otter.team Blog

Table of file signatures (aka "magic numbers") by Gary Kessler https://www.garykessler.net/library/file_sigs.html (via aboutdfir.com)

Christophe Tafani-Dereeper (christophetd on GitHub) has compiled a Windows Basic Events 101 mindmap for "typical manipulations" These can give you a good starting point when diving into Windows Events. Check the mindmap at  https://github.com/christophetd/hunting-mindmaps

New update to SysMon (v11.1) that allows for capturing alternate data streams (like Mark of the Web). This will make for interesting threat hunting and intel on downloaded files. (via Josh Lennon on LinkedIn ) Check the offical site:  https://docs.microsoft.com/en-us/sysinternals/

Show more than one time zone (up to 2) in Windows 10 https://www.windowscentral.com/how-set-multiple-time-zone-clocks-windows-10 Show times for more than one time zone (also up to 2) in Outlook calender https://support.microsoft.com/en-gb/office/add-remove-or-change-time-zones-5ab3e10e-5a6c-46af-ab48-156fedf70c04

Can a system be considered truly reliable if it isn't fundamentally secure? Or can it be considered secure if it's unreliable? Security is crucial to the design and operation of scalable systems in production, as it plays an important part in product quality, performance, and availability. In this book, experts from Google share best practices to help your organization design scalable and reliable systems that are fundamentally secure. The book is written by Heather Adkins, Betsy Beyer, Paul Blankinship, Ana Oprea, Piotr Lewandowski and Adam Stubblefield. Get your copy here:  https://landing.google.com/sre/resources/foundationsandprinciples/srs-book/

Check their latest blog: https://www.splunk.com/en_us/blog/security/staff-picks-for-splunk-security-reading-june-2020.html