CyberBattleSIM
CyberBattleSim allows for the training of automated agents, and provides a Python-based OpenAI Gym interface for that. In the simulated environments, defenders can leverage reinforcement learning algorithms and set up…
PSExec Privilege Escalation
PsExec is a Sysinternals utility designed to allow administrators to perform various activities on remote computers, such as launching executables and displaying the output on the local computer or creating…
Posted inMITRE
Purple Knight AD Assessment Tool
Microsoft Active Directory (AD) is used by 90 percent of enterprises as the primary source of trust for identity and access, but it’s also exploited in many cyberattacks. Since AD…
Posted incybersecurity Endpoint Security Microsoft
Patch Tuesday 03’2021.
Microsoft’s March Patch Tuesday security updates address 89 vulnerabilities in its products, including Microsoft Windows components, Azure and Azure DevOps, Azure Sphere, Internet Explorer and Edge, Exchange Server, Office and…
Three more Malware strains in to SolarWinds
Microsoft has started tracking the threat actor behind the SolarWinds attack as NOBELIUM. The company has identified three new pieces of malware that it believes are used by the group…
Microsoft released Code to Detect SolarWinds hack
A group of hackers managed to infiltrate the networks of a company called SolarWinds and trojanize its most widely used software. taken the world in to a surprise Initial investigation…
SolarWinds Hack downloaded some Microsoft data
Microsoft's security team completed its investigation into its SolarWinds-related breach and found no evidence that hackers abused its internal systems or official products to pivot and attack end-users and business…
Zerologon Enforcement Mode
The Netlogon distant code execution vulnerability, disclosed final August, has been weaponized by APT teams.Microsoft has launched part two mitigation for the important Zerologon vulnerability disclosed in August 2020. CVE-2020-1472…