# SANS SEC 504 - Resources | neo's brain
Malware stuff https://digitalcommons.lsu.edu/cgi/viewcontent.cgi?article=6527&context=gradschool_theses

Home SANS SEC 504 - Resources
Post
Cancel

# SANS SEC 504 - Resources

Posted Aug 23, 2023 Updated Aug 23, 2023
By Eric Reymundo
2 min read

#### Malware stuff

https://digitalcommons.lsu.edu/cgi/viewcontent.cgi?article=6527&context=gradschool_theses

https://github.com/volatilityfoundation/volatility/wiki/Mac

#### Volatility

A few volatility resources:

- https://github.com/volatilityfoundation/volatility/wiki
- https://forwarddefense.com/media/attachments/2021/05/15/memory-analysis-with-volatlity-analyst-reference-20200131.pdf
- https://andreafortuna.org/2019/04/03/how-to-analyze-a-vmware-memory-image-with-volatility/

(edited)

Andrea Fortuna

How to analyze a VMware memory image with Volatility

A very brief post, just a reminder about a very useful volatility feature. The process on a VMware machine is more simple than VirtualBox, just 4 simple steps: Suspend the virtual machine Navigate to the virtual machine’s directory and identify the `*.vmem` file Copy the vmem image to you analysis workstation Finally use the following Volatility command to convert the memory image to a dump ready for analysis: `$ volatility -f memory_image.vmem -O raw_image --profile=Win8SP0x86 raw2dmp` Now the memory dump can be analyzed with the usual methods.

#### Berkley Packet Filters

https://www.ibm.com/docs/en/qsip/7.4?topic=queries-berkeley-packet-filters

https://github.com/sbabicz/tcpdump-bpf-cheatsheet

#### Grouped Managed Service Accounts Overview

https://learn.microsoft.com/en-us/windows-server/security/group-managed-service-accounts/group-managed-service-accounts-overview

#### Placeholder

#### How much does a DDoS cost?

As per the Dark Web Price Index 2022, a 24-hour DDoS attack with 20-50k requests per second can cost the attacker as little as $200 USD. This low cost of entry means that even small-time attackers can launch devastating DDoS attacks that can cripple businesses and cause significant financial losses. Mar 10, 2023

https://sans-live-training.slack.com/archives/C059WKMLLDB/p1686064393422589

https://www.linkedin.com/pulse/true-cost-ddos-attack-protect-your-business-proactive-ali-el-tom/

linkedin.com

The True Cost of a DDoS Attack: Protect Your Business with Proactive Measures

Launching a DDoS attack can be relatively inexpensive for the attacker. As per the Dark Web Price Index 2022, a 24-hour DDoS attack with 20-50k requests per second can cost the attacker as little as $200 USD.

#### MITRE ATT&CK

- CWE (Common Weakness Enumeration)

#### Background Reports

Our disclaimer on Background Reports:
DISCLOSURE/DISCLAIMERThe information in this report is based on public, non-public, private, and proprietary databases. Search results may not be complete or accurate. Not all states or counties report or make available all records in electronic format. Online databases could contain incomplete information, duplication, inaccuracies, or false matches based on common names.Certified copies can be obtained and in-person/on-site verification of research results can be performed but will require additional investigative time and expenses that must be authorized.The general format of this report and parts of this report are produced from xxxxxxx. Information obtained from xxxxxx, and other public and private databases, does not constitute a “consumer report” as that term is defined in the federal Fair Credit Reporting Act, 15 USC 1681 et seq.(FCRA).As data from xxxxxxxx and other data sources is not specifically segregated, this report may not be used in whole or in part as a factor in determining eligibility for credit, insurance, employment, or another permissible purpose under the FCRA.Any questions, comments or concerns related to the information contained in this report should be directed to:
Keith Olive Enterprises, LLC
PO Box 26
Mountain Home, Texas 78058
Texas Private Security Bureau License #A19867

    OSINT on employees without permission will bite you big time if they ever bring up a LABOR board issue or lawsuit

#### Cheat sheets

https://packetlife.net/library/cheat-sheets/

##### Amazon Books

#### What 2 Log

https://what2log.com/

SANS SEC504 GCIH cybersecurity
This post is licensed under CC BY 4.0 by the author.
Share
Recently Updated

- Mac M1 Run Diablo 4 - Links
- Text and Typography
- Flaws.cloud walkthrough
- M1 Mac - How to Switch the Terminal between x86_64 and arm64
- Admonitions Documentation

Trending Tags
cybersecurity diablo 4 docs terminal diablo M1 apple silicon cheatsheets cloud GCIH

### Further Reading

Aug 23, 2023

#### Building a Custom Malware Analysis Lab Enviornment

https://www.sentinelone.com/labs/building-a-custom-malware-analysis-lab-environment/ Introduction Building the right malware analysis environment is the first step for every malware researcher. ...

Aug 23, 2023

#### Flaws.cloud walkthrough

Flaws.cloud walkthrough DayCyberWox Walkthrough: https://www.youtube.com/watch?v=fEjAryrzLSQ Write up: https://daycyberwox.com/exploiting-aws-1-a-beginners-guide-flawscloud#heading-level1 1 2 3 4...

Aug 23, 2023

#### Mac M1 Run Diablo 4 - Links

Resources that can help you get started with the Game Porting Tool Kit to run Diablo 4 on Mac M1 architecture. Resources: https://www.outcoldman.com/en/archive/2023/06/07/playing-diablo-4-on-...

Trending Tags
cybersecurity diablo 4 docs terminal diablo M1 apple silicon cheatsheets cloud GCIH

A new version of content is available.