Hey everyone!
I'm fairly new to threat intelligence, and I've been trying to understand which attribution details are actually worth paying attention to.
When you look up an IOC, what's most useful to you: the malware family, campaign, threat actor, related tools or infrastructure, or something else?
Hey everyone!
I'm still fairly new to threat analysis and have recently started using tools like Joe sandbox and Virustotal. So I have a question for those with more experience.
When you open a sandbox report or look up an indicator, what's the first thing you look at?
And after that, what information do you check next?
I realized that even with all the automation available today, phishing investigations still involve quite a bit of manual work.
I'm curious, what usually makes you step in?
Once you do, what's the hardest part of the investigation? And what do you need to figure out before you can confidently close the case?
Hey guys! Today I caught myself wondering whether I should rerun a sample in a sandbox with a different VM configuration. But since I'm still pretty new to malware analysis, I wasn't sure if people actually do that very often.
Do you rerun the same sample regularly? If so, what usually makes you decide it's worth another run?
Hi everyone. I’m struggling with 296 in 2026 season 1. My issue is that at the end of 2025 season 4 I did couple of races in Silverstone with PB of 1:57.7. This week I’m having a really hard time to get into high 59’s. The car feels like all of its downforce is somewhere in the rear with front tires not being able to grip properly. Same issue I had in the long high speed right corners of Mugello. I thought that may be an issue with me not knowing the track, but Silverstone is well known for me.
My question is it just me, or car does really feel off with fixed setup?