Lightnews — Scholar-powered news

LightNews

Josh Stroschein | The Cyber Yeti

@jstrosch.bsky.social

310 followers 44 following 210 posts

Reverse engineer at FLARE/Google | Pluralsight author | 😱 1M+ views on YT | 🎙️ Host of Behind the Binary podcast 👇

Posts Media Videos Starter Packs

Pinned

Josh Stroschein | The Cyber Yeti @jstrosch.bsky.social · Dec 18

🚀 Ready to learn malware analysis and operational technology (OT)? My latest Pluralsight course has launched will walk you through OT protocol basics using modbus and the FrostyGoop malware as a case study 👇

https://buff.ly/4gJhlb5

As a bonus, we'll also talk about reversing GoLang binaries!

OT Malware Analysis: FrostyGoop

This course will teach the basics of analyzing GoLang binaries and how to identify OT-specific threats using the FrostyGoop malware.

Josh Stroschein | The Cyber Yeti @jstrosch.bsky.social · 1d

🚀 Check out the latest features and enhancements to the FLARE-VM 👇

security.googlecloudcommunity.com/community-bl...

Discord - Group Chat That’s All Fun & Games

Discord is great for playing games and chilling with friends, or even building a worldwide community. Customize your own space to talk, play, and hang out.

Josh Stroschein | The Cyber Yeti @jstrosch.bsky.social · 1d

🔥 Live stream is starting in under an hour - join us on YouTube to learn about the latest Suricata releases on how they fixed several high-severity CVEs!

youtube.com/live/ID9q7E4...

LIVE: Suricata 8.0.1 & 7.0.12 Security Release: Fixing High-Severity CVEs with the Core Team

Join us live with the Suricata core team members as we break down the crucial security updates in the newly released Suricata 8.0.1 and 7.0.12. These are imp...

Josh Stroschein | The Cyber Yeti @jstrosch.bsky.social · 3d

🔥 Live stream this Thursday at 12pm CDT! Peter Manev and Lukas Sismis are here to talk about the latest Suricata releases, which fix several high severity CVEs...

Join us on YouTube - youtube.com/live/ID9q7E4...

LIVE: Suricata 8.0.1 & 7.0.12 Security Release: Fixing High-Severity CVEs with the Core Team

Join us live with the Suricata core team members as we break down the crucial security updates in the newly released Suricata 8.0.1 and 7.0.12. These are imp...

Josh Stroschein | The Cyber Yeti @jstrosch.bsky.social · 8d

🔥 The next episode of Behind the Binary is here! We're joined by renowned security researcher Hahna Kane Latonick for a deep dive into the powerful world where reverse engineering meets data science.

🎧 open.spotify.com/episode/2CFB...

EP16 The Machine Learning Revolution in Reverse Engineering with Hahna Kane Latonick

Behind the Binary by Google Cloud Security · Episode

open.spotify.com

Josh Stroschein | The Cyber Yeti @jstrosch.bsky.social · 14d

🥷 FLARE-On 12 starts today - prepare yourself with this episode of Behind the Binary 👇

open.spotify.com/episode/4eS4...

EP15 Getting Ready for FLARE-On 12 - An Inside Look at the Reverse Engineering Gauntlet

Behind the Binary by Google Cloud Security · Episode

open.spotify.com

Josh Stroschein | The Cyber Yeti @jstrosch.bsky.social · 14d

🏗️ More assembly basics - in this short, we'll cover how to create a basic FOR loop in assembly!

🎯 youtube.com/shorts/eddBB...

🏗️ Assembly Shorts - Creating a FOR Loop

In this short, we'll cover how to create a basic FOR loop in assembly. To see how I created the printf wrapper functions: https://youtu.be/NQjJLpKkH28 Join this channel to get access to…

Josh Stroschein | The Cyber Yeti @jstrosch.bsky.social · 15d

🏗️ Here is a quick look at how I link object files from NASM and C to create the basic wrapper functions for printf in my recent assembly shorts:

youtu.be/NQjJLpKkH28

Linking Object Files from C and NASM in Windows

In this video, we tackle a common challenge: linking multiple object files from both NASM assembly and C on Windows. You'll learn how to create C wrapper functions to bridge the gap and successfully…

Josh Stroschein | The Cyber Yeti @jstrosch.bsky.social · 16d

🎙️ Behind the Binary: Did you miss our latest episode on crypto heists and Web3? We dove into the "Wild West" of Web3 and decentralized finance, where thefts and hacks are now more common than in traditional finance.

Get caught-up 👉 open.spotify.com/episode/4MMp...

EP14 Web3's Dark Side: Unmasking the New Age of Financial Crime

Behind the Binary by Google Cloud Security · Episode

open.spotify.com

Josh Stroschein | The Cyber Yeti @jstrosch.bsky.social · 17d

🥸 Where in the world is printf!

youtu.be/J6Ipnbr5lvQ

Where in the world is PRINTF? Using the legacy library file to link with NASM

Working in assembly but having trouble finding some of your favorite C runtime functions? This video shows you a common solution to linker errors by using the legacy_stdio_definitions.lib file. We'll…

Josh Stroschein | The Cyber Yeti @jstrosch.bsky.social · 22d

🛠️ Part of gaining proficiency with IDA Pro is understanding how to interpret its output. In this short, we'll explore the offset keyword and how IDA uses it to display addresses and offsets.

youtube.com/shorts/MSsmA...

🏃‍♂️ IDA Basics - What are Offsets?

Part of gaining proficiency with IDA is understanding how to interpret it's output. In this short, we'll explore the offset keyword and how IDA uses it to display addresses and offsets. Join this…

Josh Stroschein | The Cyber Yeti @jstrosch.bsky.social · 23d

📣 Apologies, folks! Today's live stream with Hahna Kane has been postponed. We're working on rescheduling for October and will share the new date soon. Stay tuned!

Josh Stroschein | The Cyber Yeti @jstrosch.bsky.social · 23d

The next episode of Behind the Binary is here! Getting ready for FLARE-On 12? Not sure what it even is? This episode is for you! We’re joined by FLARE-On host and challenge author Nick Harbour and challenge author Blas Kojusner to give you an inside look!

open.spotify.com/episode/4eS4...

EP15 Getting Ready for FLARE-On 12 - An Inside Look at the Reverse Engineering Gauntlet

Behind the Binary by Google Cloud Security · Episode

open.spotify.com

Josh Stroschein | The Cyber Yeti @jstrosch.bsky.social · 25d

🚀 Live stream this week with the one and only Hahna Kane Latonick! We'll be chatting practical applications of machine learning and demoing some LLM-based reversing with Ghidra and MCPs!

Join us on YouTube 👉 youtube.com/live/_SIGeLA...

Practical Applications in Machine Learning with Hahna Kane Latonick

Hahna Kane Latonick joins the live stream to talk about machine learning, reverse engineering, program analysis and more! We'll explore practical approaches ...

Josh Stroschein | The Cyber Yeti @jstrosch.bsky.social · 25d

🚀 Miss the stream with Xusheng? You can learn all about Binary Ninja's time-travel debugging support plus some not yet released features 👇

youtube.com/live/-eVyYB8...

Leveraging WinDbg in Binary Ninja - TTD and the WinDbg Backend

Xusheng Li, software engineer at Vector 35, joins the stream to show how to maximize the WinDbg backend directly through Binary Ninja. We'll also take a look...

Josh Stroschein | The Cyber Yeti @jstrosch.bsky.social · Sep 9

🧙 Heard of Magika? This is an AI-powered file detection utility - learn how you can leverage it's capabilities and what makes it different than the file utility in this short 👇

youtube.com/shorts/k1w3y...

🧙‍♂️ Magika Unveiled: AI-Powered File Type Detection in Action!

Discover Magika, Google’s open-source, AI-driven file type detection tool that revolutionizes how we identify binary and textual files! In this short video, we explore how Magika uses a lightweight…

Josh Stroschein | The Cyber Yeti @jstrosch.bsky.social · Sep 8

🚀 Live stream this Thursday! Xusheng Li, developer at Vector 35 (Binary Ninja) joins the stream to show you how to max out your debugging experience with WinDbg. Note the time, we'll be streaming at 8pm CDT!

🎯 Join us on YouTube youtube.com/live/-eVyYB8...

Leveraging WinDbg in Binary Ninja - TTD and the WinDbg Backend

Xusheng Li, software engineer at Vector 35, joins the stream to show how to maximize the WinDbg backend directly through Binary Ninja. We'll also take a look...

Josh Stroschein | The Cyber Yeti @jstrosch.bsky.social · Sep 6

🔔 Miss the stream with Peter Manev? No worries, you can get caught up here and learn about how the latest Suricata 8 features can help with threat hunting and detection 👇

youtube.com/live/LrxU5hj...

Suricata 8: Unveiling the Next Generation of Threat Detection with Peter Manev

Peter Manev, a Suricata Project evangelist, a threat hunter and a co-founder and chief strategy officer (CSO) of Stamus Networks, joins the live stream to di...

Josh Stroschein | The Cyber Yeti @jstrosch.bsky.social · Sep 5

🥷 Learn how to modify eflags/rflags from the WinDbg command line using the r utility in this short 👇

youtube.com/shorts/Cl9Xp...

How to Set Flags in EFLAGS/RFLAGS Using the r Command in #WinDbg

Learn a powerful WinDbg trick to set flags in the EFLAGS/RFLAGS register using the r command! Since WinDbg’s GUI doesn’t offer an easy way to modify flags, this video shows you how to do it…

Josh Stroschein | The Cyber Yeti @jstrosch.bsky.social · Sep 3

🚀 Ready to learn about decentralized finance, web3 technology and how it is abused by threat actors? The latest episode of Behind the Binary is here! In this panel episode, guests Blas Kojusner, Joe Dobson and Robert Wallace will break it down 👇

open.spotify.com/episode/4MMp...

EP14 Web3's Dark Side: Unmasking the New Age of Financial Crime

Behind the Binary by Google Cloud Security · Episode

open.spotify.com

Josh Stroschein | The Cyber Yeti @jstrosch.bsky.social · Sep 2

🐧 Know what is a nice addition to the FLARE-VM? The Windows Subsystem for Linux (WSL) - learn how easy it is to install from the command-line in this Short 👇

youtube.com/shorts/32_kU...

🐧 Quick Guide to Installing WSL: Run Linux on Windows in Minutes!

Learn how to easily set up the Windows Subsystem for Linux (WSL) with this short, step-by-step tutorial! Bring the power of a full Linux distribution to your Windows machine and access familiar Linux…

Josh Stroschein | The Cyber Yeti @jstrosch.bsky.social · Aug 29

⏰ Miss the stream featuring the latest updates to x64dbg, such as it's new type system? Catch the stream with the creator Duncan Ogilvie 👇

youtube.com/live/eODAI3Z...

A Revamped Type System: Exploring x64dbg’s Latest Features with Duncan Ogilvie

Join the live stream with Duncan Ogilvie (@mrexodia), the creator of x64dbg, as he breaks down the latest updates to this open-source debugger. The spotlight...

Josh Stroschein | The Cyber Yeti @jstrosch.bsky.social · Aug 28

🐚 Speed up your malware analysis with Speakeasy! This YouTube Short shows how to emulate shellcode & extract key IOCs without diving into disassembly 🤔 Perfect for malware analysts seeking a fast, efficient workflow!

youtube.com/shorts/SVmn_...

🔎 Quick Shellcode Analysis with Speakeasy

Learn how to use Mandiant's Speakeasy to emulate shellcode and accelerate malware analysis! This YouTube Short shows how to swiftly extract key Indicators of Compromise (IOCs) without reading…

Josh Stroschein | The Cyber Yeti @jstrosch.bsky.social · Aug 27

🧹 Whether you're reversing native code or crafting shellcode, spotting key patterns is crucial. This short dives into three essential instructions for zeroing memory: XOR, STOSD, and REPNE.

🛠️ youtube.com/shorts/GSExn...

Assembly Shorts - Clearing Memory with XOR, REPNE, and STOSD

Clearing memory is a common task, whether manually done by the programmer or added by something like a compiler. In this video, we'll explore how to clear memory using a few x86 instructions. How to…

Josh Stroschein | The Cyber Yeti @jstrosch.bsky.social · Aug 27

🛠️ Missed the recent live stream with Cerberus diving into Binlex for malware detection? Catch up now and discover how this powerful Binary Genetic Traits Lexer Framework can enhance your threat-hunting game! Watch the replay here 👇

youtube.com/live/HgXMPnL...

Unpacking Binlex with Cerberus: Malware Hunting & Binary Analysis Live!

Join us for a live stream with Cerberus (@c3rb3ru5d3d53c), the creator of Binlex and a fellow streamer and content creator. Binlex is a powerful Binary Genet...

Josh Stroschein | The Cyber Yeti @jstrosch.bsky.social · Aug 26

⏰ Live stream in ~30 minutes! Peter Manev joins us to talk about network threat hunting and the latest features in Suricata 8!

youtube.com/live/LrxU5hj...

Suricata 8: Unveiling the Next Generation of Threat Detection with Peter Manev

Peter Manev, a Suricata Project evangelist, a threat hunter and a co-founder and chief strategy officer (CSO) of Stamus Networks, joins the live stream to di...