本期关键字：安全政策法规回顾、工业级知识图谱、ATT&CK红队、zimbra邮服认证机制、应急响应指南、检测和分析、Java代码审计、DailyIOC、IoT流量、中文NL2SQL挑战赛等。2020/01/27-2020/02/02
安全资讯
[法规] 2019年网络安全政策法规回顾
https://www.anquanke.com/post/id/197556
安全技术
[Web安全] 收集整理的23种文件下载的方式
https://mp.weixin.qq.com/s/bmA73FSjVPqpiaacz-btAQ
[Web安全] ATT&CK红队评估实战靶场vulnstack
https://mp.weixin.qq.com/s/vmUqdSbZXh6698R8IHoOyw
[杂志] SecWiki周刊（第308期)
https://www.sec-wiki.com/weekly/308
[数据挖掘] 工业级知识图谱：经验与挑战
https://mp.weixin.qq.com/s/4Fdpik3EtEng-ri_7tGM0A
[数据挖掘] 从产品视角重新定义“检测”和“分析”
https://mp.weixin.qq.com/s/oq3T1fSKAHeDfWZNpciXSw
[漏洞分析] 对zimbra邮服认证机制的一些探索
https://mp.weixin.qq.com/s/u-p6_srzby1bbejqClmf-A
[恶意分析] emergency-response-checklist：应急响应指南
https://github.com/theLSA/emergency-response-checklist
[Web安全] Java代码审计之入门篇（一）
https://www.anquanke.com/post/id/197641
[恶意分析] DailyIOC: IOC from articles, tweets for archives
https://github.com/StrangerealIntel/DailyIOC
[取证分析] Decrypt WhatsApp encrypted media files
https://github.com/ddz/whatsapp-media-decrypt
[工具] IotShark - Monitoring and Analyzing IoT Traffic
https://github.com/sahilmgandhi/IotShark
[漏洞分析] Code injection in Workflows leading to SharePoint RCE (CVE-2020-0646)
https://www.mdsec.co.uk/2020/01/code-injection-in-workflows-leading-to-sharepoint-rce-hidee-2020-0646/
[Web安全] 记一次验签机制伪造绕过的继续渗透测试
https://xz.aliyun.com/t/7143
[漏洞分析] 远程云端执行（RCE）：Azure云架构中的漏洞分析（Part 1）
https://www.anquanke.com/post/id/197713
[数据挖掘] 首届中文NL2SQL挑战赛决赛第3名方案+代码
https://github.com/beader/tianchi_nl2sql
评论