Gam4er (@Gam4enko) profile picture

Gam4er

@Gam4enko

ИБ, ИТ и котики

 Moscow, Russia
Joined September 2017
  • Tweets36
  • Following187
  • Followers30
5Media
Photo by Gam4er (@Gam4enko)Photo by Gam4er (@Gam4enko)Photo by Gam4er (@Gam4enko)Photo by Gam4er (@Gam4enko)
Analyst report for IR cases from 2020 is available github.com/klsecservices/Pub… #DFIR #incidentresponse #threathunting
Image from kl_secservices (@kl_secservices)
Image from kl_secservices (@kl_secservices)
Image from kl_secservices (@kl_secservices)
1
19
3
10
All incident response cases from 2019 in our yearly analyst report. Adversaries initial vectors, tools, #MITRE techniques and more. github.com/klsecservices/Pub…
Image from kl_secservices (@kl_secservices)
1
30
2
23
Manufacturing (CNC) security presented by @574rz on @SecurityWeek’s Singapore ICS Cyber Security Conference. Now watch your #CNC spindles and #industry40 closely! Slides are finally available. Whitepaper to be published soon. #icssecurity #otsecurity github.com/klsecservices/Pub…
Image from kl_secservices (@kl_secservices)
22
2
16
More on DCS security in our power plant automation research github.com/klsecservices/SPP… from #36c3 talk media.ccc.de/v/36c3-10689-on…. Now with DIY assessment, wordlists and awesome visuals. tldr; learn to do basic assessment by yourself, ask uncomfortable questions, update your DCS
Image from kl_secservices (@kl_secservices)
Image from kl_secservices (@kl_secservices)
Image from kl_secservices (@kl_secservices)
27
17
A guide on power plant automation and its security issues on #36c3 conference. Slides and tools from our talk github.com/klsecservices/Pub… kudos to @repdet @_moradek_ @Alender911 @epotseluevskaya @zero_wf @574rz
Image from kl_secservices (@kl_secservices)
Image from kl_secservices (@kl_secservices)
Image from kl_secservices (@kl_secservices)
1
27
21
Analysts’ predictions on growing corporate threats for 2020 #cloud #insiders github.com/klsecservices/Pub…
11
1
6
Stories and lessons from Incident Response practice by Pavel Kargapoltsev on #ZeroNights 2019. Thanks for all the questions from audience and organisers for great event! Get the slides github.com/klsecservices/Pub… ATT&CK inside! #DFIR #blueteam
Image from kl_secservices (@kl_secservices)
Image from kl_secservices (@kl_secservices)
18
13
Most used #MITRE ATT&CK techniques and more operational security stats in our #threathunting report github.com/klsecservices/Pub…
Image from kl_secservices (@kl_secservices)
57
1
68
#zeroday exploit in Windows Kernel Transaction Manager was used in APT attack. securelist.com/zero-day-in-w…
Image from Anton Ivanov (@antonivanovm)
67
1
109
Yerstaday I provided talk at the @offzone_moscow confference about hunting for EoP in Windows. Here you can find my slides speakerdeck.com/heirhabarov/… @offzone_moscow crew, thank you for the event! It was ammazing, you did a great job! Hope to see you at the OFFZOONE 2019 :)
Hunting for Privilege Escalation in Windows Environment

Hunting for Privilege Escalation in Windows Environment

Slides from my talk at the OFFZONE 2018 conference (https://www.offzone.moscow/report/hunting-for-privilege-escalation-in-windows-environment/)

speakerdeck.com
6
141
3
235
Offline bruteforce of AD accounts w/o authentication with AS-REP roasting attack by @_mohemiv github.com/hashcat/hashcat/p… #hashcat #activedirectory
Image from kl_secservices (@kl_secservices)
28
1
27
Just released s7scan by @zero_wf, a tool for enumerating Siemens S7 PLCs that supports both TCP/IP and LLC networks github.com/klsecservices/s7s…
GitHub - klsecservices/s7scan: The tool for enumerating Siemens S7 PLCs through TCP/IP or LLC...

GitHub - klsecservices/s7scan: The tool for enumerating Siemens S7 PLCs through TCP/IP or LLC...

The tool for enumerating Siemens S7 PLCs through TCP/IP or LLC network - klsecservices/s7scan

github.com
45
3
38
Some tricks how to detect Credential Dumping attack technique. Slides from my #ZeroNights talk slideshare.net/heirhabarov/h…
Hunting for Credentials Dumping in Windows Environment

Hunting for Credentials Dumping in Windows Environment

The document discusses credential dumping techniques in Windows environments, highlighting methods used by various threat actor groups to extract sensitive information from systems, including tools...

slideshare.net
30
47
🌟 . * . 🌙 * * . 🛰️ . ✨ * . * Thanks @Twitter, we can always use more space 🚀 . . . . * 🌏 * 🌞 * ☄️ #280characters
880
105,376
4,392
251,896
Load more