RE: https://mastodon.social/@PixelOccult/116688261168926380

Dear lord these are cool

RE: https://hachyderm.io/@evacide/116557815822147145

This is excellent

Is there a thing for MISP that checks if your objects (e.g. domain-ip, whois) are still current? Or is this a job for a python script?

Need gift ideas for the CTI Analyst in your life? Look no further!

With massive thanks to @adulau for
https://raw.githubusercontent.com/adulau/the-art-of-pivoting/refs/heads/main/output/the-art-of-pivoting.pdf

And similarly massive thanks to @hrbrmstr for
https://codeberg.org/hrbrmstr/cmu-ciso-dds-ddi

#threatintel

Ok well that worked. Single pass, working config, all I had to do is the DNS records and I've got a personal domain working on postfix.

I didn't learn anything by doing this, and the config is probably janky, but I got a good sleep and hung out with my daughter while it all got set up for me. That's kinda neat.

I've asked Claude Code to set up postfix on a vps, let's see what it's managed to do when I wake up in the morning

Just finished Psychology of Intelligence Analysis by Richards J. Heuer. Really good read on some analysis basics and tips on cognitive bias. Recommend for similarly-minded #threatintel nerds

What are people using for adblockers these days? @nopatience ?

Socket.dev picked up a malware campaign using a cloaking service called Adspect that pitches itself as legit (but clearly isn't).

But because it wants to seem legit, it has doco on best practices for cloaking malvertising campaigns, which is a really interesting read: https://docs.adspect.io/en/latest/recommendations.html

Original socket.dev article: https://socket.dev/blog/npm-malware-campaign-uses-adspect-cloaking-to-deliver-malicious-redirects

RE: https://infosec.exchange/@joshbressers/115492193764868846

@Spartan_1986 so this is what I'm now using instead of Google - seems good so far

I'll be at @kawaiicon later this week if anyone wants to hang out, drop me a message or sumn

Gonna go plant some hydrangeas while I wait for my Ubuntu USB to make itself so I can obliterate the win11 install on the refurbished laptop I just picked up.

Feelin pretty solarpunk, not gonna lie

Googled a line from a movie - the top results weren't relevant but the suggested searches were all
<line from movie> gif
<line from movie> youtube
<line from movie> IMDB
etc

The top results weren't relevant because the line from the movie doesn't exist, I'd imagined it, and google still decided to recommend me a bunch of searches for it.

Between this and the nonsensical AI stuff it tops results with now, I'm just not going to bother with google search anymore.

Which should feel like a big deal, but actually just feels mildly irritating.

RE: https://infosec.exchange/@darfplatypus/115482771883619863

I needed a #threatintel for noobs course and @darfplatypus made me one ❤️

Really good analysis from @MalasadaTech on the convertyfile browser hijacker: https://malasada.tech/convertyfile-browser-hijacker/

Picked it up via my https://www.cyberespresso.eu feed, ty @nopatience

@nopatience this might interest you for a couple of reasons: https://github.com/ApthNZ/kairos

I got Claude Code to code me up a proof of concept - I wrote none of this - and it works well enough for a PoC. The only iterations I went through were to add functionality, I didn't have any mistake-fix-mistake loops that were common a few months ago.

This is also a potential application for my Espresso feed - turning Espresso feed items into either immediate SOC alerts or to filter into a daily digest that's specifically relevant for a particular org.

PoC is up and running here: https://kairos-j9o7.onrender.com/ (load times are awful on the free tier)

I am finding that I can pick out obvious AI content (blogs and stuff) because I use Claude for coding stuff (homelab stuff) and they all seem to "talk" a certain way

The internet is becoming a weird(er) place. Users trying to tell AI content from human content. Site owners coming up with novel ways to block AI crawlers. It's like we're living in a William Gibson novel, and not exactly in a good way

Time to eat chips, watch some Guy Ritchie nonsense, and pretend the world doesn't exist for at least 90 mins

I need to write a book with the same theme and cadence as "oh the places you'll go!" but instead titled "oh the fucks I don't give!"