Cracking the Crystal Palace - "To target Crystal Palace artefacts specifically, I only looked at the "stuff" that it inserts into the final assembly, rather than any code that can be written"

rastamouse.me

cross-posted to:
blueteamsec

Cracking the Crystal Palace - "To target Crystal Palace artefacts specifically, I only looked at the "stuff" that it inserts into the final assembly, rather than any code that can be written"

rastamouse.me

digicatM to

blueteamsecEnglish · 2 months ago

cross-posted to:
blueteamsec

Cracking the Crystal Palace

rastamouse.me

If you follow this blog, you'll know I've been posting about Crystal Palace a LOT recently, mostly from an attack perspective. Today, I thought I'd channel my blue-teamer alter ego and look at Crystal Palace from a defence perspective. That is, are there any easy "tells" that a capability has

You must log in or # to comment.

Chat

blueteamsec

Create a post

You are not logged in. However you can subscribe from another Fediverse account, for example Lemmy or Mastodon. To do this, paste the following into the search field of your instance: !blueteamsec@infosec.pub

For [Blue|Purple] Teams in Cyber Defence - covering discovery, detection, response, threat intelligence, malware, offensive tradecraft and tooling, deception, reverse engineering etc.

Visibility: Public

This community can be federated to other instances and be posted/commented in by their users.

7 users / day
72 users / week
266 users / month
905 users / 6 months
223 local subscribers
617 subscribers
2.32K Posts
177 Comments
Modlog

mods:
digicat