Kyle Eaton @0xkyle.bsky.social · 13/03/2026This was my take as well, but have you seen some tools “correct” the error? 001
Kyle Eaton @0xkyle.bsky.social · 23/01/2026remember when we got a weeks worth of news coverage when Obama called Kanye a jackass? 230
Kyle Eaton @0xkyle.bsky.social · 23/10/2025Thank you! I haven’t looked into writing yara x modules yet, but was thinking about a strelka scanner. Def going to see about yara x now though that’s a great idea 110
Kyle Eaton @0xkyle.bsky.social · 23/10/2025PDFs have been a constant struggle and I’ve found that this helps. Might be a little biased tho 142
Kyle Eaton @0xkyle.bsky.social · 30/09/2025I’ll be presenting at #GrrCON this year about some weird pdf detection ideas I’ve been messing with. Swing by and tell me your file format 031
Kyle Eaton @0xkyle.bsky.social · 05/03/2025Cooking up signaturesmedia.tenor.coma man in an apron is cooking in a kitchen with a sign on the wall that says no smokingALT: a man in an apron is cooking in a kitchen with a sign on the wall that says no smoking 020
Reposted by Kyle EatonGreg Lesnewich @greg-l.bsky.social · 01/03/2025Idk about y’all but I don’t plan on giving RU ops a free pass into our customer networks just because some ding dong says they aren’t a threat If anything I might just wanna burn them with more prejudice out of spite for both regimes 3369
Kyle Eaton @0xkyle.bsky.social · 26/02/2025QR codes can be tricky just because the benign and malicious ones can be very similar. But you can use something like halogen to help generate the yara rules for testing it out. github.com/target/halogengithub.comGitHub - target/halogen: Automatically create YARA rules from malicious documents.Automatically create YARA rules from malicious documents. - GitHub - target/halogen: Automatically create YARA rules from malicious documents. 130
Kyle Eaton @0xkyle.bsky.social · 25/02/2025Check this episode out to hear about image lures and how we can detect them 241
Kyle Eaton @0xkyle.bsky.social · 10/02/2025www.virustotal.com/gui/file/f2a... Also expecting to see indiandefenceforces[.]link soonvirustotal.comVirusTotalVirusTotal 000
Kyle Eaton @0xkyle.bsky.social · 04/02/2025Haven’t seen PDFs for this yet but a new domain popped: defenceindia[.]link 000
Kyle Eaton @0xkyle.bsky.social · 19/11/2024Yara rule to match concatenated zip files. I like this one (biased) because of how we are able to avoid matching nested zip files. More info: x.com/threatinsigh... #yara github.com/EmergingThre...github.comthreatresearch/yara/zip_file.yara at master · EmergingThreats/threatresearchI wanted to call this repo "Nuclear Football Codes". I was outvoted.. - EmergingThreats/threatresearch 2137
