Forums

Important community updates will be posted here

This forum is dedicated to the sharing of Threat Information that would be helpful for detection and information security professionals. This may include known exploit IPs, C2 Domains, Sharing of malware samples, etc 

Note: This forum Is restricted to verified members who are known to be information security professionals or researchers. 

This forum is dedicated to discussing about phishing and spear-phishing campaigns 

Discuss exploits and other initial access methods being used by attackers to execute code or gain a foothold. 

Discussion regarding attacker reconnaissance & environment discovery methodologies and capabilities. 

Discussion regarding attacker post-exploitation tooling (such as Cobalt Strike, DanderSpritz, etc) and techniques. This discussion capabilities, detection methodology, and more 

This includes:

• Credential Theft / Access
• Lateral Movement 
• Command & Control (C2)
• Data Exfil

This forum is dedicated to the discussion of ransomware threat actor activity including ransomware variants, tools, techniques, and more. 

Discussions about detection methodologies, tools, and rules to help detect attacker activity. 

Look here for help with:

• SIEM Detection Rules
• SIGMA
• YARA
• EDR Detections 

This forum is dedicated to discussion about Microsoft 365 including Office 365, Teams, Sharepoint, Azure AD, etc. 

This forum is dedicated for discussion around Microsoft's Azure solutions including Azure VMs, Azure Kubernetes Engine (AKS), Azure Container Instances, Azure Active Directory, and more. 

This forum is dedicated to discussion about Amazon Web Services (AWS) including Identity and Access Management, EC2, Amazon Elastic Kubernetes Service (EKS), AWS Relational Database Service (RDS), AWS IoT, etc. 

This forum is dedicated to discussion around Google's Cloud Platform (GCP), including Google IAM, Compute Engine, Identity Aware Proxy, Google Kubernetes Engine (GKE), Big Query, Cloud Run, and more. 

This is a forum dedicated to discussion around Kubernetes & general container security topics. 

Note: Discussion regarding vendor IaaS specific flavors of Kubernetes or containers, please post in the appropriate forums (EKS, GKE, etc)

Post here about general security discussion.

This forum is intended to discuss technology vendors and solutions for Endpoint Detection and Response (EDR), Security Information and Event Management (SIEM, Email Filtering, Web Application Firewalls, etc. 

Forum for discussion of non security topics (personal, other hobbies, non infosec news, etc). 

Forum where users can create threads asking to become verified so they can see and share threat information about attacker tools, techniques, and infrastructure. 

For more details please view the following post.