ThreatSniper v.1.0.9.376

[Kongo]

Just found a thread about this tool on Wilders and thought it would be worth sharing here.

In a security incident, time is everything. ThreatSniper speeds up the initial investigation process by presenting the analyst with a wealth of relevant information in a streamlined, time-saving layout, rather than having to use the following tools and features separately:

● Task manager
● Netstat
● VirusTotal lookups (for both files and IP addresses)
● Whois
● Smart hostname lookups
● Air-gapped mode: use any smartphone to perform real-time malware checks on an air-gapped / offline machine

Website: Metasudo

 

[Back3]

Got it. Nice tool. Thanks
One security vendor flagged the exe as malicious in Virus Total!

 

[SeriousHoax]

Got it. Nice tool. Thanks
One security vendor flagged the exe as malicious in Virus Total!

That's from APEX which is more like a factory of false positives. So, you can ignore any detection from them.

 

[Stopspying]

Thanks for the heads up about this, this could be very useful. It would be even better if you could resize the window, it seems to be stuck on the default size.

I use MT far more than Wilders so I may well have missed this there, or perhaps I should spend more time there! SSShhh don't tell the mods here I said that! If anyone has a secret way to gain an extra few hours in each day I'd appreciate knowing what it is.

 

[Kongo]

Thanks for the heads up about this, this could be very useful. It would be even better if you could resize the window, it seems to be stuck on the default size.

I use MT far more than Wilders so I may well have missed this there, or perhaps I should spend more time there! SSShhh don't tell the mods here I said that! If anyone has a secret way to gain an extra few hours in each day I'd appreciate knowing what it is.

I just scroll through the latest replies on Wilders from time to time. MT is my home after all.

 

[CyberTech]

Interesting! thanks for sharing..

 

[CyberDevil]

For some reason, it does not show data from VirusTotal. What am I doing wrong?

 

[Kongo]

For some reason, it does not show data from VirusTotal. What am I doing wrong?
View attachment 257777

Same for me with some processes...

 

[Stopspying]

For some reason, it does not show data from VirusTotal. What am I doing wrong?
View attachment 257777

Same for me with some processes...

I had that happen to me when I first ran ThreatSniper. I checked my connections so I knew it wasn't them, I restarted the program and it connected to VirusTotal OK after that. Hope that works for you as well. Do your firewalls allow it to access the internet?

 

[Kongo]

I had that happen to me when I first ran ThreatSniper. I checked my connections so I knew it wasn't them, I restarted the program and it connected to VirusTotal OK after that. Hope that works for you as well. Do your firewalls allow it to access the internet?

Doesn't help... I think I'll stick with System Explorer or Process Explorer.

 

[Stopspying]

I had that happen to me when I first ran ThreatSniper. I checked my connections so I knew it wasn't them, I restarted the program and it connected to VirusTotal OK after that. Hope that works for you as well. Do your firewalls allow it to access the internet?

The VirusTotal results that I get which suggest an issue (1/74) are all for security type programs - SpyShelter, CF, Windscribe, SurfShark, F-Secure and Threatsniper itself. Yes, there are two VPNs and two firewalls in that list, I swapped them over to see if anything was flagged from a second product after I saw that the first one had one negative result.

 

[CyberDevil]

Do your firewalls allow it to access the internet?

I accidentally found a solution. The program uses Plain DNS over TCP, which YogaDNS blocks by default.

But for IP addresses, VT still doesn't work.

 

[Zeitas]

 

[Kongo]

View attachment 258168

It's safe, don't worry.
Virus total only has one detection which is APEX. It's an AI based one and just a false positive.

 

[CyberTech]

Scanned and no found it by VirusTotal

 

[SeriousHoax]

View attachment 258168

I reported the site as a false positive that day and the reputation of the site has been fixed. Marked as Safe by Norton now.

Spoiler

Report for https://www.metasudo.com/ | Norton Safe Web

Norton Safe Web has analyzed https://www.metasudo.com/ for safety and security problems. Click now to view Norton Safeweb's rating for https://www.metasudo.com/

safeweb.norton.com