Any.Run Reviews

Suricata Reviews

Any.Run mentions (33)

• How do i know something is a false positive?

  Https://app.any.run/ should be enough for most of the cases. If you have packed/encrypted sample (like EMP.dll from Empress), you can't do anything. Source: 12 months ago

• TIFU By opening a phishing .htm file

  If you open it on https://app.any.run it will show you the outbound connections it makes. If you're responsible for such things, you could then block this on your web proxy/firewall/whatever. Source: about 1 year ago

• Where else do you lookup a hashfile that you know is malicious but virustotal, cisco, fortinet, all my devices say the file is clean?

  Hello! Try this https://app.any.run/. Source: about 1 year ago

• klauncher - another pirate virus and spy launcher

  Does anyone have an account at app.any.run to have more analysis about their file? Source: about 1 year ago

• Any chance that hacker can access to other devices through wifi network?

  App.any.run was probably the most useful thing in getting to understand how malware works, its basically an sandbox where it shows you all actions, changes, modifications and network connections done by any executable, including any malware, you can begin by analyzing this piece of Redline Stealer. Source: over 1 year ago

Suricata mentions (12)

• Who does check linux distros of malware - open source

  Linux has (free) tools to improve security and detect/remove malware: Lynis,Chkrootkit,Rkhunter,ClamAV,Vuls,LMD,radare2,Yara,ntopng,maltrail,Snort,Suricata... Source: 6 months ago

• Risks of hosting a website out of my house

  Monitoring & Active Measures - Exporting firewall events to an external time-series database like I describe above is good to see who is touching your firewall or accessing your web site. Using an Intrusion Detection System / Intrusion Prevention System (IDS/IPS) such as open-source Suricata, which is a free package on pfSense, and deploying file system integrity monitoring, such as the open-source Wazuh on the... Source: 7 months ago

• Server Hardening

  Active Measures - Includes (IDS/IPS) such as open-source Suricata or Snort on pfSense, and File Integrity Monitoring (FIM), such as the commercial Tripwire and dated, open-source Tripwire, or the open-source Wazuh installed on servers. These can be combined into a Security Information and Event Management (SIEM) system like the open-source solution, Security Onion. Wazuh itself has evolved into a SIEM. Source: over 1 year ago

• Help with server build

  Active measures may include an intrusion detection system / intrusion prevention systems (IDS/IPS) such as open-source Suricata on the firewall, and installing file system integrity monitoring, such as the open-source Wazuh on the exposed server. These are combined in one open-source solution, Security Onion. Source: over 1 year ago

• Would love a guide to Unifi Threat Management similar to your "Advanced Wifi Settings" Guide

  Thanks! Was there something in particular you were wondering about? The built-in IDS/IPS is just Suricata under the hood - https://suricata.io/. Source: almost 2 years ago