mandiant/red_team_tool_countermeasures
View on GitHub ↗ ★ 2,662 YARA archived
6 mentions on Hacker News by 6 people: 1 story, 5 comments · first 2020-12-08 · latest 2020-12-09
20082026
-
…will open that invoice attachment so he can pay it. 1. https://github.com/gentilkiwi/mimikatz 2. https://github.com/fireeye/red_team_tool_countermeasures/tre... Edit: To be clear I do work on an internal red team - we hack ourselves. I…
comment by mike_d · 2020-12-09 · in FireEye Shares Details of Recent Cyber Attack -
…They’ve also released signatures to detect the use of the compromised tools: https://github.com/fireeye/red_team_tool_countermeasures
comment by arafsheikh · 2020-12-09 · in FireEye Shares Details of Recent Cyber Attack -
Pretty big set of Yara signatures from FireEye to help detect their stolen tools in the wild. https://github.com/fireeye/red_team_tool_countermeasures
comment by DLA · 2020-12-08 · in U.S. Cyber Firm FireEye Says It Was Breached by Nation-State Hackers -
They linked their Snort rules, in case anybody else is interested: https://github.com/fireeye/red_team_tool_countermeasures/blo... It'll be interesting to see if these get any hits from scanners in the next couple weeks...
comment by yabones · 2020-12-08 · in FireEye Shares Details of Recent Cyber Attack -
▲ 2
Show HN: FireEye Red Team Tool Countermeasuresstory by 1cvmask · 2020-12-08 · 1 comment
-
…GitHub repo with their red team tool countermeasures, which they admirably released immediately: https://github.com/fireeye/red_team_tool_countermeasures/
comment by troydavis · 2020-12-08 · in FireEye Shares Details of Recent Cyber Attack