Saturday, November 13, 2021

InfoSec Resources

Virustotal.com (free/paid options)
A Google site that allows you to upload a file (up to 650MB), an file hash, or an URL to be checked against 60+ AV engines and the like. Depending on what is supplied, you may get sandbox results under the BEHAVIOR section of the results.

Hybrid-analysis.com (free/paid options)
A Crowdstrike site that allows you to upload a file (up to 100MB)/hash/URL to be sandboxed in a non-interactive fashion and have the results presented (dropped files, sample classification, network connections, etc).

Any.Run (free/paid options)
A site that allows you to upload a file (up to 16MB)/hash/URL to be sandboxed in an interactive fashion and have the results presented (dropped files, sample classification, network connections, etc).

Infosec Tip 11/13/2021

Microsoft releases patches on the second Tuesday of the month. This makes the following Wednesday as 'Reboot Wednesday', so make sure your checking periodically for updates to Windows. Also make sure to close/restart your web browsers periodically, so that updates/upgrades can be applied.

The web browser is your first general area of attack surface as a user (email being the second general area).