / /| / | | | | | | || | | / / | | | | | | | | | | | || | | | | | | | | | | | | | || | | \ \ | | | | || || | | | || /| / \ | /\ | | | | |/ /|/...
New Avalon Malware Framework Packs CrownX Ransomware Capabilities
Cybersecurity researchers have discovered a previously undocumented modular malware framework codenamed Avalon that's distributed by means of a multi-stage phishing chain capable of bypassing traditional security controls. Avalon combines credential collection, lateral movement, remote access,...
EUVD-2026-34742
Integer overflow in Chromoting in Google Chrome on Windows prior to 149.0.7827.53 allowed a local attacker to obtain potentially sensitive information from process memory via a crafted ETW event. Chromium security severity: Low...
DEBIAN-CVE-2026-11281
Integer overflow in Chromoting in Google Chrome on Windows prior to 149.0.7827.53 allowed a local attacker to obtain potentially sensitive information from process memory via a crafted ETW event. Chromium security severity: Low...
CVE-2026-11281
Integer overflow in Chromoting in Google Chrome on Windows prior to 149.0.7827.53 allowed a local attacker to obtain potentially sensitive information from process memory via a crafted ETW event. Chromium security severity: Low...
CVE-2026-11281
Integer overflow in Chromoting in Google Chrome on Windows prior to 149.0.7827.53 allowed a local attacker to obtain potentially sensitive information from process memory via a crafted ETW event. Chromium security severity: Low...
Endpoint Security Agent: A Comprehensive Approach to Real-Time System Monitoring and Threat Detection
As cyber threats continue to evolve in complexity and frequency, robust endpoint protection is essential for organizational security. This paper presents "Endpoint Security Agent: A Comprehensive Approach to Real-time System Monitoring and Threat Detection" a modular, real-time security solution...
EUVD-2021-18844
Malware in sbrugna...
EUVD-2021-11019
Malware in sbrugna...
EUVD-2021-13656
Malware in sbrugna...
EUVD-2021-13859
Malware in sbrugna...
EUVD-2021-13230
Malware in sbrugna...
EUVD-2021-15114
Malware in sbrugna...
EUVD-2021-23540
Malware in sbrugna...
EUVD-2021-20451
Malware in sbrugna...
EUVD-2021-21141
Malware in sbrugna...