Hello and welcome to the Monday, November 14th, 2020 edition of the Sandstone Storm Center's

Stormcast. My name is Johannes Ulrich and the time recording from Jacksonville, Florida.

In this weekend's Diary, DDA, yet again, looks at Cyber Chef and how to do new and interesting things with Cyber Chef in this particular case analyzing, well, pretty much sort of standard CISLog data.

He calls it log format.

If you ever looked, for example, at IPTables log in CISLog, you will sort of recognize this format where you have sort of a field

value equals and then the actual value going with that field name. Now the trick here that

the use with Cyber Chef is how do you actually analyze large amounts of data inside the browser? And what DDA does is he actually

uploads a zip file, then has Cyber Chef unsip it, and then analyze it. Personally, I'll probably

stick with tools like cut and crep for these kind of logs, but interesting approach in

particular, the idea of processing larger files in Cybershift. By the way, if you ever want

to stuff about the privacy issues with Cyber Chef, you can actually run it pretty easily

on-premise, so to speak, by just downloading the JavaScript.

And if you are using Cybershift from the GitHub site, everything should run in your browser.

Anyway, in a couple of weeks, the Soccer World Cup will be taking off. And with that, of course, there are already a couple of sort of security related issues around this.

First of all, if you are actually going to Qatar in order to visit any of the live games. There are some interesting COVID-19 tracking and

ticket applications that you need to download. Usually recommend it to install things like this on

a burner phone. Also, there are already a number of scams going around according to some new

sites, like, for example, fake ticket

scams, lottery scams, and the like. Well, as usual, any big event like this is going to

attract some scammers fishing and malicious emails and all of the good stuff. So be careful

and maybe good in particular if you're living in a country that is more

into soccer or football to actually do a little awareness email or session about the risks

...