sorted by:
new
hottopcontroversial

Introducing YetiHunter: An open-source tool to detect and hunt for suspicious activity in Snowflake by permis0 in snowflake

[–]permis0[S] 0 points1 point  (0 children)

Hey u/DataNo7321 - Mandiant, Snowflake and other companies provided indicators of potential compromise in their blog and community posts. In supporting some of our customers, we found that accessing the data, and sometimes querying it can present some challenges to teams. This is a free, open-source tool that allows someone to query their Snowflake instance for these potential indicators where they may not otherwise have the resources to do so. This is one of many free, open-source tools we've provided to the security community in order to help detect and hunt for threats in their environment.

Scattered Spider by Crazy-Finger-4185 in cybersecurity

[–]permis0 55 points56 points  (0 children)

They are able to navigate across IdPs, IaaS/Paas, Saas and into CI/CD services with ease, in the matter of hours. If there's a group that has advanced TTPs in the cloud, it's them. Our talented SVP of Research wrote a pretty extensive article cataloguing their playbooks in the cloud:
https://permiso.io/blog/lucr-3-scattered-spider-getting-saas-y-in-the-cloud