infosecb

> Like the very necessary guys who fix the water mains or the sewers, the expectation is that the service/data pipeline/database will be always available, and nobody really cares too much either way once everything's working as expected.

Sounds a lot like Cybersecurity.

The macOS version of LOLBAS is called LOOBins (Living off the Orchard).

Find it here: loobins.io

VirtualBuddy is a great open-source project that takes advantage of this framework: https://github.com/insidegui/VirtualBuddy

I’m excited to announce the release of Living Off the Orchard: macOS Binaries (LOOBins)!

LOOBins is a resource designed to help cybersecurity professionals and researchers understand and defend against the potential risks associated with binaries built into macOS.

https://loobins.io

I recently summarized some interesting use cases for my role as a cybersecurity detection engineer. A few examples:

- Generating boilerplate ADS docs for detection content

- Converting rules between various query formats (e.g. Sigma to Splunk SPL)

- Identifying and normalizing security data

- Brainstorming how to approach novel detection uses cases

In summary, I highly recommend the tool for folks in my field but caution them to approach results with skepticism.

If you’re interested in more details, the full Medium article is here: https://infosecb.medium.com/gpt-4-assisted-detection-enginee...