SANS Internet Storm Center
CompanyRecent news
SANS Internet Storm Center publishes ISC Stormcast podcast for 2 November 2026
SANS Internet Storm Center listed its ISC Stormcast podcast episode for Monday, 2 November 2026. The item contains only the title and a Creative Commons licence notice, with no details of vulnerabilities, incidents or recommended actions.
Didier Stevens adds JSON output to onedump.py for extracting OneNote embedded files
Didier Stevens has added a --jsonoutput option to onedump.py, which lists every file embedded in one or more OneNote .one files as JSON. Piping that output into myjson-filter.py with -W hashvir writes each embedded file to disk, named by its SHA256 hash with a .vir extension. The post is a SANS Internet Storm Center diary entry about a tool feature rather than a threat.
YARA-X 1.22.1 bugfix release and YARA 4.6.0 released
YARA-X 1.22.1 is a bugfix release containing two fixes. YARA 4.6.0 was also released, but it does not include the YARA-X addition of built-in functions for reading 64-bit integers (int64, int64be, uint64, uint64be). Didier Stevens, a senior handler at SANS Internet Storm Center, argues that YARA-X has effectively replaced YARA.