PowerHuntShares.v2: New Sample HTML Report Here is a sample report for those who wanted it. Enjoy! raw.githubusercontent.com/Ne… @NetSPI

The PowerHuntShares v2 update now includes: interesting files, password extraction, and LLM fingerprinting! Check it out & give me some feedback! netspi.com/blog/technical-bl…

Big thanks to @TheHackerValley for having me on yesterday! It's always fun to talk about ransomware and LLMs. Here's a link if you missed it: linkedin.com/events/71222291…

I will say that EDR has made great strides in the last few years though.

Another meme from the team. I wish it wasn't true, but out-of-the-box detection rules aren't enough.

Ignorance is not bliss in an age of ransomware:

Here's another one from the @NetSPI BAS team:

One more because it's Friday :)

Here are a few more links focused on .net framework app domain hijacking and .net core startup hooks: .NET Framework App Domain Hijacking youtube.com/watch?v=BIJ2L_rM… rapid7.com/blog/post/2023/05… .NET Core Startup Hooks rastamouse.me/net-startup-ho… github.com/dotnet/runtime/bl…