[Defender Fridays] Typhoon Season: Hunting chinese state actors with the latest CISA joint advisory with David Burkett - September 19

[nicoleboydlc]

Host: David Burkett, Founder of Magonia Research

Topic: Typhoon Season: Hunting Chinese State Actors with the Latest CISA Joint Advisory

Register for the series: Defender Fridays | LimaCharlie

See you then!

[nicoleboydlc]

Chat links!

• https://www.cisa.gov/news-events/cybersecurity-advisories/aa25-239a

• https://docs.zeek.org/en/master/logs/ssh.html

• https://www.splunk.com/en_us/blog/security/peak-threat-hunting-framework.html

• https://github.com/zeek/zeek-docs/pull/357

• https://dirkjanm.io/obtaining-global-admin-in-every-entra-id-tenant-with-actor-tokens/

• https://tryhackme.com/room/zeekbro

• https://sslbl.abuse.ch/ja3-fingerprints/

• https://youtu.be/8izmlbFkBo4

• https://youtu.be/t7bhnK47Ygo

• https://ja4db.com/

• https://docs.ja4db.com/ja4±database/usage/read-the-database

• https://docs.zeek.org/en/master/logs/ssl.html#leveraging-ja3-and-ja3s

• https://zeek.org/slack

• https://www.linkedin.com/in/signalblur/