Roberto Martínez

Excited to share that I'll be speaking at MCTTP 2025 in Munich, Germany 🇩🇪, from September 17 to 19 www.mcttp.de?utm_source=S.... This event fosters innovation, collaboration, and idea exchange. Grateful for the opportunity to contribute! #MCTTP2025 #PurpleTeaming

Enjoy!

Que buen juego!!! 👏🏻🏒🇨🇦

MEIOC

#Python automation tool to extract information from EML files:

Headers
Detailed server relay hops (IP addresses involved)

Extracted URLS/domains
Attachments with calculated hashes.

SPF (Sender Policy Framework)
DKIM (DomainKeys Identified Mail)

github.com/drego85/meioc

FIRSTCON24 - YouTube 36th Annual FIRST Conference "BRIDGING SECURITY RESPONSE GAPS" For more information on the conference and access to materials, please visit https://www.first...

Talks from the FIRSTCON 2024 security conference, which took place in June, are available on YouTube

www.youtube.com/playlist?lis...

It’s not the best place to live now, believe me.

7 Bluesky settings tweaks that make the popular X alternative even better If you've migrated from X to Bluesky like the millions of others, here are a few ways to make the experience as wonderful (and drama-free) as possible.

7 Bluesky settings tweaks that make the popular X alternative even better https://www.zdnet.com/article/7-bluesky-settings-tweaks-that-make-the-popular-x-alternative-even-better/

🚀 New Updates for the EDR Telemetry Project! 🛡️

We’ve rolled out a series of exciting improvements to the EDR Telemetry Project, and there’s so much to explore. Let's dive into these updates 👇

🔗 Check out the full details and get involved here: kostas-ts.medium.com...

1/X

ATT&CKcon 5.0 - YouTube

ATT&CKCon 5.0 videos and slides are up! Dig in to this year's presentations here:

📽️ www.youtube.com/playlist?lis...
📄 www.slideshare.net/MITREATTACK/...

GitHub - microsoft/markitdown: Python tool for converting files and office documents to Markdown. Python tool for converting files and office documents to Markdown. - microsoft/markitdown

Microsoft's MarkItDown

The MarkItDown library is a utility tool for converting various files to Markdown (e.g., for indexing, text analysis, etc.)

Repo: github.com/microsoft/ma...

GitHub - KasperskyLab/hrtng: IDA Pro plugin with a rich set of features: decryption, deobfuscation, patching, lib code recognition and various pseudocode transformations IDA Pro plugin with a rich set of features: decryption, deobfuscation, patching, lib code recognition and various pseudocode transformations - KasperskyLab/hrtng

Kaspersky has open-sourced hrtng, its internal IDA Pro plugin used for various malware reverse-engineering tasks

github.com/KasperskyLab...

Thanks for sharing @theblackgem.net From the security perspective there are a couple of resources pretty interesting design.ros2.org/articles/ros... and arxiv.org/abs/1812.09492

Security = Reducing the risk to an acceptable level for the organization

NIST #Ransomware Risk Management
nvlpubs.nist.gov/nistpubs/ir/20…

It should work now, please try again :)

Technical Deep Dive: Understanding the Anatomy of a Cyber Intrusion MITRE’s experiences detecting and responding to a nation-state cyber threat actor incident in our research and experimentation network

Technical Deep Dive: Understanding the Anatomy of a Cyber Intrusion medium.com/mitre-engenu...

Quedan pocas horas para que finalice la promoción de mi curso de eLearning "Respondiendo a Incidentes de Ciberseguridad utilizando Inteligencia de Amenazas" que comienza esta semana.
#DFIR #ThreatIntelligence #ThreatHunting
campus.universit.one/courses/e-IR...

Just a few hours left until the end of the promotion of my eLearning course "Responding to Cybersecurity Incidents using Threat Intelligence" starting this week.
campus.universit.one/courses/e-IR...
#DFIR #ThreatIntelligence #ThreatHunting

The Curious Case of an Egg-Cellent Resume Key Takeaways Initial access was via a resume lure as part of a TA4557/FIN6 campaign. The threat actor abused LOLbins like ie4uinit.exe and msxsl.exe to run the more_eggs malware. Cobalt Strike and…

Nuevo caso de DFIRreport, como siempre un lujo #DFIR thedfirreport.com/2024/12/02/t...

Fileless Attacks at a Glance: Weaponizing Powershell & Microsoft Legitimate Apps In this article, you will learn what fileless attacks are, their components, and how to detect, and secure your organization from them

In many cases, attackers hide their activities in plain sight and navigate under the radar undetected. Knowing these techniques and improving the ability to detect them can make all the difference.

#Threathunting #DetectionEngineering #DFIR

medium.com/maltrak/file...

Technique Inference Engine The Technique Inference Engine is a machine learning-powered tool that infers unseen adversary techniques, providing security teams actionable intelligence.

Know your adversary’s next move with the Technique Inference Engine, a machine learning-powered tool that infers unseen adversary techniques, providing security teams actionable intelligence.

#ThreatIntelligence #ThreatHunting #DFIR

mitre-engenuity.org/cybersecurit...

The future belongs to those who learn more skills and combine them in creative ways.

Robert Greene

The art and science behind Microsoft threat hunting: Part 1 | Microsoft Security Blog The Microsoft Detection and Response Team incorporates threat hunting as part of its proactive and reactive investigative service offerings.

The art and science behind Microsoft threat hunting: Part 1 www.microsoft.com/en-us/securi...

Storm-0501: Ransomware attacks expanding to hybrid cloud environments | Microsoft Security Blog Microsoft has observed the threat actor tracked as Storm-0501 launching a multi-staged attack where they compromised hybrid cloud environments and performed lateral movement from on-premises to cloud ...

Storm-0501: Ransomware attacks expanding to hybrid cloud environments www.microsoft.com/en-us/securi...

El tiempo corre, accede a mi curso de eLearning “Responding to Cybersecurity Incidents Using Threat Intelligence” en este enlace campus.universit.one/courses/e-IR... una nueva lección cada semana a partir del próximo lunes.

The clock is ticking, get access to my eLearning course "Responding to Cybersecurity Events using Threat Intelligence" in the following link campus.universit.one/courses/e-IR... a new lesson every week starting next Monday.

Definitely the sky is bluer here 😎

I’m happy to share that for BlackFriday and CyberMonday my elearning course "Responding to Cybersecurity Events using Threat Intelligence" is 90% off, using the code BlackFriday-CyberMonday-2024 in the following link campus.universit.one/courses/e-IR...

Les comparto que por BlackFriday y CyberMonday mi curso elearning “Responding to Cybersecurity Events using Threat Intelligence” está al 90% de descuento, usando el código BlackFriday-CyberMonday-2024 en el siguiente enlace campus.universit.one/courses/e-IR...

Set your alarms! Volexity's Steven Adair will join the Three Buddy Problem pod this week ⏰