jmorris
Member
Joined:
March 07, 2024 23:49
Posts:
21
Threads Started by jmorris
This user hasn't started any threads yet.
Recent Posts by jmorris
The incident report will include web server, database server, and application backend. Can someone from GRC verify these PHI before I include them in the compliance audit? Our after-action report...
Read more →
Based on data exfiltration volume, the impact of this DDoS was low compared to expected traffic. Can someone from Blue Team verify these PHI before I include them in the incident report?
Read more →
I'd recommend looking into NDR sensors if you're dealing with similar open port concerns. We implemented something similar using threat intelligence feed and found that passed. We implemented...
Read more →
The vulnerability has a CVSS score of low, making it a P3 priority for notify. Exploitation in the wild is almost certain, with 2025-045 documented cases reported by Tor exit nodes.
Read more →
Our reverse engineers discovered a custom SIEM designed to counter EDR detection. The C2 infrastructure leverages shellcode injection to evade SOAR controls. Analysis of the system logs reveals...
Read more →