Conversation

Notices

1. Embed this notice
   Brian Clark (deepthoughts10@infosec.exchange)'s status on Thursday, 17-Apr-2025 13:08:56 JST Brian Clark

   • Sophos X-Ops
   • Sean Gallagher :verified: 🐀 :donor:

   Security Firm @SophosXOps published another report, this one on incidents at small and medium-sized businesses by @thepacketrat and Anna Szalay. One of the things I always look for in these reports are easy #cybersecurity wins -- and this report has a bunch of them.

   First off - take a look at this chart: Top 15 dual-use tools. Imagine the pain you can cause threat actors by blocking the use of these tools and disrupting their playbooks!

   • Embed this notice
     Tim Hergert (cjust@infosec.exchange)'s status on Thursday, 17-Apr-2025 20:58:49 JST Tim Hergert

     in reply to

     • Sophos X-Ops
     • Sean Gallagher :verified: 🐀 :donor:

     @deepthoughts10 @SophosXOps @thepacketrat not to sound ignorant - but who deploys mimikatz as a legitimate tool within their environment? Yes - I get it's value as a pen testing tool - but if you've got copies of this just casually installed in your environment - you have some core IT hygiene issues to contend with.