{"users":[{"id":1,"username":"mttaggart","name":"Taggart","avatar_template":"/user_avatar/ifin.network/mttaggart/{size}/7_2.png","flair_name":"ifin_staff","flair_url":"/uploads/default/original/1X/0e54f6ab381874d2eed3fb24b75b00838dbe073c.png","flair_group_id":41,"primary_group_name":"ifin_staff","admin":true,"moderator":true,"trust_level":4},{"id":56,"username":"darf","name":null,"avatar_template":"/letter_avatar_proxy/v4/letter/d/7c8e57/{size}.png","trust_level":1},{"id":9,"username":"chilly","name":"chilly","avatar_template":"/user_avatar/ifin.network/chilly/{size}/114_2.png","flair_name":"ifin_staff","flair_url":"/uploads/default/original/1X/0e54f6ab381874d2eed3fb24b75b00838dbe073c.png","flair_group_id":41,"primary_group_name":"ifin_staff","admin":true,"moderator":true,"trust_level":4},{"id":16,"username":"neurovagrant","name":"Ian Campbell / neurovagrant","avatar_template":"/user_avatar/ifin.network/neurovagrant/{size}/414_2.png","flair_name":"ifin_staff","flair_url":"/uploads/default/original/1X/0e54f6ab381874d2eed3fb24b75b00838dbe073c.png","flair_group_id":41,"primary_group_name":"ifin_staff","trust_level":4},{"id":96,"username":"cxiao","name":"Cindy Xiao","avatar_template":"/user_avatar/ifin.network/cxiao/{size}/666_2.png","trust_level":2},{"id":199,"username":"ajn142","name":"Buttered Jorts","avatar_template":"/user_avatar/ifin.network/ajn142/{size}/1443_2.png","trust_level":2},{"id":8,"username":"BadSamurai","name":"BadSamurai","avatar_template":"/user_avatar/ifin.network/badsamurai/{size}/53_2.png","flair_name":"ifin_staff","flair_url":"/uploads/default/original/1X/0e54f6ab381874d2eed3fb24b75b00838dbe073c.png","flair_group_id":41,"primary_group_name":"ifin_staff","trust_level":4},{"id":160,"username":"tehfishman","name":null,"avatar_template":"/letter_avatar_proxy/v4/letter/t/7c8e57/{size}.png","trust_level":1},{"id":2,"username":"josh_the_enginerd","name":"josh_the_enginerd","avatar_template":"/user_avatar/ifin.network/josh_the_enginerd/{size}/24_2.png","flair_name":"ifin_staff","flair_url":"/uploads/default/original/1X/0e54f6ab381874d2eed3fb24b75b00838dbe073c.png","flair_group_id":41,"primary_group_name":"ifin_staff","moderator":true,"trust_level":4},{"id":190,"username":"bytesandborscht","name":null,"avatar_template":"/user_avatar/ifin.network/bytesandborscht/{size}/1560_2.png","trust_level":2},{"id":37,"username":"Shecky","name":null,"avatar_template":"/user_avatar/ifin.network/shecky/{size}/408_2.png","trust_level":2},{"id":174,"username":"Tindra","name":null,"avatar_template":"/user_avatar/ifin.network/tindra/{size}/1286_2.png","trust_level":1},{"id":10,"username":"rye","name":"Rye","avatar_template":"/user_avatar/ifin.network/rye/{size}/217_2.png","flair_name":"ifin_staff","flair_url":"/uploads/default/original/1X/0e54f6ab381874d2eed3fb24b75b00838dbe073c.png","flair_group_id":41,"primary_group_name":"ifin_staff","trust_level":4},{"id":227,"username":"netresec","name":"𝙽𝙴𝚃𝚁𝙴𝚂𝙴𝙲","avatar_template":"/user_avatar/ifin.network/netresec/{size}/2226_2.png","trust_level":0},{"id":144,"username":"MustardFacial","name":"","avatar_template":"/user_avatar/ifin.network/mustardfacial/{size}/979_2.png","trust_level":2},{"id":95,"username":"John.Timaeus","name":null,"avatar_template":"/letter_avatar_proxy/v4/letter/j/a8b319/{size}.png","flair_name":"ifin_staff","flair_url":"/uploads/default/original/1X/0e54f6ab381874d2eed3fb24b75b00838dbe073c.png","flair_group_id":41,"primary_group_name":"ifin_staff","trust_level":3},{"id":77,"username":"sempf","name":"sempf","avatar_template":"/user_avatar/ifin.network/sempf/{size}/555_2.png","flair_name":"ifin_staff","flair_url":"/uploads/default/original/1X/0e54f6ab381874d2eed3fb24b75b00838dbe073c.png","flair_group_id":41,"primary_group_name":"ifin_staff","trust_level":3},{"id":55,"username":"hgb","name":"Hgb","avatar_template":"/user_avatar/ifin.network/hgb/{size}/439_2.png","trust_level":2},{"id":29,"username":"barberousse_bin","name":"Barberousse","avatar_template":"/user_avatar/ifin.network/barberousse_bin/{size}/400_2.png","trust_level":2},{"id":158,"username":"darses","name":null,"avatar_template":"/letter_avatar_proxy/v4/letter/d/d07c76/{size}.png","trust_level":2},{"id":157,"username":"Spartan_1986","name":"","avatar_template":"/user_avatar/ifin.network/spartan_1986/{size}/1099_2.png","trust_level":1},{"id":207,"username":"Killswitch","name":"Killswitch","avatar_template":"/user_avatar/ifin.network/killswitch/{size}/1570_2.png","trust_level":0}],"primary_groups":[{"id":41,"name":"ifin_staff"}],"flair_groups":[{"id":41,"name":"ifin_staff","flair_url":"/uploads/default/original/1X/0e54f6ab381874d2eed3fb24b75b00838dbe073c.png","flair_bg_color":"","flair_color":""}],"topic_list":{"can_create_topic":false,"filter":"latest","more_topics_url":"/c/general/4?page=1","per_page":30,"top_tags":[{"id":209,"name":"ask-ifin","slug":"ask-ifin"},{"id":54,"name":"resources","slug":"resources"},{"id":7,"name":"ai","slug":"ai"},{"id":215,"name":"blog-post","slug":"blog-post"},{"id":45,"name":"research","slug":"research"},{"id":48,"name":"tools","slug":"tools"},{"id":8,"name":"malware","slug":"malware"},{"id":11,"name":"python","slug":"python"},{"id":56,"name":"analysis","slug":"analysis"},{"id":148,"name":"configuration","slug":"configuration"},{"id":69,"name":"supplychain","slug":"supplychain"},{"id":43,"name":"windows","slug":"windows"},{"id":211,"name":"discussion","slug":"discussion"},{"id":40,"name":"homelab","slug":"homelab"},{"id":3,"name":"hunt","slug":"hunt"},{"id":20,"name":"linux","slug":"linux"},{"id":47,"name":"microsoft","slug":"microsoft"},{"id":65,"name":"vulnerability","slug":"vulnerability"},{"id":28,"name":"clickfix","slug":"clickfix"},{"id":75,"name":"crowdstrike","slug":"crowdstrike"},{"id":129,"name":"defense","slug":"defense"},{"id":244,"name":"detection","slug":"detection"},{"id":158,"name":"events","slug":"events"},{"id":85,"name":"hardware","slug":"hardware"},{"id":123,"name":"incident-response","slug":"incident-response"},{"id":208,"name":"poc","slug":"poc"},{"id":176,"name":"questions","slug":"questions"},{"id":26,"name":"social","slug":"social"},{"id":163,"name":"socialengineering","slug":"socialengineering"},{"id":31,"name":"android","slug":"android"},{"id":14,"name":"announcements","slug":"announcements"}],"topics":[{"fancy_title":"START HERE: Welcome to IFIN!","id":198,"title":"START HERE: Welcome to IFIN!","slug":"start-here-welcome-to-ifin","posts_count":1,"reply_count":0,"highest_post_number":1,"image_url":null,"created_at":"2026-03-31T06:00:06.512Z","last_posted_at":"2026-03-31T06:00:06.756Z","bumped":true,"bumped_at":"2026-03-31T06:00:06.756Z","archetype":"regular","unseen":false,"pinned":true,"unpinned":null,"excerpt":"Thank you for joining the Independent Federated Intelligence Network! Here’s how to get started. \nRead the Docs\nPlease have a look at our important policies. We ask that you agree to them before becoming a full participa…","visible":true,"closed":false,"archived":false,"bookmarked":null,"liked":null,"tags":[],"tags_descriptions":{},"views":419,"like_count":0,"has_summary":false,"last_poster_username":"mttaggart","category_id":4,"op_like_count":0,"pinned_globally":false,"featured_link":null,"is_hot":false,"has_accepted_answer":false,"can_vote":false,"posters":[{"extras":"latest single","description":"Original Poster, Most Recent Poster","user_id":1,"primary_group_id":41,"flair_group_id":41}]},{"fancy_title":"About the General category","id":3,"title":"About the General category","slug":"about-the-general-category","posts_count":1,"reply_count":0,"highest_post_number":1,"image_url":null,"created_at":"2025-11-04T21:19:25.923Z","last_posted_at":"2025-11-04T21:19:25.942Z","bumped":true,"bumped_at":"2025-11-04T21:19:25.923Z","archetype":"regular","unseen":false,"pinned":true,"unpinned":null,"excerpt":"Create topics here that are not strictly threat intelligence, but still relevant to the community’s general interest.","visible":true,"closed":false,"archived":false,"bookmarked":null,"liked":null,"tags":[],"tags_descriptions":{},"views":60,"like_count":1,"has_summary":false,"last_poster_username":"mttaggart","category_id":4,"op_like_count":1,"pinned_globally":false,"featured_link":null,"is_hot":false,"has_accepted_answer":false,"can_vote":false,"posters":[{"extras":"latest single","description":"Original Poster, Most Recent Poster","user_id":1,"primary_group_id":41,"flair_group_id":41}]},{"fancy_title":"Ask IFIN: LATAM Intelligence","id":881,"title":"Ask IFIN: LATAM Intelligence","slug":"ask-ifin-latam-intelligence","posts_count":4,"reply_count":0,"highest_post_number":4,"image_url":null,"created_at":"2026-10-04T22:31:08.555Z","last_posted_at":"2026-10-11T05:44:50.722Z","bumped":true,"bumped_at":"2026-10-11T05:44:50.722Z","archetype":"regular","unseen":false,"pinned":false,"unpinned":null,"excerpt":"I was hoping to poll the group for suggestions on good data sources for Threat Intelligence relating to LATAM. Unfortunately, i do not speak Spanish or Portuguese, nor am I a regional expert in any of the Latin or South …","visible":true,"closed":false,"archived":false,"bookmarked":null,"liked":null,"tags":[{"id":45,"name":"research","slug":"research"},{"id":209,"name":"ask-ifin","slug":"ask-ifin"}],"tags_descriptions":{},"views":39,"like_count":2,"has_summary":false,"last_poster_username":"cxiao","category_id":4,"op_like_count":2,"pinned_globally":false,"featured_link":null,"is_hot":false,"has_accepted_answer":false,"can_vote":false,"posters":[{"extras":null,"description":"Original Poster","user_id":56,"primary_group_id":null,"flair_group_id":null},{"extras":null,"description":"Frequent Poster","user_id":9,"primary_group_id":41,"flair_group_id":41},{"extras":null,"description":"Recent Poster","user_id":16,"primary_group_id":41,"flair_group_id":41},{"extras":"latest","description":"Most Recent Poster","user_id":96,"primary_group_id":null,"flair_group_id":null}]},{"fancy_title":"What do y’all look for in a runbook, or do you have a favorite template?","id":873,"title":"What do y'all look for in a runbook, or do you have a favorite template?","slug":"what-do-yall-look-for-in-a-runbook-or-do-you-have-a-favorite-template","posts_count":13,"reply_count":8,"highest_post_number":13,"image_url":null,"created_at":"2026-09-30T16:33:35.636Z","last_posted_at":"2026-10-02T01:57:04.348Z","bumped":true,"bumped_at":"2026-10-02T01:57:04.348Z","archetype":"regular","unseen":false,"pinned":false,"unpinned":null,"excerpt":"Working to document a runbook based on some recent IR stuff, so that when particular remediation actions come up in future incidents, we’re not making it up on the fly. Nobody seems to have a template for what they use, …","visible":true,"closed":false,"archived":false,"bookmarked":null,"liked":null,"tags":[{"id":209,"name":"ask-ifin","slug":"ask-ifin"}],"tags_descriptions":{},"views":37,"like_count":7,"has_summary":false,"last_poster_username":"ajn142","category_id":4,"op_like_count":0,"pinned_globally":false,"featured_link":null,"is_hot":false,"has_accepted_answer":false,"can_vote":false,"posters":[{"extras":"latest","description":"Original Poster, Most Recent Poster","user_id":199,"primary_group_id":null,"flair_group_id":null},{"extras":null,"description":"Frequent Poster","user_id":1,"primary_group_id":41,"flair_group_id":41},{"extras":null,"description":"Recent Poster","user_id":8,"primary_group_id":41,"flair_group_id":41},{"extras":null,"description":"Recent Poster","user_id":160,"primary_group_id":null,"flair_group_id":null}]},{"fancy_title":"Ask IFIN: AI Threat Analyst","id":852,"title":"Ask IFIN: AI Threat Analyst","slug":"ask-ifin-ai-threat-analyst","posts_count":5,"reply_count":1,"highest_post_number":5,"image_url":null,"created_at":"2026-09-22T18:08:19.522Z","last_posted_at":"2026-10-01T12:46:08.416Z","bumped":true,"bumped_at":"2026-10-01T12:46:08.416Z","archetype":"regular","unseen":false,"pinned":false,"unpinned":null,"excerpt":"I am being asked to incorporate more and more GenAI into my workflow at work. One of these workflows was using an LLM to go through our vulnerability system of record and tease out “easy wins” for us to fix. I am conflic…","visible":true,"closed":false,"archived":false,"bookmarked":null,"liked":null,"tags":[{"id":7,"name":"ai","slug":"ai"},{"id":209,"name":"ask-ifin","slug":"ask-ifin"}],"tags_descriptions":{},"views":40,"like_count":1,"has_summary":false,"last_poster_username":"BadSamurai","category_id":4,"op_like_count":1,"pinned_globally":false,"featured_link":null,"is_hot":false,"has_accepted_answer":false,"can_vote":false,"posters":[{"extras":null,"description":"Original Poster","user_id":2,"primary_group_id":41,"flair_group_id":41},{"extras":null,"description":"Frequent Poster","user_id":1,"primary_group_id":41,"flair_group_id":41},{"extras":null,"description":"Recent Poster","user_id":190,"primary_group_id":null,"flair_group_id":null},{"extras":"latest","description":"Most Recent Poster","user_id":8,"primary_group_id":41,"flair_group_id":41}]},{"fancy_title":"Finding the Signal in the Vulnerability Noise | IFIN","id":870,"title":"Finding the Signal in the Vulnerability Noise | IFIN","slug":"finding-the-signal-in-the-vulnerability-noise-ifin","posts_count":3,"reply_count":0,"highest_post_number":4,"image_url":null,"created_at":"2026-09-29T06:27:33.047Z","last_posted_at":"2026-09-29T17:30:15.830Z","bumped":true,"bumped_at":"2026-09-29T17:30:15.830Z","archetype":"regular","unseen":false,"pinned":false,"unpinned":null,"excerpt":"by James "Chilly" Harshaw As Artificial Intelligence-assisted vulnerability hunting has become more commonplace, we have seen a flood of new vulnerabilities across our feeds and attackers taking advantage of them. In fac…","visible":true,"closed":false,"archived":false,"bookmarked":null,"liked":null,"visibility_reason_id":4,"tags":[{"id":215,"name":"blog-post","slug":"blog-post"}],"tags_descriptions":{},"views":56,"like_count":4,"has_summary":false,"last_poster_username":"ajn142","category_id":4,"op_like_count":3,"pinned_globally":false,"featured_link":null,"is_hot":false,"has_accepted_answer":false,"can_vote":false,"posters":[{"extras":null,"description":"Original Poster","user_id":9,"primary_group_id":41,"flair_group_id":41},{"extras":null,"description":"Frequent Poster","user_id":1,"primary_group_id":41,"flair_group_id":41},{"extras":null,"description":"Recent Poster","user_id":37,"primary_group_id":null,"flair_group_id":null},{"extras":"latest","description":"Most Recent Poster","user_id":199,"primary_group_id":null,"flair_group_id":null}]},{"fancy_title":"Ask IFIN: Social Engineering","id":864,"title":"Ask IFIN: Social Engineering","slug":"ask-ifin-social-engineering","posts_count":3,"reply_count":0,"highest_post_number":3,"image_url":null,"created_at":"2026-09-24T18:42:15.084Z","last_posted_at":"2026-09-28T20:08:02.390Z","bumped":true,"bumped_at":"2026-09-28T20:08:02.390Z","archetype":"regular","unseen":false,"pinned":false,"unpinned":null,"excerpt":"A lot of what I’ve been seeing lately is less technical exploitation, and more social engineering. This isn’t just the Scattered/Shiny/Lapsu$/whatever crew - Luna Moth is running rampant among law firms, and we’re seeing…","visible":true,"closed":false,"archived":false,"bookmarked":null,"liked":null,"tags":[{"id":209,"name":"ask-ifin","slug":"ask-ifin"},{"id":163,"name":"socialengineering","slug":"socialengineering"}],"tags_descriptions":{},"views":30,"like_count":3,"has_summary":false,"last_poster_username":"rye","category_id":4,"op_like_count":3,"pinned_globally":false,"featured_link":null,"is_hot":false,"has_accepted_answer":false,"can_vote":false,"posters":[{"extras":null,"description":"Original Poster","user_id":174,"primary_group_id":null,"flair_group_id":null},{"extras":null,"description":"Recent Poster","user_id":199,"primary_group_id":null,"flair_group_id":null},{"extras":"latest","description":"Most Recent Poster","user_id":10,"primary_group_id":41,"flair_group_id":41}]},{"fancy_title":"Federated Systems Of","id":868,"title":"Federated Systems Of","slug":"federated-systems-of","posts_count":1,"reply_count":0,"highest_post_number":1,"image_url":"https://ifin.network/uploads/default/original/2X/7/7446af9a01eb8d7e3c278be0268b6572e5467b97.png","created_at":"2026-09-27T23:35:07.667Z","last_posted_at":"2026-09-27T23:35:08.159Z","bumped":true,"bumped_at":"2026-09-27T23:35:08.159Z","archetype":"regular","unseen":false,"pinned":false,"unpinned":null,"excerpt":"Recently I’ve been exploring this messenger service. \nBig wins out of the gate: \nit is very easy to make sealed topics, and channels and add members to those channels. \nYou can also remove items per device. \nThe user int…","visible":true,"closed":false,"archived":false,"bookmarked":null,"liked":null,"tags":[{"id":338,"name":"software","slug":"software"}],"tags_descriptions":{},"views":25,"like_count":0,"has_summary":false,"last_poster_username":"rye","category_id":4,"op_like_count":0,"pinned_globally":false,"featured_link":null,"is_hot":false,"has_accepted_answer":false,"can_vote":false,"posters":[{"extras":"latest single","description":"Original Poster, Most Recent Poster","user_id":10,"primary_group_id":41,"flair_group_id":41}]},{"fancy_title":"Ask IFIN: JA3/4/RM Fingerprinting","id":830,"title":"Ask IFIN: JA3/4/RM Fingerprinting","slug":"ask-ifin-ja3-4-rm-fingerprinting","posts_count":8,"reply_count":4,"highest_post_number":8,"image_url":"https://ifin.network/uploads/default/optimized/2X/a/aa5ac3653fc3cf4f39b7220940e63be9c666dd0b_2_1024x535.png","created_at":"2026-09-11T02:13:29.740Z","last_posted_at":"2026-09-24T13:54:09.080Z","bumped":true,"bumped_at":"2026-09-24T13:54:09.080Z","archetype":"regular","unseen":false,"pinned":false,"unpinned":null,"excerpt":"I’ve always been fascinated by the JA family of TLS hashes, but I find that they’re exceptionally hard to find in common tooling. And I’m not even sure of value these days, what with the Cloudflare of it all. \nDo you use…","visible":true,"closed":false,"archived":false,"bookmarked":null,"liked":null,"tags":[{"id":209,"name":"ask-ifin","slug":"ask-ifin"}],"tags_descriptions":{},"views":56,"like_count":4,"has_summary":false,"last_poster_username":"netresec","category_id":4,"op_like_count":0,"pinned_globally":false,"featured_link":null,"is_hot":false,"has_accepted_answer":true,"can_vote":false,"posters":[{"extras":null,"description":"Original Poster","user_id":1,"primary_group_id":41,"flair_group_id":41},{"extras":"latest","description":"Most Recent Poster, Accepted Answer","user_id":227,"primary_group_id":null,"flair_group_id":null},{"extras":null,"description":"Frequent Poster","user_id":8,"primary_group_id":41,"flair_group_id":41},{"extras":null,"description":"Recent Poster","user_id":9,"primary_group_id":41,"flair_group_id":41}]},{"fancy_title":"Announcing IFIN Lists | IFIN","id":836,"title":"Announcing IFIN Lists | IFIN","slug":"announcing-ifin-lists-ifin","posts_count":3,"reply_count":1,"highest_post_number":4,"image_url":null,"created_at":"2026-09-14T15:20:14.512Z","last_posted_at":"2026-09-14T18:00:50.503Z","bumped":true,"bumped_at":"2026-09-14T18:00:50.503Z","archetype":"regular","unseen":false,"pinned":false,"unpinned":null,"excerpt":"by Michael Taggart IFIN is thrilled to announce IFIN Lists, a curated set of permanent blocks and perennial hunts that go beyond traditional threat indicators to include abused "legitimate" services that most organizatio…","visible":true,"closed":false,"archived":false,"bookmarked":null,"liked":null,"visibility_reason_id":4,"tags":[{"id":215,"name":"blog-post","slug":"blog-post"}],"tags_descriptions":{},"views":55,"like_count":6,"has_summary":false,"last_poster_username":"mttaggart","category_id":4,"op_like_count":4,"pinned_globally":false,"featured_link":null,"is_hot":false,"has_accepted_answer":false,"can_vote":false,"posters":[{"extras":"latest","description":"Original Poster, Most Recent Poster","user_id":1,"primary_group_id":41,"flair_group_id":41},{"extras":null,"description":"Recent Poster","user_id":144,"primary_group_id":null,"flair_group_id":null}]},{"fancy_title":"MITRE ATT&CK v19 Update: Defense Evasion Tactic Split","id":834,"title":"MITRE ATT&CK v19 Update: Defense Evasion Tactic Split","slug":"mitre-att-ck-v19-update-defense-evasion-tactic-split","posts_count":1,"reply_count":0,"highest_post_number":1,"image_url":"https://ifin.network/uploads/default/original/2X/1/142974680f57992af8e8eaba85599bd4a4d2bca5.png","created_at":"2026-09-11T19:39:20.637Z","last_posted_at":"2026-09-11T19:39:21.067Z","bumped":true,"bumped_at":"2026-09-11T19:39:21.067Z","archetype":"regular","unseen":false,"pinned":false,"unpinned":null,"excerpt":"In case you missed it, I did, last month MITRE split and renamed ATT&CK’s Defense Evasion to Stealth and Defense Impairment. And a few of the techniques have moved to Lateral Movement, Privilege Escalation, and Execution…","visible":true,"closed":false,"archived":false,"bookmarked":null,"liked":null,"tags":[{"id":323,"name":"mitre","slug":"mitre"}],"tags_descriptions":{},"views":24,"like_count":1,"has_summary":false,"last_poster_username":"BadSamurai","category_id":4,"op_like_count":1,"pinned_globally":false,"featured_link":null,"is_hot":false,"has_accepted_answer":false,"can_vote":false,"posters":[{"extras":"latest single","description":"Original Poster, Most Recent Poster","user_id":8,"primary_group_id":41,"flair_group_id":41}]},{"fancy_title":"When to release threat intel freely vs. info-share quietly","id":823,"title":"When to release threat intel freely vs. info-share quietly","slug":"when-to-release-threat-intel-freely-vs-info-share-quietly","posts_count":7,"reply_count":3,"highest_post_number":7,"image_url":null,"created_at":"2026-09-08T21:40:54.524Z","last_posted_at":"2026-09-11T17:37:46.932Z","bumped":true,"bumped_at":"2026-09-11T17:37:46.932Z","archetype":"regular","unseen":false,"pinned":false,"unpinned":null,"excerpt":"Seeking some feedback and thoughts here from folks, as this issue continues to nag at the back of my brain. \nLet’s say through original ongoing research, I have a list of clearly malicious domains from a known threat act…","visible":true,"closed":false,"archived":false,"bookmarked":null,"liked":null,"tags":[{"id":209,"name":"ask-ifin","slug":"ask-ifin"}],"tags_descriptions":{},"views":50,"like_count":5,"has_summary":false,"last_poster_username":"BadSamurai","category_id":4,"op_like_count":0,"pinned_globally":false,"featured_link":null,"is_hot":false,"has_accepted_answer":false,"can_vote":false,"posters":[{"extras":null,"description":"Original Poster","user_id":16,"primary_group_id":41,"flair_group_id":41},{"extras":null,"description":"Frequent Poster","user_id":95,"primary_group_id":41,"flair_group_id":41},{"extras":null,"description":"Frequent Poster","user_id":1,"primary_group_id":41,"flair_group_id":41},{"extras":null,"description":"Recent Poster","user_id":10,"primary_group_id":41,"flair_group_id":41},{"extras":"latest","description":"Most Recent Poster","user_id":8,"primary_group_id":41,"flair_group_id":41}]},{"fancy_title":"Entra Password Protection…..isn’t","id":816,"title":"Entra Password Protection.....isn't","slug":"entra-password-protection-isnt","posts_count":3,"reply_count":1,"highest_post_number":3,"image_url":"https://ifin.network/uploads/default/original/2X/f/fdf4bef6426268e4b1a1c5c3921c6dac7ad6b5af.png","created_at":"2026-09-04T19:46:48.844Z","last_posted_at":"2026-09-04T20:40:27.490Z","bumped":true,"bumped_at":"2026-09-04T20:40:27.490Z","archetype":"regular","unseen":false,"pinned":false,"unpinned":null,"excerpt":"A recent incident investigation revealed something to me that I felt I should share with the community. The TL;DR of this is basically: the entropy from password length alone can be enough to bypass Entra Password Protec…","visible":true,"closed":false,"archived":false,"bookmarked":null,"liked":null,"tags":[{"id":148,"name":"configuration","slug":"configuration"}],"tags_descriptions":{},"views":64,"like_count":3,"has_summary":false,"last_poster_username":"MustardFacial","category_id":4,"op_like_count":3,"pinned_globally":false,"featured_link":null,"is_hot":false,"has_accepted_answer":false,"can_vote":false,"posters":[{"extras":"latest","description":"Original Poster, Most Recent Poster","user_id":144,"primary_group_id":null,"flair_group_id":null},{"extras":null,"description":"Recent Poster","user_id":1,"primary_group_id":41,"flair_group_id":41}]},{"fancy_title":"A ‘Signal’ Zine","id":596,"title":"A 'Signal' Zine","slug":"a-signal-zine","posts_count":9,"reply_count":2,"highest_post_number":9,"image_url":null,"created_at":"2026-06-17T00:16:35.913Z","last_posted_at":"2026-08-29T18:49:36.240Z","bumped":true,"bumped_at":"2026-08-29T18:49:36.240Z","archetype":"regular","unseen":false,"pinned":false,"unpinned":null,"excerpt":"I’ve met a lot of different communities, and ‘Signal’ is seemingly a tool that a lot of people use for good reason. \nHowever, signal comes packed with some useful features like obfuscating text in messages, scrubbing met…","visible":true,"closed":false,"archived":false,"bookmarked":null,"liked":null,"tags":[],"tags_descriptions":{},"views":146,"like_count":7,"has_summary":false,"last_poster_username":"rye","category_id":4,"op_like_count":1,"pinned_globally":false,"featured_link":null,"is_hot":false,"has_accepted_answer":false,"can_vote":false,"posters":[{"extras":"latest","description":"Original Poster, Most Recent Poster","user_id":10,"primary_group_id":41,"flair_group_id":41},{"extras":null,"description":"Frequent Poster","user_id":96,"primary_group_id":null,"flair_group_id":null},{"extras":null,"description":"Recent Poster","user_id":77,"primary_group_id":41,"flair_group_id":41},{"extras":null,"description":"Recent Poster","user_id":174,"primary_group_id":null,"flair_group_id":null}]},{"fancy_title":"AI Notetaker Mitigations and Attorney Client Privilege","id":793,"title":"AI Notetaker Mitigations and Attorney Client Privilege","slug":"ai-notetaker-mitigations-and-attorney-client-privilege","posts_count":3,"reply_count":1,"highest_post_number":3,"image_url":null,"created_at":"2026-08-27T21:55:32.010Z","last_posted_at":"2026-08-28T00:22:19.320Z","bumped":true,"bumped_at":"2026-08-28T00:22:19.320Z","archetype":"regular","unseen":false,"pinned":false,"unpinned":null,"excerpt":"Nudge has a pretty good write up on the risks of AI Notetaking apps, especially 3rd party shadow AI. \nI created a list to help with detection and mitigation. This list will not prevent the addition of notetakers to Teams…","visible":true,"closed":false,"archived":false,"bookmarked":null,"liked":null,"tags":[{"id":7,"name":"ai","slug":"ai"},{"id":123,"name":"incident-response","slug":"incident-response"},{"id":315,"name":"law","slug":"law"}],"tags_descriptions":{},"views":45,"like_count":4,"has_summary":false,"last_poster_username":"BadSamurai","category_id":4,"op_like_count":2,"pinned_globally":false,"featured_link":null,"is_hot":false,"has_accepted_answer":false,"can_vote":false,"posters":[{"extras":"latest","description":"Original Poster, Most Recent Poster","user_id":8,"primary_group_id":41,"flair_group_id":41},{"extras":null,"description":"Recent Poster","user_id":1,"primary_group_id":41,"flair_group_id":41}]},{"fancy_title":"Text Template Abuse for Code Execution","id":790,"title":"Text Template Abuse for Code Execution","slug":"text-template-abuse-for-code-execution","posts_count":2,"reply_count":0,"highest_post_number":2,"image_url":"https://ifin.network/uploads/default/original/2X/4/43650366ad985081d35b70adf14f37e6ebfacf89.png","created_at":"2026-08-27T12:57:44.447Z","last_posted_at":"2026-08-27T17:41:01.423Z","bumped":true,"bumped_at":"2026-08-27T17:41:01.423Z","archetype":"regular","unseen":false,"pinned":false,"unpinned":null,"excerpt":"This one was new to me! \n\n\n\nText template files can contain C# or Visual Basic code that could be compiled and executed at build time. Threat actors can create or modify .tt files to execute code in the context of a trus…","visible":true,"closed":false,"archived":false,"bookmarked":null,"liked":null,"tags":[{"id":43,"name":"windows","slug":"windows"},{"id":314,"name":"ttps","slug":"ttps"}],"tags_descriptions":{},"views":23,"like_count":3,"has_summary":false,"last_poster_username":"BadSamurai","category_id":4,"op_like_count":1,"pinned_globally":false,"featured_link":null,"is_hot":false,"has_accepted_answer":false,"can_vote":false,"posters":[{"extras":null,"description":"Original Poster","user_id":1,"primary_group_id":41,"flair_group_id":41},{"extras":"latest","description":"Most Recent Poster","user_id":8,"primary_group_id":41,"flair_group_id":41}]},{"fancy_title":"Edge infrastructure under siege","id":791,"title":"Edge infrastructure under siege","slug":"edge-infrastructure-under-siege","posts_count":1,"reply_count":0,"highest_post_number":1,"image_url":"https://ifin.network/uploads/default/original/2X/5/5848292bc050fecafb006fd0e3c6d179932c9367.png","created_at":"2026-08-27T14:01:09.061Z","last_posted_at":"2026-08-27T14:01:09.573Z","bumped":true,"bumped_at":"2026-08-27T14:01:09.573Z","archetype":"regular","unseen":false,"pinned":false,"unpinned":null,"excerpt":"A nice look at who is going after edge infrastructure based on two different datasets. This research was done by Tenable and SentinelOne together.","visible":true,"closed":false,"archived":false,"bookmarked":null,"liked":null,"tags":[{"id":45,"name":"research","slug":"research"}],"tags_descriptions":{},"views":26,"like_count":0,"has_summary":false,"last_poster_username":"Shecky","category_id":4,"op_like_count":0,"pinned_globally":false,"featured_link":null,"is_hot":false,"has_accepted_answer":false,"can_vote":false,"posters":[{"extras":"latest single","description":"Original Poster, Most Recent Poster","user_id":37,"primary_group_id":null,"flair_group_id":null}]},{"fancy_title":"IFIN’s First Year: An Action Plan | IFIN","id":785,"title":"IFIN's First Year: An Action Plan | IFIN","slug":"ifins-first-year-an-action-plan-ifin","posts_count":1,"reply_count":0,"highest_post_number":1,"image_url":null,"created_at":"2026-08-25T04:53:45.625Z","last_posted_at":"2026-08-25T04:53:45.998Z","bumped":true,"bumped_at":"2026-08-25T04:53:45.998Z","archetype":"regular","unseen":false,"pinned":false,"unpinned":null,"excerpt":"by Michael Taggart I thought it might be useful to detail the plans for IFIN as they currently exist. These are ideas and not set in stone. In this post, you'll learn how to get involved if you want to shape IFIN's direc…","visible":true,"closed":false,"archived":false,"bookmarked":null,"liked":null,"visibility_reason_id":4,"tags":[{"id":215,"name":"blog-post","slug":"blog-post"}],"tags_descriptions":{},"views":45,"like_count":1,"has_summary":false,"last_poster_username":"mttaggart","category_id":4,"op_like_count":1,"pinned_globally":false,"featured_link":null,"is_hot":false,"has_accepted_answer":false,"can_vote":false,"posters":[{"extras":"latest single","description":"Original Poster, Most Recent Poster","user_id":1,"primary_group_id":41,"flair_group_id":41}]},{"fancy_title":"Death By 20,000 PoCs | Blog | VulnCheck","id":784,"title":"Death By 20,000 PoCs | Blog | VulnCheck","slug":"death-by-20-000-pocs-blog-vulncheck","posts_count":1,"reply_count":0,"highest_post_number":1,"image_url":"https://ifin.network/uploads/default/optimized/2X/2/2cf110b5ccca910d1f9f37e3a9b9a416bd399bf1_2_1024x512.png","created_at":"2026-08-25T03:12:31.366Z","last_posted_at":"2026-08-25T03:12:31.857Z","bumped":true,"bumped_at":"2026-08-25T03:12:31.857Z","archetype":"regular","unseen":false,"pinned":false,"unpinned":null,"excerpt":"This is a great insight into the state of the PoC. \nTurns out a massive chunk of exploit code is garbage. Which we knew, but here are numbers!","visible":true,"closed":false,"archived":false,"bookmarked":null,"liked":null,"tags":[{"id":45,"name":"research","slug":"research"},{"id":65,"name":"vulnerability","slug":"vulnerability"},{"id":208,"name":"poc","slug":"poc"}],"tags_descriptions":{},"views":30,"like_count":0,"has_summary":false,"last_poster_username":"mttaggart","category_id":4,"op_like_count":0,"pinned_globally":false,"featured_link":"https://www.vulncheck.com/blog/death-by-20k-pocs","featured_link_root_domain":"vulncheck.com","is_hot":false,"has_accepted_answer":false,"can_vote":false,"posters":[{"extras":"latest single","description":"Original Poster, Most Recent Poster","user_id":1,"primary_group_id":41,"flair_group_id":41}]},{"fancy_title":"Ask IFIN: How do you quantify confidence levels?","id":763,"title":"Ask IFIN: How do you quantify confidence levels?","slug":"ask-ifin-how-do-you-quantify-confidence-levels","posts_count":7,"reply_count":4,"highest_post_number":7,"image_url":null,"created_at":"2026-08-20T14:44:30.875Z","last_posted_at":"2026-08-20T17:18:45.026Z","bumped":true,"bumped_at":"2026-08-20T17:18:45.026Z","archetype":"regular","unseen":false,"pinned":false,"unpinned":null,"excerpt":"This must be a common problem in intel spaces where you are presenting evidence to support a hypothesis but you don’t have absolute definitive evidence, and so you need to assert some confidence level other than “certain…","visible":true,"closed":false,"archived":false,"bookmarked":null,"liked":null,"tags":[{"id":209,"name":"ask-ifin","slug":"ask-ifin"}],"tags_descriptions":{},"views":47,"like_count":7,"has_summary":false,"last_poster_username":"mttaggart","category_id":4,"op_like_count":3,"pinned_globally":false,"featured_link":null,"is_hot":false,"has_accepted_answer":false,"can_vote":false,"posters":[{"extras":null,"description":"Original Poster","user_id":55,"primary_group_id":null,"flair_group_id":null},{"extras":null,"description":"Recent Poster","user_id":29,"primary_group_id":null,"flair_group_id":null},{"extras":"latest","description":"Most Recent Poster","user_id":1,"primary_group_id":41,"flair_group_id":41}]},{"fancy_title":"Business Tactics in a Broken Infosec Sales World","id":760,"title":"Business Tactics in a Broken Infosec Sales World","slug":"business-tactics-in-a-broken-infosec-sales-world","posts_count":2,"reply_count":0,"highest_post_number":2,"image_url":null,"created_at":"2026-08-19T19:15:03.883Z","last_posted_at":"2026-08-20T01:54:51.475Z","bumped":true,"bumped_at":"2026-08-20T01:54:51.475Z","archetype":"regular","unseen":false,"pinned":false,"unpinned":null,"excerpt":"It’s a not-so-secret, secret, that cybersecurity $vendors are not paying their sales staff for renewals. This results in high-turnover of sales staff, ghosting, poor support, and aggressive sales. \nThe result within orgs…","visible":true,"closed":false,"archived":false,"bookmarked":null,"liked":null,"tags":[{"id":303,"name":"sales","slug":"sales"}],"tags_descriptions":{},"views":32,"like_count":1,"has_summary":false,"last_poster_username":"sempf","category_id":4,"op_like_count":0,"pinned_globally":false,"featured_link":null,"is_hot":false,"has_accepted_answer":false,"can_vote":false,"posters":[{"extras":null,"description":"Original Poster","user_id":8,"primary_group_id":41,"flair_group_id":41},{"extras":"latest","description":"Most Recent Poster","user_id":77,"primary_group_id":41,"flair_group_id":41}]},{"fancy_title":"Etherhiding: Hunting and Prevention | IFIN","id":598,"title":"Etherhiding: Hunting and Prevention | IFIN","slug":"etherhiding-hunting-and-prevention-ifin","posts_count":5,"reply_count":0,"highest_post_number":6,"image_url":null,"created_at":"2026-06-17T21:25:41.227Z","last_posted_at":"2026-08-17T19:31:40.423Z","bumped":true,"bumped_at":"2026-08-17T19:31:40.423Z","archetype":"regular","unseen":false,"pinned":false,"unpinned":null,"excerpt":"by Michael Taggart Cryptocurrency and malware: a match made in heaven. Let's learn how to read the ledger and extract malware config. \n\nThis is a companion discussion topic for the original entry at https://ifin-intel.or…","visible":true,"closed":false,"archived":false,"bookmarked":null,"liked":null,"visibility_reason_id":4,"tags":[{"id":215,"name":"blog-post","slug":"blog-post"}],"tags_descriptions":{},"views":187,"like_count":6,"has_summary":false,"last_poster_username":"darses","category_id":4,"op_like_count":1,"pinned_globally":false,"featured_link":null,"is_hot":false,"has_accepted_answer":false,"can_vote":false,"posters":[{"extras":null,"description":"Original Poster","user_id":1,"primary_group_id":41,"flair_group_id":41},{"extras":null,"description":"Recent Poster","user_id":8,"primary_group_id":41,"flair_group_id":41},{"extras":"latest","description":"Most Recent Poster","user_id":158,"primary_group_id":null,"flair_group_id":null}]},{"fancy_title":"Outages - Github","id":752,"title":"Outages - Github","slug":"outages-github","posts_count":1,"reply_count":0,"highest_post_number":1,"image_url":null,"created_at":"2026-08-17T19:12:55.232Z","last_posted_at":"2026-08-17T19:12:55.663Z","bumped":true,"bumped_at":"2026-08-17T19:12:55.663Z","archetype":"regular","unseen":false,"pinned":false,"unpinned":null,"excerpt":"A lot of carts are hooked to the same few horses out there. \nWhich is interesting when an external service then goes down, which then becomes realized as a dependency. \nGithub \nI understand when people want to choose git…","visible":true,"closed":false,"archived":false,"bookmarked":null,"liked":null,"tags":[{"id":33,"name":"github","slug":"github"}],"tags_descriptions":{},"views":23,"like_count":0,"has_summary":false,"last_poster_username":"rye","category_id":4,"op_like_count":0,"pinned_globally":false,"featured_link":null,"is_hot":false,"has_accepted_answer":false,"can_vote":false,"posters":[{"extras":"latest single","description":"Original Poster, Most Recent Poster","user_id":10,"primary_group_id":41,"flair_group_id":41}]},{"fancy_title":"Analysis of the initial Trivy Mini Shai-Hulud compromise","id":743,"title":"Analysis of the initial Trivy Mini Shai-Hulud compromise","slug":"analysis-of-the-initial-trivy-mini-shai-hulud-compromise","posts_count":1,"reply_count":0,"highest_post_number":1,"image_url":"https://ifin.network/uploads/default/optimized/2X/8/88281747129b720f0a2e3e7a928df689cfe31757_2_1024x576.png","created_at":"2026-08-13T19:11:48.560Z","last_posted_at":"2026-08-13T19:11:49.061Z","bumped":true,"bumped_at":"2026-08-13T19:11:49.061Z","archetype":"regular","unseen":false,"pinned":false,"unpinned":null,"excerpt":"CloudSek report: \n\n\nStep Analysis: \n\n\nList of impacted:","visible":true,"closed":false,"archived":false,"bookmarked":null,"liked":null,"tags":[{"id":69,"name":"supplychain","slug":"supplychain"},{"id":139,"name":"teampcp","slug":"teampcp"},{"id":56,"name":"analysis","slug":"analysis"},{"id":232,"name":"mini-shai-hulud","slug":"mini-shai-hulud"}],"tags_descriptions":{},"views":38,"like_count":2,"has_summary":false,"last_poster_username":"mttaggart","category_id":4,"op_like_count":2,"pinned_globally":false,"featured_link":null,"is_hot":false,"has_accepted_answer":false,"can_vote":false,"posters":[{"extras":"latest single","description":"Original Poster, Most Recent Poster","user_id":1,"primary_group_id":41,"flair_group_id":41}]},{"fancy_title":"Teach me everything you know about SIEMs","id":508,"title":"Teach me everything you know about SIEMs","slug":"teach-me-everything-you-know-about-siems","posts_count":13,"reply_count":9,"highest_post_number":13,"image_url":null,"created_at":"2026-05-27T17:55:11.282Z","last_posted_at":"2026-08-12T11:01:47.254Z","bumped":true,"bumped_at":"2026-08-12T11:01:47.254Z","archetype":"regular","unseen":false,"pinned":false,"unpinned":null,"excerpt":"While I understand the purpose of a SIEM, getting any kind of advice/recommendations/lamentations on the setup, configuration, and usage of one is next to impossible. \nEvery vendor has their own solution and there are ju…","visible":true,"closed":false,"archived":false,"bookmarked":null,"liked":null,"tags":[],"tags_descriptions":{},"views":142,"like_count":2,"has_summary":false,"last_poster_username":"mttaggart","category_id":4,"op_like_count":0,"pinned_globally":false,"featured_link":null,"is_hot":false,"has_accepted_answer":false,"can_vote":false,"posters":[{"extras":null,"description":"Original Poster","user_id":144,"primary_group_id":null,"flair_group_id":null},{"extras":null,"description":"Frequent Poster","user_id":55,"primary_group_id":null,"flair_group_id":null},{"extras":null,"description":"Recent Poster","user_id":157,"primary_group_id":null,"flair_group_id":null},{"extras":"latest","description":"Most Recent Poster","user_id":1,"primary_group_id":41,"flair_group_id":41}]},{"fancy_title":"Ask IFIN: Impact of LLMs on attacks?","id":722,"title":"Ask IFIN: Impact of LLMs on attacks?","slug":"ask-ifin-impact-of-llms-on-attacks","posts_count":7,"reply_count":2,"highest_post_number":7,"image_url":null,"created_at":"2026-08-05T17:46:49.677Z","last_posted_at":"2026-08-11T21:56:54.518Z","bumped":true,"bumped_at":"2026-08-11T21:56:54.518Z","archetype":"regular","unseen":false,"pinned":false,"unpinned":null,"excerpt":"I’ve been gently ducking AI questions on here, but since Beaumont directly asked the question on Fedi, I will ask here: \nHave you seen an AI-enabled attack in your environment? \nI have not seen a model/agent execute or o…","visible":true,"closed":false,"archived":false,"bookmarked":null,"liked":null,"tags":[{"id":7,"name":"ai","slug":"ai"},{"id":209,"name":"ask-ifin","slug":"ask-ifin"}],"tags_descriptions":{},"views":65,"like_count":7,"has_summary":false,"last_poster_username":"Spartan_1986","category_id":4,"op_like_count":1,"pinned_globally":false,"featured_link":null,"is_hot":false,"has_accepted_answer":false,"can_vote":false,"posters":[{"extras":null,"description":"Original Poster","user_id":1,"primary_group_id":41,"flair_group_id":41},{"extras":null,"description":"Frequent Poster","user_id":9,"primary_group_id":41,"flair_group_id":41},{"extras":null,"description":"Frequent Poster","user_id":77,"primary_group_id":41,"flair_group_id":41},{"extras":null,"description":"Recent Poster","user_id":190,"primary_group_id":null,"flair_group_id":null},{"extras":"latest","description":"Most Recent Poster","user_id":157,"primary_group_id":null,"flair_group_id":null}]},{"fancy_title":"Threat Intel Parser for public threat feeds","id":728,"title":"Threat Intel Parser for public threat feeds","slug":"threat-intel-parser-for-public-threat-feeds","posts_count":1,"reply_count":0,"highest_post_number":1,"image_url":"https://ifin.network/uploads/default/optimized/2X/c/c2514e733bc705a0cf5e329c034d5828c4e6c7b1_2_1024x512.png","created_at":"2026-08-06T20:49:52.907Z","last_posted_at":"2026-08-06T20:49:53.415Z","bumped":true,"bumped_at":"2026-08-06T20:49:53.415Z","archetype":"regular","unseen":false,"pinned":false,"unpinned":null,"excerpt":"I built a small project to help make threat intel feeds more usable in practice: \n\n\nOne challenge when navigating through these high-quality threat intel github repos such as Netskope and Palo Alto Unit 42 were that they…","visible":true,"closed":false,"archived":false,"bookmarked":null,"liked":null,"tags":[{"id":48,"name":"tools","slug":"tools"}],"tags_descriptions":{},"views":41,"like_count":5,"has_summary":false,"last_poster_username":"Killswitch","category_id":4,"op_like_count":5,"pinned_globally":false,"featured_link":null,"is_hot":false,"has_accepted_answer":false,"can_vote":false,"posters":[{"extras":"latest single","description":"Original Poster, Most Recent Poster","user_id":207,"primary_group_id":null,"flair_group_id":null}]},{"fancy_title":"It’s Official: We’re a Recognized Non-Profit | IFIN","id":717,"title":"It's Official: We're a Recognized Non-Profit | IFIN","slug":"its-official-were-a-recognized-non-profit-ifin","posts_count":2,"reply_count":0,"highest_post_number":3,"image_url":null,"created_at":"2026-08-04T12:50:24.913Z","last_posted_at":"2026-08-04T18:07:35.872Z","bumped":true,"bumped_at":"2026-08-04T18:07:35.872Z","archetype":"regular","unseen":false,"pinned":false,"unpinned":null,"excerpt":"by Michael Taggart IFIN started as a frustrated conversation among information security professionals in March of 2025. We started organizing in stealth shortly thereafter, developing a mission, strategizing, and eventua…","visible":true,"closed":false,"archived":false,"bookmarked":null,"liked":null,"visibility_reason_id":4,"tags":[{"id":14,"name":"announcements","slug":"announcements"},{"id":215,"name":"blog-post","slug":"blog-post"}],"tags_descriptions":{},"views":61,"like_count":12,"has_summary":false,"last_poster_username":"chilly","category_id":4,"op_like_count":11,"pinned_globally":false,"featured_link":null,"is_hot":false,"has_accepted_answer":false,"can_vote":false,"posters":[{"extras":null,"description":"Original Poster","user_id":1,"primary_group_id":41,"flair_group_id":41},{"extras":"latest","description":"Most Recent Poster","user_id":9,"primary_group_id":41,"flair_group_id":41}]},{"fancy_title":"DysruptionHub Incident Map","id":711,"title":"DysruptionHub Incident Map","slug":"dysruptionhub-incident-map","posts_count":2,"reply_count":0,"highest_post_number":2,"image_url":"https://ifin.network/uploads/default/optimized/2X/6/646d2364c8265b37e3f48c44b7dc93d95aa9fe3d_2_1024x537.png","created_at":"2026-08-03T17:32:45.741Z","last_posted_at":"2026-08-03T21:44:30.405Z","bumped":true,"bumped_at":"2026-08-03T21:44:30.405Z","archetype":"regular","unseen":false,"pinned":false,"unpinned":null,"excerpt":"After finding DysruptionHub last week during the Minnesota incidents, and being really impressed, they’ve released this tool to more comprehensively track incidents in their purview.","visible":true,"closed":false,"archived":false,"bookmarked":null,"liked":null,"tags":[{"id":54,"name":"resources","slug":"resources"},{"id":199,"name":"ot","slug":"ot"},{"id":198,"name":"ics","slug":"ics"}],"tags_descriptions":{},"views":32,"like_count":1,"has_summary":false,"last_poster_username":"BadSamurai","category_id":4,"op_like_count":0,"pinned_globally":false,"featured_link":null,"is_hot":false,"has_accepted_answer":false,"can_vote":false,"posters":[{"extras":null,"description":"Original Poster","user_id":1,"primary_group_id":41,"flair_group_id":41},{"extras":"latest","description":"Most Recent Poster","user_id":8,"primary_group_id":41,"flair_group_id":41}]},{"fancy_title":"MISP Threat Actor Explorer","id":714,"title":"MISP Threat Actor Explorer","slug":"misp-threat-actor-explorer","posts_count":1,"reply_count":0,"highest_post_number":1,"image_url":null,"created_at":"2026-08-03T18:46:09.908Z","last_posted_at":"2026-08-03T18:46:10.672Z","bumped":true,"bumped_at":"2026-08-03T18:46:10.672Z","archetype":"regular","unseen":false,"pinned":false,"unpinned":null,"excerpt":"This is dope. A mapping of TAs based on MISP galaxy data. Pretty slick. \nCould use GAYINT in there, but I’ll leave that to them in case they want to add that to MISP.","visible":true,"closed":false,"archived":false,"bookmarked":null,"liked":null,"tags":[{"id":54,"name":"resources","slug":"resources"}],"tags_descriptions":{},"views":38,"like_count":0,"has_summary":false,"last_poster_username":"mttaggart","category_id":4,"op_like_count":0,"pinned_globally":false,"featured_link":null,"is_hot":false,"has_accepted_answer":false,"can_vote":false,"posters":[{"extras":"latest single","description":"Original Poster, Most Recent Poster","user_id":1,"primary_group_id":41,"flair_group_id":41}]}]}}