Quickie: Mass BASE64 Decoding, (Fri, Nov 29th)
ID: 6192e709-2f94-5364-9c53-49158a711b1b
STIX ID: report--6192e709-2f94-5364-9c53-49158a711b1b
Feed Name: SANS ISC Diary
This post demonstrates a practical workflow to extract Base64-encoded email addresses from phishing SVG attachments by grepping relevant lines and decoding them with base64dump.py, using options to select all decoded items (-s a), dump to stdout (-d), and format outputs with newlines (-s A). It focuses on processing encoded IOCs for analysis; specific victim details are redacted.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.
