Published file metadata, source observations, indicators, and research history in one bounded catalog.
2,400+Reachable catalog records
99 / 100Current catalog page
24Maximum records per page
0Samples downloaded by this page
Feed collection status
Sources represented on this page. Publication and observation dates describe the content; successful batch dates describe local collection. A recent batch does not certify complete coverage or current provider availability.
intelligence_src_1e8b29b080e9bfdebfRecent successful batchLast successful batch: Last attempt:
Stale means older than twice the recorded collection interval, with a minimum of one hour; without an interval, the threshold is 24 hours. Cached content remains available while a feed is stale, paused, or unverified.
2,400+ MATCHING RECORDSMETADATA ONLY / SOURCE ATTRIBUTION PRESERVED
In a previous blog post, we have seen how PXE network boot works, and how to implement PXE boot for devices with a (classical) BIOS. For this purpose, we used SYSLINUX/PXELINUX. However, SYSLINUX/PXELINUX is usually not working well with modern UEFI devices. Hence in this blog post, we will show how to use iPXE to implement network boot for UEFI devices.
First reported Jan 28, 2024 20:22 UTCCatalog metadata updated Oct 17, 2026 09:27 UTCOpen evidence record
EVE-NG is a network emulation tool that allow network engineers and IT professionals to design, simulate and test complex network environments. It supports images from multiple vendors ( OS, Network devices, Firewalls, Servers, vPCs …). It can handle large network topologies and it offers a user-friendly interface accessible via any web browser which is user-friendly.
First reported Sep 02, 2024 07:50 UTCCatalog metadata updated Oct 17, 2026 09:27 UTCOpen evidence record
A few weeks ago we had the opportunity to visit the Technology Advancement Center (TAC). The TAC is a nonprofit organization located in Columbia (Maryland, U.S.) and focused on addressing critical cybersecurity defense technology challenges. TAC serves as an intermediary and helps connect U.S. Cyber Command (USCYBERCOM) and the U.S. government to the people, products and solutions needed to advance the nation’s cybersecurity capabilities.
First reported Dec 09, 2025 13:35 UTCCatalog metadata updated Oct 17, 2026 09:27 UTCOpen evidence record
If you’ve ever tried running a program on Linux and encountered this error message then you’re familiar with the frustrating issue of missing or mismatched glibc versions. This specific error occurs when a program requires a version of the GNU C Library (glibc) that isn’t installed on your system, or is incompatible with the one you have. In this post, we’ll dive into the steps to resolve the issue, including how to install a specific version of...
First reported Jan 15, 2025 14:39 UTCCatalog metadata updated Oct 17, 2026 09:27 UTCOpen evidence record
In this blog post we will show how to implement continuous deployment with GitLab and docker compose. More precisely, we will show how to use a gitlab-ci pipeline to:
First reported Sep 19, 2023 12:15 UTCCatalog metadata updated Oct 17, 2026 09:27 UTCOpen evidence record
Since version 2.6.0, the Multi-Agent Ranking framework (MARk) offers the possibility to integrate images and other files in the reports generated by your detectors. Here is how…
First reported Aug 25, 2021 13:32 UTCCatalog metadata updated Oct 17, 2026 09:27 UTCOpen evidence record
Running an complete Laravel development environment requires multiple services: web server, database server, queue worker etc. Laravel Sail helps you install and use all these using docker containers. Here is how to use it…
First reported May 28, 2024 10:38 UTCCatalog metadata updated Oct 17, 2026 09:27 UTCOpen evidence record
If you have already been curious about how Ethereum smart contract works under the hood or even participated to a CTF where you had to exploit some weakness in smart contract, you probably stumble upon the solidity abi encoding page. Even if this is the reference paper, it can look a bit difficult to understand and it’s not easily readable even though it’s not really difficult. Let’s review how the encoding is working with the help of few example...
First reported Apr 11, 2024 12:08 UTCCatalog metadata updated Oct 17, 2026 09:27 UTCOpen evidence record
Scapy is a wonderful Python library that allows to craft packets and send them on a network. In this blog post we show how Scapy can be used to read a pcap file, in order to detect abnormal behavior.
First reported Dec 19, 2022 11:30 UTCCatalog metadata updated Oct 17, 2026 09:27 UTCOpen evidence record
Still today, some network monitoring tools and security systems rely on the MAC address of the host. However, a MAC address is not an authentication mechanism! It can be easily changed. More precisely, by default most operating systems will use the MAC address burnt into the network interface as the source MAC address for all emitted Ethernet frames. But you can easily reconfigure your system to change this behavior. Here is how to do that on a L...
First reported Apr 13, 2021 09:36 UTCCatalog metadata updated Oct 17, 2026 09:27 UTCOpen evidence record
In this blog post series we will present how to deploy a Laravel app on Kubernetes. In this first tutorial, we start with a simple setup, and leave horizontal scaling and high-availability for a follow-up post…
First reported May 15, 2021 06:43 UTCCatalog metadata updated Oct 17, 2026 09:27 UTCOpen evidence record
If you ever tried to set up a web application on your local machine with a secure connection (using HTTPS), you likely generated self-signed TLS certificates. When you create your own self-signed certificate, or even when the application you’re using generates the certificate itself, your operating system (OS) will likely not trust the certificate. Consequently, also your other applications will not trust the certificate.
First reported Nov 17, 2023 14:25 UTCCatalog metadata updated Oct 17, 2026 09:27 UTCOpen evidence record
When working with complex CI/CD pipelines, it’s easy to get bogged down in repetitive and time-consuming tasks. One way to streamline your pipeline definitions is by using GitLab components. These reusable snippets allow you to break down long job definitions into smaller, more manageable pieces that can be easily shared and reused across your projects.
First reported Jun 20, 2025 13:14 UTCCatalog metadata updated Oct 17, 2026 09:27 UTCOpen evidence record
Usually, Android applications are written in Java (or, now, in Javascript) and compiled in a Dalvik bytecode (DEX file). Then, the bytecode is interpreted and executed by the Dalvik Virtual Machine.
First reported Apr 05, 2020 15:15 UTCCatalog metadata updated Oct 17, 2026 09:27 UTCOpen evidence record
USB devices can be a liability : they can be used to exfiltrate data from a computer or server, to plug a hardware keylogger, or to plant a malware. Hence on a managed computer, USB devices should be filtered and whitelisted. In this blog post we show how this can be achieved thanks to udev, and some PHP code.
First reported Dec 23, 2022 12:56 UTCCatalog metadata updated Oct 17, 2026 09:27 UTCOpen evidence record
Sophisticated surveillance tools do not always need to break the system. Often, they simply use it exactly as intended. Imagine a single, lightweight binary capable of running on many Linux server regardless of the underlying kernel version. It silently captures every keystroke without requiring a compiler on the target or loading visible kernel modules. In a previous blog post, we explored this concept using a simple bpftrace script. In this one...
First reported Feb 05, 2026 14:10 UTCCatalog metadata updated Oct 17, 2026 09:27 UTCOpen evidence record
Interpreting a 1-D array of pixels is not possible by the human eye. And yet such data is available in several circumstances, like the dump of pixel arrays from RAM or disk, the availability of image files in RAW format (without the width) or when solving a Capture-The-Flag cybersecurity challenge with images.
First reported Nov 13, 2023 09:47 UTCCatalog metadata updated Oct 17, 2026 09:27 UTCOpen evidence record
In everyday life we need to constantly keep ourselves reminded of important information. Some people write this information on post-it notes, notebooks or using programs such as Microsoft Word or Google Notes. The problem is, that information is in itself transitive- one piece of data or a note can lead to another one and it can become cumbersome and difficult to follow the trail of information. Our brain works the same way, usually we store info...
First reported Jun 03, 2021 10:40 UTCCatalog metadata updated Oct 17, 2026 09:27 UTCOpen evidence record
Curious to observe every process invocation on a Linux system? This article will walk you through building a minimal eBPF program that attaches to the execve syscall using libbpf and CO-RE for portability across kernel versions. It covers compiling with Clang, setting up a ring buffer for efficient event transmission, and writing a simple C loader to manage initialization and execution, all without requiring kernel modules. It’s way easier than i...
First reported Apr 09, 2025 13:18 UTCCatalog metadata updated Oct 17, 2026 09:27 UTCOpen evidence record
Despite its occasional unreliability as seen here and there, SMS remains a common communication method. Before diving into Python, understanding AT commands is a good start for interfacing with a USB GSM modem. This concise guide lays out the steps to integrate SMS functionality into your projects, enabling you to utilize the power of SMS communication with ease.
First reported Apr 24, 2024 06:43 UTCCatalog metadata updated Oct 17, 2026 09:27 UTCOpen evidence record
eBPF has revolutionized Linux kernel tracing and security by allowing user-space programs to safely execute in kernel space, but its power has historically been limited by strict kernel version dependencies. When a kernel structure changes between updates, hardcoded memory offsets break, leading to crashes or silent failures. To overcome this fragility, the ecosystem introduced BPF Type Format and Compile Once Run Everywhere, an elegant mechanism...
First reported May 08, 2026 09:46 UTCCatalog metadata updated Oct 17, 2026 09:27 UTCOpen evidence record
The public shared-host view reaches the newest 2,400 matching records. Narrow the filters or search an exact MD5, SHA-1, or SHA-256 value to reach a specific record.
A filename, label, or report mention alone does not establish maliciousness. Observation dates describe cited sources; collection dates describe this local metadata catalog. No malware samples are stored, fetched, or executed by these pages.