Diaries by Keyword - SANS Internet Storm Center

Watch ISC TV. Great for NOCs, SOCs and Living Rooms: https://isctv.sans.edu

Handler on Duty: Jesse La Grew

Threat Level: green

Date	Author	Title
MONSTER LIBRA
2022-08-24	Brad Duncan	Monster Libra (TA551/Shathak) --> IcedID (Bokbot) --> Cobalt Strike & DarkVNC
MONSTER
2022-08-24/a>	Brad Duncan	Monster Libra (TA551/Shathak) --> IcedID (Bokbot) --> Cobalt Strike & DarkVNC
2008-09-11/a>	David Goldsmith	CookieMonster is coming to Pown (err, Town)
LIBRA
2022-09-26/a>	Xavier Mertens	Easy Python Sandbox Detection
2022-08-24/a>	Brad Duncan	Monster Libra (TA551/Shathak) --> IcedID (Bokbot) --> Cobalt Strike & DarkVNC
2022-07-20/a>	Xavier Mertens	Malicious Python Script Behaving Like a Rubber Ducky
2021-06-11/a>	Xavier Mertens	Keeping an Eye on Dangerous Python Modules
2018-11-19/a>	Xavier Mertens	The Challenge of Managing Your Digital Library
2015-12-23/a>	Rob VandenBrink	Libraries and Dependencies - It Really is Turtles All The Way Down!
2015-02-03/a>	Johannes Ullrich	What is using this library?