OSSEM @OSSEM_Project
Open Source Security Event Metadata ! Data engineers! #ThreatHunting @OTR_Community github.com/OTRF/OSSEM https://ossemproject.com/intro Joined September 2019-
Tweets31
-
Followers2K
-
Following7
-
Likes40
@olafhartong @MITREattack @FDezeure @redcanary @mvelazco @jsecurity101 Thank you so much for sharing the @OSSEM_Project Detection Model 🙏 and all your contributions to it! Very happy to see the project helping others in the community 🌎🎊 github.com/OTRF/OSSEM-DM/…
@OSSEM_Project @Cyb3rPandaH Will be coming on Windows soon ;)
🚀 Any NEW fields on the schemas for #SysmonForLinux events compared to Windows🤔? @Cyb3rPandaH used our #Sysmon for Windows & Linux data dictionaries in a python 🐍 script to answer that😎 ✅ ParentUser (ProcessCreate) ✅ User (EID 5,9,11) 🖇️ Script: github.com/OTRF/OSSEM-DD/…
🚨 Learning how to install #Sysmon for Linux 🐧 & send security events to #AzureSentinel in a research lab environment!! 🧪 #MSTIC #Microsoft 📡 Sysmon (SysinternalsEBPF) -> Syslog -> SIEM 🚀 ✅ Scripts ✅ ARM templates ✅ Sysmon configs and more.. techcommunity.microsoft.com/t5/azure-senti…
@Cyb3rWard0g 🚨 Thanks to @Cyb3rPandaH , we updated our #Linux data dictionaries to keep up with the event schemas from #SysmonForLinux and share them with the community 🚀 I see some new fields names 🙊👀 ossemproject.com/dd/dictionarie… @OTR_Community
Today, Microsoft is open sourcing Cloud Katana, a cloud-native serverless application built on the top of Azure Functions to assess security controls in the cloud and hybrid cloud environments. Read about the design principles and learn how to deploy: msft.it/6011n46MT
🚨 We decided to re-brand Mordor to @SecDatasets 😈 We’ll cover new types of datasets to extend its application 💜 more coming soon.. 🍻 Help us build the largest library of datasets for the InfoSec community! 🚀 Site: securitydatasets.com/introduction.h… Repo: github.com/OTRF/Security-…
🚨 New version of the Windows Security Events connector from #AzureSentinel reached public preview Looking for a way to test & filter the collection of event logs via XPath queries? I got you! 💜🍻 @MSThreatProtect #MSTIC @OTR_Community @OSSEM_Project techcommunity.microsoft.com/t5/azure-senti…
🚨 In less than 24h 😉, we are sharing telemetry ( #Sysmon, Security & System) through the @Mordor_Project to help everyone 🌎 expedite the validation process of detection rules! @Cyb3rPandaH #CobaltStrike 🗒️Metadata: mordordatasets.com/notebooks/smal… 😈Dataset: raw.githubusercontent.com/OTRF/mordor/ma…
APTSimulator 0.9.0 featuring #CobaltStrike beacon activity simulation with - NamedPipe Creation - Service installation & exec pattern - HTTP beaconing github.com/NextronSystems… If you want to help, add some steps in here: github.com/NextronSystems…
What started w/ talks at ATT&CKcon & analysis of event logs, We're happy to see @Cyb3rPandaH & @Cyb3rWard0g initial research helping ATT&CK users improve their data collection strategies. Join us to collab 🍻 @OTR_Community 🎙️ bit.ly/OTRDiscord 🛡️ github.com/OTRF/OSSEM-DM/…
It has launched! ATT&CK v9 is now live with refactored data sources, ATT&CK for Containers, Google Workspace as a platform and more! Read about new data sources and the rest of the update at medium.com/mitre-attack/a… or attack.mitre.org/resources/upda… for new/changed groups/techniques/sw.
Sharing some data samples (PCAP & WinEvents) to validate detection of lateral movement via remote scheduled task creation & update 🍻 @OTR_Community 1⃣ Creation: mordordatasets.com/notebooks/smal… 2⃣ Update: mordordatasets.com/notebooks/smal… @HunterPlaybook Library Doc: github.com/OTRF/ThreatHun…
💥😱 @tiraniddo added "named pipe RPC client transport" to NtObjectManager 🔥 Thank you very much James for all your work 👏! I'll create PS scripts to cover a few scenarios 🍻 (Img 4) If anyone would like to help me, let me know 😉 @OTR_Community github.com/Cyb3rWard0g/Wi…
Looking forward to it! 🍻 Let's talk about some of the steps taken before sharing a dataset with the community 💜
THIS FRIDAY: Catch @Cyb3rWard0g in conversation with @mattifestation for the last #AtomicFriday of 2020! bit.ly/33AKlil
Thinking about contributing to an os project during the holidays? 😉The @OTR_Community have updated our Detection Model 1⃣Contribute security events to @MITREattack data sources github.com/OTRF/OSSEM-DM/… 2⃣Provide feedback github.com/OTRF/OSSEM-DM/… 3⃣Have fun ossemproject.com/notebooks/dm/a…
THIS FRIDAY: Catch @Cyb3rWard0g in conversation with @mattifestation for the last #AtomicFriday of 2020! bit.ly/33AKlil
#Eko2020 | @BlueSpaceSec | Roberto y Jose Luis Rodriguez: Open Threat Research (Keynote) "Open Threat Research: Compartiendo herramientas Open Source con el mundo para el desarrollo de detecciones desde casa", una charla de @Cyb3rWard0g y @Cyb3rPandaH. youtube.com/watch?v=6-UVaP…
🚨 New version of our "attackcti" Python 🐍 library to query @MITREattack in STIX format via their public TAXII server has been released! 1⃣ ICS ATT&CK Integration ✅ 2⃣ Basic Notebook to explore ICS Content ✅ 📔 Binder: mybinder.org/v2/gh/OTRF/ATT… 📦Repo: github.com/OTRF/ATTACK-Py…
In their #THIRSummit talk, @Cyb3rPandaH & @jamieantisocial illustrates how we can avoid the typical cat and mouse games by modeling the data sources defined in ATT&CK to recognize, track, and even predict the malicious scent of adversaries. Watch it now: youtu.be/eKeydMrXsOE
Thank you @jaredhaight 😊🙏 With the latest updates to @MITREattack data sources by @Cyb3rPandaH , we are translating that doc to YAML files to create additional documentation and hopefully get contributions from the InfoSec Community 😊 github.com/OTRF/OSSEM-DM/…
THIS FRIDAY: Catch @Cyb3rWard0g in conversation with @mattifestation for the last #AtomicFriday of 2020! bit.ly/33AKlil
Formalizing the mapping of security events to the @MITREattack data source objects concepts 🍻 We would love to hear your feedback and see your contributions to this community-led effort!! 💜 Thank you @Cyb3rPandaH 💜 Blog: medium.com/threat-hunters…
🙏So happy to see our initial data modeling concepts applied to enhance @MITREattack . This is a more practical & less subjective approach to map event logs ➡️ att&ck data sources. We hope this helps the community to improve their data collection strategy. Thanks @Cyb3rPandaH 🍻
Coinciding with @jamieantisocial's and his #ThreatHuntingSummit talk, we've just released part 1 of a blog series by ATT&CK team member @Cyb3rPandaH on a proposed method of enhancing an often overlooked part of ATT&CK, data sources. Check it out at medium.com/mitre-attack/d….
Coinciding with @jamieantisocial's and his #ThreatHuntingSummit talk, we've just released part 1 of a blog series by ATT&CK team member @Cyb3rPandaH on a proposed method of enhancing an often overlooked part of ATT&CK, data sources. Check it out at medium.com/mitre-attack/d….
Katie Nickels @likethecoins
55K Followers 3K Following Director of Intel at @redcanary. SANS Certified Instructor for FOR578: CTI. Senior Fellow at @CyberStatecraft. She/her. Mastodon: @[email protected]
Nasreddine Benchercha... @nas_bench
12K Followers 1K Following Detection @Splunk & @cisco | previously @nextronsystems | @sigma_hq & @magicswordio maintainer | Eternal Learner
Christopher Peacock @SecurePeacock
7K Followers 2K Following #PurpleTeam | Ex @RaytheonTech MSSP, @SCYTHE_IO, & @GD_OTS | Taught at BlackHat & DEFCON | #100DaysofSigma | Keep exploring, keep learning, and stay curious
The Haag™ @M_haggis
10K Followers 2K Following ⚔️ Prevention Engineering at MagicSword | Co-Host of Atomics on a Friday | LOLDrivers & Atomic Red Team Maintainer
Ryan "Chaps" Chapman @rj_chap
8K Followers 3K Following Threat Hunter. DFIR & Malware Analyst. @sansforensics Author (FOR528) & Instructor (FOR610). Husband & father. Retro gamer too! Comments = own.
Ian Hellen @ianhellen
2K Followers 211 Following Principal Dev, Microsoft Threat Intelligence Center Author/maintainer of #msticpy and #msticnb Python packages for CyberSec.
VampireXRay @VampireXray
85 Followers 1K Following Cyber Security Analyst | Reverse CTF Player | INTJ 🇵🇸🇪🇬
Vishal Jha @Pipe2AI
5 Followers 98 Following Data AI Engineer | Mastering pipelines to turn raw data into AI breakthroughs | Builder sharing code, tools, & real-world hacks | Learning & growing together.
UHVwbw== @UhVwbw
0 Followers 42 Following
Rojo Security @rojosecrt
0 Followers 53 Following
goutham0164 @goutham0164
2 Followers 452 Following
Daniel Haga @danie31878
59 Followers 937 Following to bring with our artistic value $ with fun diy.. projects created and shared with peers and not forget the smiles 😃
عبدالعزيز @AbuzaidAziz7
53 Followers 795 Following
xjftapiax @xjftapiax
17 Followers 117 Following Husband, Father, Passionate about all things Digital, Cloud and Cyber Security, Vynil Lover, Vynil Collector, and of course Linux User & VMware User !!
Ethan Aviel Leon @EthanAvielleon
6 Followers 467 Following 🛡️ Freelance Pentester & Security Consultant | 🔍 Bug Bounty Hunter | 🏅 HOF: Netflix, Mastercard, United Nation, OLX, Under Armour | 🎥 YouTuber |✍️ Blogger |
Gowtham Selvaraj 🇮... @GowthamSelvar19
95 Followers 2K Following Cyber Security Engineer @nike*, Cyber security Consultant - @EY_consulting Cyber Security Analyst - @Rockstargames, Senior Security Analyst - @Capgemini
GhA @alex_gheor7
0 Followers 40 Following
Xygeni @xygeni
180 Followers 370 Following Secure your Software Development and Delivery. #Cybersecurity #ASPM #OSS #DevSecOps #AppSec
GD @GD_pete49026964
0 Followers 22 Following
VEY SREYPICH @Sreypich999
4 Followers 363 Following
I. B. Baias @iBaias
31 Followers 159 Following
Nirvaan_x @NirvaanX
1 Followers 35 Following
amir @Amir__Alibeigi
0 Followers 53 Following
Orlando Lasso @olasso
135 Followers 466 Following
tedwjones @tedwjones
40 Followers 395 Following
Khushiswaraditya Ghid... @K_Swaraditya
2 Followers 44 Following
Leonel Marin @LeonelM41262107
28 Followers 271 Following Mis gustos son el café negro sin azúcar, la tranquilidad del campo y la Ciberseguridad
Goutham Rock star @harisad_7
29 Followers 880 Following
Falcon @F8i8495312
25 Followers 871 Following
Ruturaj Humbe @ruturaj_humbe_
22 Followers 674 Following
Jason @jasonkasih
0 Followers 537 Following
Shina Mashiro @ShiinaaM
381 Followers 4K Following Microsoft Sentinel • SIEM Engineer • Threat Hunter
𝓙𝓪𝓬𝓴2 @2RunJack2
1K Followers 3K Following #ThreatIntel Researcher @S2W_Official @TALON_INTEL Main Author of Threat Intel Report 'Campaign DOKKAEBI : Documents of Korean and Evil Binary' / Formerly FSI
Jux Mux @UxTruckLuck
57 Followers 172 Following if the rule you followed brought you to this, of what use was the rule?
csirtiocs @csirtiocs
0 Followers 55 Following
Aluor Daniel Nyamor @Okonkwo4Reel
57 Followers 233 Following Just your friendly local Barkeep and Cybersecurity Researcher.
clearance @clearance44941
7 Followers 222 Following
Monray Van huyssteen @MVHCyB3R
0 Followers 54 Following
Lenslok @LensLok
13 Followers 437 Following
Thomas Verheyden @ThomasVrhydn
609 Followers 694 Following Freelance Security Architect | blogs: https://t.co/txmlxWpzch Microsoft MVP
csgaee @csgaee
130 Followers 2K Following Malware researcher @EG_CERT | threat intelligence @nowhere_reallll
AJ King @ajkingio
178 Followers 734 Following Leading Threat Research @Splunk (@Cisco) | ex-@SnapAttackHQ | Detection Engineering | AI Tinkerer | Dad | https://t.co/ljHLotXEMm
Keshava Das @KeshavD17925295
10 Followers 422 Following
Mattias Borg @MattiasBorg82
895 Followers 703 Following Microsoft Security MVP (SIEM & XDR) - Threat Hunting - CEH - Instructor (cyber security), Speaker | Happy Hunting #HappyHunting
alongkot @alongkot
1 Followers 76 Following
bash bellwether @JoaoAlves07070
64 Followers 2K Following Pentester | Red Team | OSINT | Autodidata | Polimata
b_quiet @next_trumpet_gr
7 Followers 179 Following
Cyb3rCuy @Cyb3rCuy
74 Followers 9 Following
ThreatHuntersForge @HuntersForge
2K Followers 2 Following Data Science, Threat Hunting & Open Source Projects 🍻 Founders: @Cyb3rward0g @Cyb3rPandaH
THE-HELK @THE_HELK
7K Followers 46 Following #ThreatHunting #BigDataAnalytics #MachineLearning Author: @Cyb3rWard0g
Security Datasets @SecDatasets
2K Followers 5 Following Contributing datasets, from different platforms, to the InfoSec community to expedite data analysis and threat research! https://t.co/j62Xx21lEc
ThreatHunter-Playbook @HunterPlaybook
6K Followers 7 Following I document #ThreatHunting playbooks in the form of #jupyter notebooks and share them with the world! https://t.co/djKSwSGXgA @Cyb3rWard0g
Jose Rodriguez 🇵�... @Cyb3rPandaH
6K Followers 365 Following #CyberDefense #AI #DataScience @GeorgeMasonU @NOVAcommcollege @pucp
Roberto Rodriguez �... @Cyb3rWard0g
26K Followers 681 Following AI Security Researcher @nvidia | Prev: @Microsoft @awscloud | Founder of the @OTR_CommunityTrends for United States
You might like
