2020-030- Mick Douglas, Defenses against powercat, offsec tool release, SRUM logs, and more!

<p>WISP.org donation page: <a href= "https://wisporg.z2systems.com/np/clients/wisporg/donation.jsp">https://wisporg.z2systems.com/np/clients/wisporg/donation.jsp</a></p> <p>Mick Douglas (@bettersafetynet on Twitter)</p> <p><span style="font-weight: 400;">Powercat:</span> <a href= "https://github.com/besimorhino/powercat"><span style= "font-weight: 400;">https://github.com/besimorhino/powercat</span></a></p> <p><span style="font-weight: 400;">Netcat in a powershell environment</span></p> <p><a href= "https://blog.rapid7.com/2018/09/27/the-powershell-boogeyman-how-to-defend-against-malicious-powershell-attacks/"> <span style= "font-weight: 400;">https://blog.rapid7.com/2018/09/27/the-powershell-boogeyman-how-to-defend-against-malicious-powershell-attacks/</span></a></p> <p><a href= "https://www.hackingarticles.in/powercat-a-powershell-netcat/"><span style="font-weight: 400;"> https://www.hackingarticles.in/powercat-a-powershell-netcat/</span></a></p> <p><span style="font-weight: 400;">Defenses against powercat? </span></p> <p><span style="font-weight: 400;">LolBins:</span> <a href= "https://www.cynet.com/blog/what-are-lolbins-and-how-do-attackers-use-them-in-fileless-attacks/"> <span style= "font-weight: 400;">https://www.cynet.com/blog/what-are-lolbins-and-how-do-attackers-use-them-in-fileless-attacks/</span></a></p> <p><span style="font-weight: 400;">Sigma ruleset:</span> <a href= "https://www.nextron-systems.com/2018/02/10/write-sigma-rules/#:~:text=Sigma%20is%20an%20open%20standard,grep%20on%20the%20command%20line."> <span style= "font-weight: 400;">https://www.nextron-systems.com/2018/02/10/write-sigma-rules/#:~:text=Sigma%20is%20an%20open%20standard,grep%20on%20the%20command%20line.</span></a></p> <p><span style="font-weight: 400;">ElasticSearch bought Endgame;</span> <a href= "https://www.elastic.co/about/press/elastic-announces-intent-to-acquire-endgame"> <span style= "font-weight: 400;">https://www.elastic.co/about/press/elastic-announces-intent-to-acquire-endgame</span></a></p> <p><a href= "https://krebso