Sec ops tool-building wizard, thrives on detections and keyboard clacking. hackerjobs.com
Joined December 2013
- Tweets 2,776
- Following 1,358
- Followers 585
- Likes 4,810
207 Photos and videos
Felix Jr. retweeted
Feb 3
Apple has a whole new page and videos introducing agentic coding within Xcode! developer.apple.com/xcode
8
34
374
22,311
The Secret to Buttery Smooth SwiftUI - SwiftDifferently swiftdifferently.com/blog/sw…
8
24
319
26,138
Felix Jr. retweeted
Jan 29
A rule that will accelerate your career: If you bring a problem, bring context. If you bring context, bring options. If you bring options, bring a recommendation. People trust people who help them think. Anyone can spot an issue, few can actually help move things forward.
94
1,126
6,797
172,268
Protect Malicious Apps acces to Mail:
-Disable user consent - require admin approval
-Audit & remove unused apps regularly, especially those with mail permissions
-Enforce Conditional Access
-Enable admin consent workflow to review all permission requests
-Monitor OAuth grants
🚨#BREAKING: Chinese hackers linked to the group known as Salt Typhoon have breached the email systems of U.S. congressional committee staff, gaining access to internal communications.
1
130
Understanding permission context before executing is critical. Always verify that permissions match the intended execution before taking action.
Peek Before You Poke, Operator: open.substack.com/pub/detect…
42
Felix Jr. retweeted
13 Dec 2025
You really should consider requiring assignment for all the CLI tools like Graph, Azure, Exchange, etc.
You can even license devs/admins and allow access via PIM for Groups or Access Packages
I may even have automated setup for that here 😏
github.com/PatriotConsulting…
11 Dec 2025
New ConsentFix attack hijacks Microsoft accounts via Azure CLI - @billtoulas
bleepingcomputer.com/news/se…
bleepingcomputer.com/news/se…
10
39
238
41,179
Felix Jr. retweeted
20 Nov 2025
#MDE custom collection is finally in public preview! It's a centrally managed solution to improve visibility and detection opportunities.
We're releasing a management tool and rule repository in YAML format to share new rules with the community.
medium.com/falconforce/micro…
5
43
168
29,977
Felix Jr. retweeted
27 Oct 2025
Someone on Reddit found a couple fixes that might be worth trying: reddit.com/r/MacOS/s/l2yE2xz…
1
2
35
1,884
Felix Jr. retweeted
25 Oct 2025
TIL you can get Apple's docs as json
4
6
128
11,688
Felix Jr. retweeted
13 Oct 2025
My @BSides_NoVA talk from Saturday was called “10 Ways to Improve Entra ID Security Quickly”. I focused on the areas that tend to be missed in Entra ID. Talk slides are now posted.
Download the slides: adsecurity.org/?p=4799
1
33
141
22,365
I wrote a little something about this on my blog: open.substack.com/pub/detect…
I remember doing a bit a research on this back in 2022 after a post @jhencinski made.
11 Oct 2025
Dawg, Microsoft found a Threat Actor that compromised a company and modified the internal payroll system so when paychecks were scheduled to be deposited it went into THEIR accounts, NOT the employees.
That's fucking badass wtf I've never seen that before
1
75
26 Jul 2022
Why?
When you make a payroll change in Workday, like “send 100% of my paycheck to this new account” - Workday will likely send you an email confirmation. The attacker creates a new Inbox-rule so the victim doesn’t see this email.
53