150亿美元的王朝过客,从Symantec的前世今生谈起
严格来说,这其实是Symantec的第二次被并购。大马华裔陈福阳带领的Broadcom传出150亿美元价格并
One thing every red team should attempt early on and regularly is to perform some password spray testing across their organization to identify and help remediate usage of weak passwords.
In the past I have done this on Windows a lot, but now I built a simple version for it for Bash to run it also from a Mac.
Check it out: Bash Spray
Ideally, a script like bashspray.sh is integrated into your response pipelines, and SOC, Blue Team as well as account owner get notified - so they change their password right away, and any SOC investigation can be performed if necessary.