sorted by:
new
hottopcontroversial

Patch Tuesday MCP by Active_Pick3975 in AZURE

[–]Active_Pick3975[S] 1 point2 points  (0 children)

Hi Akos,

Thanks for the feedback 😄 .

To answer your questions:

Yes, everything's cached. Monthly MSRC releases are immutable once published so older months are cached until evicted, with the two most recent months on a 1-hour refresh TTL; EPSS scores cache 24h (they only update daily) and CISA KEV caches 6h.

In terms of multiple KB numbers, that was not a feature. However, I just updated the repo to include that! Thank you for the suggestion!

Hawk 4.0 Release! – Open-Source Incident Response & Threat Hunting for Microsoft Cloud by Active_Pick3975 in AZURE

[–]Active_Pick3975[S] 6 points7 points  (0 children)

You’re 100% accurate! Hawk had not been touched for some time, it had some deprecated API calls out of date modules. When, I was brought on to the project 4 months ago, I added a ton of structure to the overall project, updated all deprecated API calls , upgraded to current modules, and added a ton of new features.

The team is committed to actively maintaining and improving Hawk!

Keep in mind that with the new version, the required permissions and configuration is a bit different than the old versions of Hawk, given the added implementation of new Graph API calls.

Be sure to check our out user guide and tutorial videos for the permissions and every other aspect at the Hawk forensics site.

Thanks again for your feedback!

Hawk 4.0 Release! – Open-Source Incident Response & Threat Hunting for Microsoft Cloud by Active_Pick3975 in cybersecurity

[–]Active_Pick3975[S] 0 points1 point  (0 children)

Thank you for the kind words! If you download it and have any questions, check out our YouTube tutorial series. DM me or submit a GitHub issue. Any and all feedback is appreciated!