<style>/*<link href='https://www.blogger.com/dyn-css/authorization.css?targetBlogID=7909997287514869705&zx=5204ab2d-6425-412e-a925-be1a992b637a' media='none' onload='if(media!='all')media='all'' rel='stylesheet'/><noscript><link href='https://www.blogger.com/dyn-css/authorization.css?targetBlogID=7909997287514869705&zx=5204ab2d-6425-412e-a925-be1a992b637a' rel='stylesheet'/></noscript>
<meta name='google-adsense-platform-account' content='ca-host-pub-1556223355139109'/>
<meta name='google-adsense-platform-domain' content='blogspot.com'/>

<script async src="https://pagead2.googlesyndication.com/pagead/js/adsbygoogle.js?client=ca-pub-3050103893098139&host=ca-host-pub-1556223355139109" crossorigin="anonymous"></script>

<!-- data-ad-client=ca-pub-3050103893098139 -->

</head><body>*/</style>

CISA merilis alat visualisasi protokol C2 "RedEye" open source

techind

15 Oct, 2022

Foto Anonim

CISA selaku Badan Keamanan Dunia Maya dan Keamanan Infrastuktur telah meluncurkan alat baru RedEye , ini merupakan tool analitik open source yang di fokuskan untuk operator memvisualisasikan dan melaporkan perintah dan pengontrolan (C2).

RedEye adalah proyek kolaborasi antara CISA dan Laboratorium Nasional Pacific Northwest DOE yang dapat menganalisis log dari kerangka kerja serangan seperti Cobalt Strike untuk menyajikan informasi kompleks dalam format yang lebih mudah dicerna.

Alat ini memungkinkan pengguna memuat data kampanye untuk melihat informasi yang relevan seperti suar dan perintah. Catatan historis dari setiap log kampanye yang diunggah oleh RedEye dapat dilihat sebagai representasi grafis yang menghubungkan server dan host yang terlibat.

Ini telah diuji untuk bekerja di Linux (Ubuntu 18 dan yang lebih baru, Kali Linux 2020.1 dan yang lebih baru), macOS (El Capitan dan yang lebih baru), dan Windows 7 dan yang lebih baru. Alat ini tersedia di GitHub di repositori CISA.

RedEye adalah yang terbaru dalam rangkaian alat yang telah dirilis CISA sebagai proyek sumber terbuka selama beberapa tahun terakhir.

Ini termasuk Malcom, alat untuk menganalisis lalu lintas jaringan; ICS NPP, alat untuk menguraikan protokol jaringan sistem kontrol industri; mengidentifikasi akun dan aplikasi yang berpotensi disusupi di lingkungan Azure dan Microsoft 365; Termasuk Sparrow, skrip PowerShell untuk deteksi.

Artikel di tulis oleh

Zack Zianlo

Terimakasih telah membaca tulisan saya di blog initechind. Salam Ghost Writers dan Keyboard Kreatif.

Lihat karya lainya

<style>/*
<script type="text/javascript" src="https://www.blogger.com/static/v1/widgets/2591855913-widgets.js"></script>
<script type='text/javascript'>
window['__wavt'] = 'AOuZoY73mk7APoL5tCakCMQyS0MZvkQawg:1730507264200';_WidgetManager._Init('//www.blogger.com/rearrange?blogID\x3d7909997287514869705','//www.initechind.my.id/2022/10/cisa-merilis-alat-visualisasi-protokol.html','7909997287514869705');
_WidgetManager._SetDataContext([{'name': 'blog', 'data': {'blogId': '7909997287514869705', 'title': 'initechind', 'url': 'https://www.initechind.my.id/2022/10/cisa-merilis-alat-visualisasi-protokol.html', 'canonicalUrl': 'https://www.initechind.my.id/2022/10/cisa-merilis-alat-visualisasi-protokol.html', 'homepageUrl': 'https://www.initechind.my.id/', 'searchUrl': 'https://www.initechind.my.id/search', 'canonicalHomepageUrl': 'https://www.initechind.my.id/', 'blogspotFaviconUrl': 'https://www.initechind.my.id/favicon.ico', 'bloggerUrl': 'https://www.blogger.com', 'hasCustomDomain': true, 'httpsEnabled': true, 'enabledCommentProfileImages': true, 'gPlusViewType': 'FILTERED_POSTMOD', 'adultContent': false, 'analyticsAccountNumber': '', 'encoding': 'UTF-8', 'locale': 'en', 'localeUnderscoreDelimited': 'en', 'languageDirection': 'ltr', 'isPrivate': false, 'isMobile': false, 'isMobileRequest': false, 'mobileClass': '', 'isPrivateBlog': false, 'isDynamicViewsAvailable': true, 'feedLinks': '\x3clink rel\x3d\x22alternate\x22 type\x3d\x22application/atom+xml\x22 title\x3d\x22initechind - Atom\x22 href\x3d\x22https://www.initechind.my.id/feeds/posts/default\x22 /\x3e\n\x3clink rel\x3d\x22alternate\x22 type\x3d\x22application/rss+xml\x22 title\x3d\x22initechind - RSS\x22 href\x3d\x22https://www.initechind.my.id/feeds/posts/default?alt\x3drss\x22 /\x3e\n\x3clink rel\x3d\x22service.post\x22 type\x3d\x22application/atom+xml\x22 title\x3d\x22initechind - Atom\x22 href\x3d\x22https://www.blogger.com/feeds/7909997287514869705/posts/default\x22 /\x3e\n\n\x3clink rel\x3d\x22alternate\x22 type\x3d\x22application/atom+xml\x22 title\x3d\x22initechind - Atom\x22 href\x3d\x22https://www.initechind.my.id/feeds/9201645776100644561/comments/default\x22 /\x3e\n', 'meTag': '', 'adsenseClientId': 'ca-pub-3050103893098139', 'adsenseHostId': 'ca-host-pub-1556223355139109', 'adsenseHasAds': true, 'adsenseAutoAds': true, 'boqCommentIframeForm': true, 'loginRedirectParam': '', 'view': '', 'dynamicViewsCommentsSrc': '//www.blogblog.com/dynamicviews/4224c15c4e7c9321/js/comments.js', 'dynamicViewsScriptSrc': '//www.blogblog.com/dynamicviews/6eb7ce967db05cf0', 'plusOneApiSrc': 'https://apis.google.com/js/platform.js', 'disableGComments': true, 'interstitialAccepted': false, 'sharing': {'platforms': [{'name': 'Get link', 'key': 'link', 'shareMessage': 'Get link', 'target': ''}, {'name': 'Facebook', 'key': 'facebook', 'shareMessage': 'Share to Facebook', 'target': 'facebook'}, {'name': 'BlogThis!', 'key': 'blogThis', 'shareMessage': 'BlogThis!', 'target': 'blog'}, {'name': 'Twitter', 'key': 'twitter', 'shareMessage': 'Share to Twitter', 'target': 'twitter'}, {'name': 'Pinterest', 'key': 'pinterest', 'shareMessage': 'Share to Pinterest', 'target': 'pinterest'}, {'name': 'Email', 'key': 'email', 'shareMessage': 'Email', 'target': 'email'}], 'disableGooglePlus': true, 'googlePlusShareButtonWidth': 0, 'googlePlusBootstrap': '\x3cscript type\x3d\x22text/javascript\x22\x3ewindow.___gcfg \x3d {\x27lang\x27: \x27en\x27};\x3c/script\x3e'}, 'hasCustomJumpLinkMessage': false, 'jumpLinkMessage': 'Read more', 'pageType': 'item', 'postId': '9201645776100644561', 'postImageThumbnailUrl': 'https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEieG3PRJa6O0dTaciugeT8AxkaXvTjYxS5su2TT_z_0h5CesKQa85LlPhsqeETJvXwpNPbA66p4r11R3rEGC9jPNsTL9iJ8XTsnW5trYICiomPhmolS04MyKev6lmXemn2HOLgdxu7uIw8VMiXSKYzpt3YPS8WZC5zrWip8p3J9CMEJPg4IhOEu2dk/s72-c/IMG_20221015_193436.jpg', 'postImageUrl': 'https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEieG3PRJa6O0dTaciugeT8AxkaXvTjYxS5su2TT_z_0h5CesKQa85LlPhsqeETJvXwpNPbA66p4r11R3rEGC9jPNsTL9iJ8XTsnW5trYICiomPhmolS04MyKev6lmXemn2HOLgdxu7uIw8VMiXSKYzpt3YPS8WZC5zrWip8p3J9CMEJPg4IhOEu2dk/s400/IMG_20221015_193436.jpg', 'pageName': 'CISA merilis alat visualisasi protokol C2 \x22RedEye\x22 open source', 'pageTitle': 'initechind: CISA merilis alat visualisasi protokol C2 \x22RedEye\x22 open source', 'metaDescription': ''}}, {'name': 'features', 'data': {}}, {'name': 'messages', 'data': {'edit': 'Edit', 'linkCopiedToClipboard': 'Link copied to clipboard!', 'ok': 'Ok', 'postLink': 'Post Link'}}, {'name': 'template', 'data': {'name': 'custom', 'localizedName': 'Custom', 'isResponsive': true, 'isAlternateRendering': false, 'isCustom': true}}, {'name': 'view', 'data': {'classic': {'name': 'classic', 'url': '?view\x3dclassic'}, 'flipcard': {'name': 'flipcard', 'url': '?view\x3dflipcard'}, 'magazine': {'name': 'magazine', 'url': '?view\x3dmagazine'}, 'mosaic': {'name': 'mosaic', 'url': '?view\x3dmosaic'}, 'sidebar': {'name': 'sidebar', 'url': '?view\x3dsidebar'}, 'snapshot': {'name': 'snapshot', 'url': '?view\x3dsnapshot'}, 'timeslide': {'name': 'timeslide', 'url': '?view\x3dtimeslide'}, 'isMobile': false, 'title': 'CISA merilis alat visualisasi protokol C2 \x22RedEye\x22 open source', 'description': 'Teknologi dan Knowledge', 'featuredImage': 'https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEieG3PRJa6O0dTaciugeT8AxkaXvTjYxS5su2TT_z_0h5CesKQa85LlPhsqeETJvXwpNPbA66p4r11R3rEGC9jPNsTL9iJ8XTsnW5trYICiomPhmolS04MyKev6lmXemn2HOLgdxu7uIw8VMiXSKYzpt3YPS8WZC5zrWip8p3J9CMEJPg4IhOEu2dk/s400/IMG_20221015_193436.jpg', 'url': 'https://www.initechind.my.id/2022/10/cisa-merilis-alat-visualisasi-protokol.html', 'type': 'item', 'isSingleItem': true, 'isMultipleItems': false, 'isError': false, 'isPage': false, 'isPost': true, 'isHomepage': false, 'isArchive': false, 'isLabelSearch': false, 'postId': 9201645776100644561}}, {'name': 'widgets', 'data': [{'title': 'Icons, Dark, Search', 'type': 'LinkList', 'sectionId': 'header-main', 'id': 'LinkList10'}, {'title': 'Menu', 'type': 'LinkList', 'sectionId': 'header-main', 'id': 'LinkList11'}, {'title': 'Featured Post', 'type': 'FeaturedPost', 'sectionId': 'before-blog', 'id': 'FeaturedPost1', 'postId': '8768051930551903728'}, {'title': 'Blog Posts', 'type': 'Blog', 'sectionId': 'blog-post', 'id': 'Blog1', 'posts': [{'id': '9201645776100644561', 'title': 'CISA merilis alat visualisasi protokol C2 \x22RedEye\x22 open source', 'featuredImage': 'https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEieG3PRJa6O0dTaciugeT8AxkaXvTjYxS5su2TT_z_0h5CesKQa85LlPhsqeETJvXwpNPbA66p4r11R3rEGC9jPNsTL9iJ8XTsnW5trYICiomPhmolS04MyKev6lmXemn2HOLgdxu7uIw8VMiXSKYzpt3YPS8WZC5zrWip8p3J9CMEJPg4IhOEu2dk/s400/IMG_20221015_193436.jpg', 'showInlineAds': false}], 'headerByline': {'regionName': 'header1', 'items': [{'name': 'share', 'label': ''}, {'name': 'author', 'label': 'by'}, {'name': 'timestamp', 'label': 'd MMM, yyyy'}]}, 'footerBylines': [{'regionName': 'footer1', 'items': [{'name': 'comments', 'label': 'Comment'}, {'name': 'icons', 'label': ''}]}, {'regionName': 'footer2', 'items': [{'name': 'labels', 'label': 'Tags:'}]}], 'allBylineItems': [{'name': 'share', 'label': ''}, {'name': 'author', 'label': 'by'}, {'name': 'timestamp', 'label': 'd MMM, yyyy'}, {'name': 'comments', 'label': 'Comment'}, {'name': 'icons', 'label': ''}, {'name': 'labels', 'label': 'Tags:'}]}, {'title': '#Mungkin Anda Suka', 'type': 'HTML', 'sectionId': 'ads-post', 'id': 'HTML15'}, {'title': 'Popular Posts', 'type': 'PopularPosts', 'sectionId': 'sidebar-static', 'id': 'PopularPosts10', 'posts': [{'title': 'Manchester united kalah Mason Mount tidak berguna', 'id': 4298532135540688472}]}, {'title': 'Hashtag', 'type': 'Label', 'sectionId': 'sidebar-static', 'id': 'Label11'}, {'title': '#Recent Post', 'type': 'HTML', 'sectionId': 'sidebar-static', 'id': 'HTML19'}, {'title': 'About Us', 'type': 'HTML', 'sectionId': 'footer-widget', 'id': 'HTML21'}, {'title': 'Follow Us', 'type': 'LinkList', 'sectionId': 'footer-widget', 'id': 'LinkList14'}, {'title': 'Copyright', 'type': 'HTML', 'sectionId': 'copyright', 'id': 'HTML23'}, {'title': 'SVG Icons', 'type': 'HTML', 'sectionId': 'jet-options', 'id': 'HTML24'}]}]);
_WidgetManager._RegisterWidget('_LinkListView', new _WidgetInfo('LinkList10', 'header-main', document.getElementById('LinkList10'), {}, 'displayModeFull'));
_WidgetManager._RegisterWidget('_LinkListView', new _WidgetInfo('LinkList11', 'header-main', document.getElementById('LinkList11'), {}, 'displayModeFull'));
_WidgetManager._RegisterWidget('_FeaturedPostView', new _WidgetInfo('FeaturedPost1', 'before-blog', document.getElementById('FeaturedPost1'), {}, 'displayModeFull'));
_WidgetManager._RegisterWidget('_BlogView', new _WidgetInfo('Blog1', 'blog-post', document.getElementById('Blog1'), {'cmtInteractionsEnabled': false, 'lightboxEnabled': true, 'lightboxModuleUrl': 'https://www.blogger.com/static/v1/jsbin/3386964323-lbx.js', 'lightboxCssUrl': 'https://www.blogger.com/static/v1/v-css/13464135-lightbox_bundle.css'}, 'displayModeFull'));
_WidgetManager._RegisterWidget('_HTMLView', new _WidgetInfo('HTML15', 'ads-post', document.getElementById('HTML15'), {}, 'displayModeFull'));
_WidgetManager._RegisterWidget('_PopularPostsView', new _WidgetInfo('PopularPosts10', 'sidebar-static', document.getElementById('PopularPosts10'), {}, 'displayModeFull'));
_WidgetManager._RegisterWidget('_LabelView', new _WidgetInfo('Label11', 'sidebar-static', document.getElementById('Label11'), {}, 'displayModeFull'));
_WidgetManager._RegisterWidget('_HTMLView', new _WidgetInfo('HTML19', 'sidebar-static', document.getElementById('HTML19'), {}, 'displayModeFull'));
_WidgetManager._RegisterWidget('_HTMLView', new _WidgetInfo('HTML21', 'footer-widget', document.getElementById('HTML21'), {}, 'displayModeFull'));
_WidgetManager._RegisterWidget('_LinkListView', new _WidgetInfo('LinkList14', 'footer-widget', document.getElementById('LinkList14'), {}, 'displayModeFull'));
_WidgetManager._RegisterWidget('_HTMLView', new _WidgetInfo('HTML23', 'copyright', document.getElementById('HTML23'), {}, 'displayModeFull'));
_WidgetManager._RegisterWidget('_HTMLView', new _WidgetInfo('HTML24', 'jet-options', document.getElementById('HTML24'), {}, 'displayModeFull'));
</script>
</body>*/</style>