Tag: powershell

• Log4J – CrowdStrike RTR Script

  Vendors are offering tools left and right since the Log4J fun ruined most peoples Christmas break. Amongst these Vendors is CrowdStrike……

  Securethelogs

  29th Dec 2021

  Blue Team, Cyber Security

  api, cast, cast.exe, crowdstrike, cs, log4j, powershell, rtr, security

• CrowdStrike – On-Demand Scan v1

  One of the downsides to CrowdStrike is no on-demand scanning. On one hand you can see why, on the other, you have use cases that need it…..

  Securethelogs

  29th Nov 2021

  Blue Team, Cyber Security

  api, crowdstrike, edr, malware, powershell, sandbox, script, security, tech

• CS-MalQuery – Part 2

  Github:https://github.com/securethelogs/Powershell/blob/master/CrowdStrike/CS-MalQuery.ps1 Since writing part 1 (Here), I’ve been looking into how to expand on the script. I had a thought… if I’m a user and have gotten to the point I’m running this script, I may need more information than if it’s just there. This made me add the Hybrid-Analysis API and Actors API from…

  Securethelogs

  12th Nov 2021

  Blue Team, Cyber Security

  api, crowdstrike, hacking, powershell, psfalcon, security

• CrowdStrike – MalQuery API

  Github: https://github.com/securethelogs/Powershell/blob/master/CrowdStrike/CS-MalQuery.ps1 The MalQuery API from CrowdStrike helps their customers validate if the protection is there for a certain IOCs. Nowadays, we are bombarded with IOCs and because there are so many, for some, skimming through and extracting what they can block is more efficient than reading them all. Sometimes it’s good to see the…

  Securethelogs

  9th Nov 2021

  Blue Team, Cyber Security

  api, crowdstrike, hybrid-analysis, ioa, ioc, powershell

• Bad Logic App – C2 Simulation

  simulation. Running attack simulations internally is very important to build/improve security posture. C2 servers are very common in the wild so…

  Securethelogs

  6th Sep 2021

  Blue Team, Cyber Security, Red Team

  api, c2, command, hacking, logic, microsoft, powershell