Skip to content
Threat Intelligence
  • Alerts
  • Downloads
  • Tools
  • IOC Feeds
Subscribe

Posts by threatinfo

  • Home
  • threatinfo
  • Page 2
About threatinfo
Why is the Sentinel Threat Intelligence Indicator API so full of bugs
Posted insentinel siem Threat Intelligence

Why is the Sentinel Threat Intelligence Indicator API so full of bugs

Microsoft have an API to add IOCs to the threat intelligence module in sentinel which can you read about here. My issue with it, is that is is full of…
Posted by threatinfo March 14, 2024
Posted inThreat Intelligence

MISP Database Size Getting Too Large

MISP MYSQL database growing too large and starting to get out of control?  API calls getting slower and slower?  Maybe its time to start doing some spring cleaning!  Find below…
Posted by threatinfo March 11, 2024
MISP – An Internal Error has occured – HTTP Status code 500
Posted inThreat Intelligence

MISP – An Internal Error has occured – HTTP Status code 500

If you receive a "An internal error has occured" error message when clicking on various menu functions in the MISP UI.  This is potentially due to model cache issues.  This…
Posted by threatinfo March 7, 2024
Whats a threat activity cluster?
Posted inThreat Intelligence

Whats a threat activity cluster?

A threat activity cluster is a grouping of security alerts which are related to a unique or similar activity taking place in an environment.  It leverages less of the standard IOCs in…
Posted by threatinfo February 25, 2024
Filebeat write: failed to publish events / connection reset by peer
Posted infilebeat logstash sentinel

Filebeat write: failed to publish events / connection reset by peer

I was using filebeat to listen on port 514 to accept rsyslog messages from AIX servers with the aim of filebeat then having an output to my logstash instance on…
Posted by threatinfo January 18, 2024
WSO Shell used in a Phishing-as-a-Service (PhaaS) 365 harvesting phishing campaign
Posted inThreat Intelligence

WSO Shell used in a Phishing-as-a-Service (PhaaS) 365 harvesting phishing campaign

1. Initial Incident Late 2023, we observed several of our users , working in different locations with different email domains but all either executive assistants or members of the different…
Posted by threatinfo January 13, 2024
Microsoft Sentinel Watchlists and wildcard/partial/substring table joins in KQL
Posted insentinel

Microsoft Sentinel Watchlists and wildcard/partial/substring table joins in KQL

Watchlists are a great way to house data in a table format to be used for various purposes, be it analytic creation or incident enrichment.  If you are using a…
Posted by threatinfo January 12, 2024
Best Alternative Web Scanner to Burp Suite
Posted inVulnerability

Best Alternative Web Scanner to Burp Suite

If you’re looking for a great open-source vulnerability scanner you can do a lot worse than  ZAP (Zed Attack proxy). All features are free unlike the likes of BurpSuite and…
Posted by threatinfo October 28, 2023
Lengths hackers go to when hiding their exploits
Posted inThreat Intelligence Vulnerability WordPress

Lengths hackers go to when hiding their exploits

Long gone is the time when if your website was compromised you'd be eaisly able to spot a file out of place by its date modified and then easily identify…
Posted by threatinfo October 26, 2023
Securing your WordPress site: The essentials
Posted inWordPress

Securing your WordPress site: The essentials

WordPress is very user friendly and easy to learn content management system (CMS) for creating websites.  However the ease of creating a website you would assume security is just as…
Posted by threatinfo October 14, 2023

Posts pagination

Previous page 1 2 3 Next page
Copyright 2025 — Threat Intelligence. All rights reserved. Bloghash WordPress Theme
Scroll to Top