TGAlertsBot

Каналингиз репостлари ва эсловлари ҳақида хабар беради.

SearcheeBot

Telegram-каналлар оламидаги сизнинг йўлбошчингиз.

TGStat Bot

Telegram'дан чиқмай туриб каналлар статистикасини олиш

Telegram Analytics

TGStat хизмати янгиликларидан бохабар бўлиш учун обуна бўл!

Statistika Saralanganlar

网络安全笔记

Kanal geosi va tili: Xitoy, Xitoycha

Toifa: Texnologiyalar

从零开始、持续积累、开放共享、共同成长

Связанные каналы | Похожие каналы

Kanal geosi va tili

Xitoy, Xitoycha

Toifa

Texnologiyalar

Statistika

Postlar filtri

O‘chirilganlarni yashirish

Repostlarni yashirish

网络安全笔记

3 Sep, 08:54

https://mp.weixin.qq.com/s/NpIpyQ9XaWdaw51lAYhdLA

网络安全产品创新可以从新药开发体系学习什么

一、背景去年参加过两次腾讯网络安全免疫力的讨论，借鉴医疗体系的理念打开网络安全的思路，免疫力从预防到体质提升以

679 0 2

网络安全笔记

3 Sep, 08:53

https://mp.weixin.qq.com/s/LHSPAzji6P12sOy1hKpS2A

谈谈网络安全产业：如何才能走出沼泽地

以前我在厂商任职，谈安全产业容易有屁股。今天已经离开这个产业，可以不带倾向地谈一谈了。当然我不是纯吐槽，有吐槽，有分析，有建议。

689 0 1

网络安全笔记

3 Sep, 08:50

一体化实战漏洞运营体系建设实践--具备内外、总分一致性的资产漏洞运营体系的建设实践
https://mp.weixin.qq.com/s/xsT_KZQsP1-9l0toKQ4_9A

676 0 2

网络安全笔记

29 Aug, 13:57

数据安全与个人信息保护再思辨
https://mp.weixin.qq.com/s/WhDg26eY0mxkIn1VZVoM-Q

数据安全与个人信息保护再思辨

一、合规数据安全与个人信息保护是属于两个范畴的问题。

1.2k 0 2

网络安全笔记

29 Aug, 13:56

业务安全2.0:数据生产要素驱动的体系化业务安全建设
https://mp.weixin.qq.com/s/f3rz6RlqFDsmPEV-6aM-nw

业务安全2.0:数据生产要素驱动的体系化业务安全建设

一、企业安全3.0和业务安全2.01、企业安全3.0今年关于安全范围的事情讲了两次，主要是围绕信息化，数字化，

1.1k 0 2

网络安全笔记

29 Aug, 13:48

Internal of Malice(恶联网) 力图实现一套post-exploit基础设施, 在兼容CS,MSF,Sliver生态的同时, 提供更高的拓展性与隐蔽性, 并提供一套工程化的解决方案.

https://chainreactors.github.io/wiki/IoM/

Internal of Malice · index - ChainReactor Wiki

chainreactors wiki

970 0 1

网络安全笔记

29 Aug, 13:48

解码 Stealthy Memory-Only 恶意软件

https://cloud.google.com/blog/topics/threat-intelligence/peaklight-decoding-stealthy-memory-only-malware/

PEAKLIGHT: Decoding the Stealthy Memory-Only Malware | Google Cloud Blog

Mandiant identified a new memory-only dropper using a complex, multi-stage infection process.

864 1 1

网络安全笔记

29 Aug, 13:48

Windows API 函数备忘录

https://github.com/7etsuo/windows-api-function-cheatsheets

GitHub - 7etsuo/windows-api-function-cheatsheets: A reference of Windows API function calls, including functions for file operations, process management, memory management, thread management, dynamic-link library (DLL) management, synchronization, interprocess communication, Unicode string manipulat...

A reference of Windows API function calls, including functions for file operations, process management, memory management, thread management, dynamic-link library (DLL) management, synchronization,...

738 0 4

网络安全笔记

29 Aug, 13:39

攻击者如何进行持久化以及如何查找-Linux部分
https://www.elastic.co/security-labs/primer-on-persistence-mechanisms

Linux Detection Engineering - A primer on persistence mechanisms — Elastic Security Labs

In this second part of the Linux Detection Engineering series, we map multiple Linux persistence mechanisms to the MITRE ATT&CK framework, explain how they work, and how to detect them.

727 0 1 1

网络安全笔记

29 Aug, 13:31

Gartner 2024年及未来中国网络安全重要趋势.pdf

#Gartner

738 1 4

网络安全笔记

29 Aug, 13:29

网络安全等级保护基本要求第一级至第四级汇总表.xlsx

#合规建设

766 0 8

网络安全笔记

28 Aug, 12:12

KCon演讲材料
https://github.com/knownsec/KCon/tree/master/2024

KCon/2024 at master · knownsec/KCon

KCon is a famous Hacker Con powered by Knownsec Team. - knownsec/KCon

871 0 2

网络安全笔记

27 Aug, 05:41

钓鱼邮件分析
@DaoudaD/basic-analysis-of-a-phishing-email-fbe2276a7d67' rel='nofollow'>https://medium.com/@DaoudaD/basic-analysis-of-a-phishing-email-fbe2276a7d67

Analysis of a Phishing Email

This section aims to provide a basic introduction to email analysis, offering an overview of the process. In this second part, we will examine an example of a phishing email. You can download the…

1.1k 0 3

网络安全笔记

27 Aug, 05:40

电子邮件通信和电子邮件安全简介
@DaoudaD/introduction-to-email-communication-and-email-security-6f76e3e76f8c' rel='nofollow'>https://medium.com/@DaoudaD/introduction-to-email-communication-and-email-security-6f76e3e76f8c

986 0 3

网络安全笔记

26 Aug, 16:08

高清版数据资产入表知识地图.pdf

1.1k 0 10

网络安全笔记

21 Aug, 05:41

Windows 更新日志文件详解，原始ETL格式文件可通过 Get-WindowsUpdateLog命令进行转储
https://learn.microsoft.com/en-us/windows/deployment/update/windows-update-logs

1.7k 0 2 2

网络安全笔记

20 Aug, 07:19

cve-2024-7646 Ingress-nginx 注释验证绕过
https://github.com/kubernetes/kubernetes/issues/126744
https://www.armosec.io/blog/cve-2024-7646-ingress-nginx-annotation-validation-bypass/

CVE-2024-7646: Ingress-nginx Annotation Validation Bypass · Issue #126744 · kubernetes/kubernetes

CVSS Rating: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H A security issue was discovered in ingress-nginx where an actor with permission to create Ingress objects (in the networking.k8s.io or exte...

1.6k 0 1

网络安全笔记

20 Aug, 07:17

macOS 红队涉及模拟 macOS 环境中的网络攻击，以识别漏洞、评估安全态势并改进防御措施。此过程包含各种技术、工具和方法，旨在模仿现实世界对手的战术、技术和程序（TTP）。
https://redteamrecipe.com/macos-red-teaming#heading-gathering-system-information-using-ioplatformexpertdevice

macOS Red Teaming

macOS red teaming involves simulating cyber-attacks on macOS environments to identify vulnerabilities, assess security posture, and improve defensive measures. This process encompasses a wide array of techniques, tools, and methodologies aimed at mim...

1.8k 1 2

网络安全笔记

20 Aug, 07:16

网络安全威胁2024年中报告-奇安信.pdf

1.7k 0 5

网络安全笔记

20 Aug, 07:13

《Software Engineering at Google》的中英文对译版本。

在线阅读 https://qiangmzsx.github.io/Software-Engineering-at-Google

Software Engineering at Google

1.7k 0 5

20 ta oxirgi post ko‘rsatilgan.

3 621

obunachilar

Kanal statistikasi

Kanalda mashhur

刚刚回溯了下这个频道的时间线， 2020年9月11日频道创建，到现在马上满4年。初期的几百关注者都是同事...

威胁行为者的工具包：利用 Sliver、PoshC2 和批处理脚本 https://thedfirreport.com/2024/08/12/threat-...

中文版，这个公众号翻译的DFIR报告质量还是非常高 https://mp.weixin.qq.com/s/a8R0-DV2ZbzuWbQZdD4QFQ

验证码自动识别插件captcha适配新版Burpsuite|Burpsuite插件 #红队工具 https://mp.weixin.qq.com/s/jB...

macOS 红队涉及模拟 macOS 环境中的网络攻击，以识别漏洞、评估安全态势并改进防御措施。此过程包含各种...