2 links tagged with all of: incident-response + blue-team
Click any tag below to further narrow down your results
Links
This GitHub repository offers over 65 tools and resources tailored for blue teaming activities, including network discovery, vulnerability management, and incident response. It also features tips for malware detection and analysis, alongside specific tools for various cybersecurity tasks.
Detecting evasive implants is challenging due to their sleep obfuscation techniques. This article discusses a method using Time Travel Debugging (TTD) with WinDBG to capture and analyze decrypted states of such implants without introducing additional binaries, offering blue teams a powerful tool for incident response.