879 matches found
see
安全执行环境 :来源: https://github.com/F-Secure/see :文档: https://see.readthedocs.io :下载: https://pypi.python.org/pypi/python-see |travis badge| |docs badge| .. |travis badge| image:: https://travis-ci.org/F-Secure/see.svg?branch=master :target: https://travis-ci.org/F-Secure/see :alt: Build Status .. |do...
FLAIR
F-Secure 轻量级事件响应取证采集工具(FLAIR) 本文档描述了 FLAIR 采集脚本的用途和基本操作。 用途 在调查客户环境中的安全事件时,有时客户环境中并未部署 EDR 解决方案,导致 IR 团队无法利用其在整个环境中收集取证工件。FLAIR 正是为了对目标主机上的若干关键工件执行半自动化采集而创建的。 FLAIR 填补了主机完整取证镜像所能提供的深层数据与 EDR 解决方案所提供的更具针对性和交互性的方法之间的空白。 设计 FLAIR 基于以下原则创建: 尽可能仅使用 Microsoft Windows 系统自带的工具,即仅使用操作系统“内置”的程序...
lazarus-sigma-rules
Lazarus Sigma 规则 本仓库中的 Sigma 规则由 F-Secure Countercept 检测与响应团队创建,旨在为 Lazarus 组织近期使用的工具、技术与程序提供检测覆盖。 关于这些 Sigma 规则创建过程的博客文章可在此处查看: https://labs.f-secure.com/blog/catching-lazarus-threat-intelligence-to-real-detection-logic...
CVE-2022-38165
Arbitrary file write in F-Secure Policy Manager through 2022-08-10 allows unauthenticated users to write the file with the contents in arbitrary locations on the F-Secure Policy Manager Server...
CVE-2022-38166
In F-Secure Endpoint Protection for Windows and macOS before channel with Capricorn database 2022-11-2207, the aerdl.dll unpacker handler crashes. This can lead to a scanning engine crash, triggerable remotely by an attacker for denial of service...
CVE-2022-38162
Reflected cross-site scripting XSS vulnerabilities in WithSecure through 2022-08-10 exists within the F-Secure Policy Manager due to an unvalidated parameter in the endpoint, which allows remote attackers to provide a malicious input...
CVE-2022-38164
A vulnerability affecting F-Secure SAFE browser for Android and iOS was discovered. A maliciously crafted website could make a phishing attack with URL spoofing as the browser only display certain part of the entire URL...
CVE-2021-33598
A Denial-of-Service DoS vulnerability was discovered in all versions of F-Secure Atlant whereby the SAVAPI component used in certain F-Secure products can crash while scanning fuzzed files. The exploit can be triggered remotely by an attacker. A successful attack will result in Denial-of-Service...
CVE-2021-33602
A vulnerability affecting the F-Secure Antivirus engine was discovered when the engine tries to unpack a zip archive LZW decompression method, and this can crash the scanning engine. The vulnerability can be exploited remotely by an attacker. A successful attack will result in Denial-of-Service o...
CVE-2021-33600
A denial-of-service DoS vulnerability was discovered in the web user interface of F-Secure Internet Gatekeeper. The vulnerability occurs because of an attacker can trigger assertion via malformed HTTP packet to web interface. An unauthenticated attacker could exploit this vulnerability by sending...
CVE-2021-33599
A vulnerability affecting F-Secure Antivirus engine was discovered whereby scanning WIM archive file can lead to denial-of-service infinite loop and freezes AV engine scanner. The vulnerability can be exploit remotely by an attacker. A successful attack will result in Denial-of-Service of the...
CVE-2021-33601
A vulnerability was discovered in the web user interface of F-Secure Internet Gatekeeper. An authenticated user can modify settings through the web user interface in a way that could lead to an arbitrary code execution on the F-Secure Internet Gatekeeper server...
EUVD-2010-3495
Malware in sbrugna...
EUVD-2006-6392
Malware in sbrugna...
EUVD-2006-0345
Malware in sbrugna...
EUVD-2013-7141
Malware in sbrugna...
EUVD-2018-17950
Malware in sbrugna...
EUVD-2004-2212
Malware in sbrugna...