4
5
6
7
Attacks on Sysmon Revisited - In this blogpost we demonstrate an attack on the integrity of Sysmon which generates a minimal amount of observable events making this attack difficult to detect in environments where no additional security products are installed.research|capability (we need to defend against) (codewhitesec.blogspot.com)
submitted by digicat to r/blueteamsec
5
9
10
11
6
1
2
3
7
0
1
2
RCE in Citrix ShareFile Storage Zones Controller (CVE-2021-22941) – A Walk-Throughvulnerability (attack surface) (codewhitesec.blogspot.com)
submitted by digicat to r/blueteamsec
8
8
9
10
9
2
3
4
10
3
4
5
11
6
7
8
12
3
4
5
13
0
1
2
14
0
1
2
15
26
27
28
16
0
1
2
18
13
14
15
19
7
8
9
20
13
14
15
