curben
/
blog
mirror of https://gitlab.com/curben/blog
1
0
Fork 0
Code Issues Releases Wiki Activity
1,410 Commits 5 Branches 0 Tags 39 MiB
Commit Graph

1410 Commits

Author SHA1 Message Date
Ming Di Leom 1c48ed888a
chore(copyright): 2025 2025-06-30 08:59:14 +00:00
Ming Di Leom ed06d65ce4
feat(threat-hunting): FileFix detection 2025-06-30 08:55:47 +00:00
Ming Di Leom 1df78c65c5
feat(threat-hunting): Excessive AWS WAF Blocked Events 2025-06-30 08:52:58 +00:00
Ming Di Leom 1bde8ee4c6
feat(threat-hunting): chisel proxy detection 2025-06-30 08:44:57 +00:00
Ming Di Leom 61e552b0ea
chore(theme): link to /threat-hunting/ 2025-06-30 08:42:58 +00:00
Ming Di Leom 57ca66d09d
page(threat-hunting): domain admins report 2025-06-09 06:52:25 +00:00
Ming Di Leom 4ac82f1ed1
fix(defender-incident): combine filePath, url, processCommandLine into a field 2025-06-01 12:06:18 +00:00
Ming Di Leom 6a39f54934
page(threat-hunting): Account Discovery Using DIR, WHOAMI, and NET 2025-06-01 12:02:01 +00:00
Ming Di Leom 429092e81a
page(threat-hunting): Windows Sandbox execution 2025-06-01 11:56:27 +00:00
Ming Di Leom 93880a8100
page(threat-hunting): Windows JScript execution 2025-06-01 11:54:08 +00:00
Ming Di Leom 7913075926
page(threat-hunting): Cipher.exe execution 2025-06-01 11:50:45 +00:00
Ming Di Leom d824585ced
page(threat-hunting): Disable Microsoft Defender (Registry) 2025-05-20 09:01:09 +00:00
Ming Di Leom 16e9e6ac56
fix(clickfix-detect): update fields 2025-05-20 08:45:34 +00:00
Ming Di Leom 80239ea808
post(openwrt-nts): persist config across reboots 2025-05-08 09:45:39 +00:00
Ming Di Leom 8fc44aae9d
fix(unusual-ua): include firefox 2025-05-04 01:24:30 +00:00
Ming Di Leom 872144936c
page(threat-hunting): Unusual User Agent 2025-05-04 01:22:44 +00:00
Ming Di Leom daedc05d2f
page(about): SSH access is now restricted to Tailscale 2025-04-09 10:36:50 +00:00
Ming Di Leom 7ee64d3b4a
page(about): remove npm and codeberg badges 2025-04-09 10:19:56 +00:00
Ming Di Leom 8f13865138
page(threat-hunting): Clear-text password search 2025-04-09 10:18:07 +00:00
Ming Di Leom 7bbc0ec694
post(centos-dnf-auto): clarify sentence 2025-04-08 09:01:08 +00:00
Ming Di Leom 533e1099b5
chore(rmm-monitor): UltraViewer 2025-04-08 08:25:26 +00:00
Ming Di Leom d037a782fd
page(threat-hunting): ShareName suffix 2025-04-08 08:24:07 +00:00
Ming Di Leom b330435a1f
build: clean up artifact prior to build 
somehow cache in netlify
 2025-04-07 08:30:25 +00:00
Ming Di Leom 0866cd3890
docs: update mirror order according to update frequency 2025-04-06 12:22:07 +00:00
Ming Di Leom 4803ba6ff4
page(threat-hunting): update InnoDownloadPlugin description 2025-04-06 12:06:57 +00:00
Ming Di Leom 978e8c6ae6
page(threat-hunting): file hiding using attrib.exe 2025-04-06 12:04:48 +00:00
Ming Di Leom 751e9e7c66
page(threat-hunting): powershell auto-start 2025-04-06 12:02:04 +00:00
Ming Di Leom cd2a742df9
page(threat-hunting): CobaltStrike detection through network share discovery 2025-04-06 11:49:47 +00:00
Ming Di Leom b7abc47a5c
page(threat-hunting): New Network Share detected 2025-04-06 11:43:44 +00:00
Ming Di Leom fb69f36eb2
page(threat-hunting): tailscale detection 2025-04-06 11:02:51 +00:00
Ming Di Leom 4dd73a7f77
post: Running Tailscale in GitLab CI/CD with Alpine container 2025-04-06 08:42:41 +00:00
Ming Di Leom 3de900c5d3
ci(gl): start tailscaled as ephemeral node 
https://tailscale.com/kb/1278/tailscaled#flags-to-tailscaled
 2025-04-05 07:24:27 +00:00
Ming Di Leom 205d3fd854
chore(license): update year 2025-04-04 22:07:59 +00:00
Ming Di Leom 3f88d3dc20
page(threat-hunting): InnoDownloadPlugin user-agent observed 2025-04-01 09:27:20 +00:00
Ming Di Leom e731f85296
ci(gl): start tailscaled without openrc 
https://stackoverflow.com/questions/78269734/is-there-a-better-way-to-run-openrc-in-a-container-than-enabling-softlevel
 2025-03-30 09:32:21 +00:00
Ming Di Leom 3fa8c33ea5
page(threat-hunting): ClickFix detection 2025-03-29 07:35:17 +00:00
Ming Di Leom db84c03325
chore(rmm-monitor): TightVNC 2025-03-29 06:58:46 +00:00
Ming Di Leom 443c7ecd18
ci(gl): deploy via tailscale 
workaround provided by https://github.com/tailscale/tailscale/issues/11628#issuecomment-2039012828
 2025-03-28 10:22:53 +00:00
Ming Di Leom 0f02802ebd
ci(gl): base64-decode variables 2025-03-17 08:02:57 +00:00
Ming Di Leom f36554abe8
feat(threat-hunting): Defender Incident 2025-03-13 10:08:59 +00:00
Ming Di Leom f2b06016c1
feat(threat-hunting): Regasm.exe execution 2025-03-08 07:23:15 +00:00
Ming Di Leom 556ee14d9f
feat(threat-hunting): Excessive RDP 2025-02-26 05:47:41 +00:00
Ming Di Leom ec7268cf85
chore(threat-hunting): updated date 2025-02-16 10:18:04 +00:00
Ming Di Leom b5a08380d4
feat(threat-hunting): WinrsHost.exe execution 2025-02-16 10:17:08 +00:00
Ming Di Leom 7da3ce2538
feat(threat-hunting): CDB.exe execution 2025-02-16 10:15:05 +00:00
Ming Di Leom 976d1457d1
chore(rmm-monitor): RealVNC & Dameware 2025-02-16 10:04:07 +00:00
Ming Di Leom 9ea18b1495
page(threat-hunting): cmd without extension 2025-02-08 01:07:45 +00:00
Ming Di Leom 9c02132f68
page(threat-hunting): "Rundll32 Scheduled Task" 2025-02-03 06:46:56 +00:00
Ming Di Leom afbf7f6428
page(threat-hunting): SimpleHelp,Netop,Impero 2025-02-03 06:31:29 +00:00
Ming Di Leom 42ba8a01de
page(threat-hunting): rename snow_cmdb_lookup to cmdb_ci_list_lookup 2025-02-03 06:24:49 +00:00