Raphaël Vinot

Improve observables rendering

1

Right now, we only see the observables (URL for example). When they come from a mail, it is often an HTML blob and we can get the value of the...

=> https://github.com/volexity/threat-intel/tree/main/tools/one-extract

Look at: https://github.com/DissectMalware/pyOneNote

# Goals 1. See how many workers are finishing in which status 2. See which mime type have the workers finishing in specific status (=> if a specific mimetype is...

For example: if we reach the max file number in the extractor, make it an error instead of an alert.

* Admin * Users * Advanced users * ... figure out who else is using it

[Security] SSL/TLS Man in the middle

2

Hi, The app doesn't check the validity of the certificates it receives from the server: https://github.com/gggard/AndroidCaldavSyncAdapater/blob/27e8a0f8495c92e0780d450bdf0c7cec77a03a55/CalDAVSyncAdapter/src/org/gege/caldavsyncadapter/caldav/EasySSLSocketFactory.java#L76 This is a critical but making it very easy for anyone to snoop into...

All the modules except the ones needed for mass storage should be blacklisted by default.

It should never happen: the contents of the partitions are in their own repository. In case, for some raison, the attacker manage to exploit the conversion, it does not hurt...

Handle them the same way as exe files.