Head of Intelligence R&D at NetWitness. Co-founder of Unit 42 - Palo Alto Networks and NCIJTF, co-creator of ATT&CK, USAF vet. She/Her.
Joined June 2009
- Tweets 2,613
- Following 1,883
- Followers 1,594
- Likes 14,421
409 Photos and videos
Pinned Tweet
9 Aug 2023
How do I know this is your horse?
Can’t you see this horse loves me?
Had a gal do that to me, didn’t make her my wife.
7
1,371
Jen Miller Osborn retweeted
Apr 20
DomainTools assesses with high-confidence that personas Homeland Justice, Karma & Handala constitute a coordinated, MOIS-aligned cyber influence ecosystem operating under multiple branded identities that serve distinct but complementary operational roles. dti.domaintools.com/research…
3
10
1,351
Jen Miller Osborn retweeted
If you're in NYC and interested in hacking on an app that would help incarcerated people, there's an awesome hackathon March 7-8.
The goal is to create an open source platform that provides free calls, video, and messaging to incarcerated people so they don't have to choose between exorbitantly priced calls or foregoing connecting with loved ones.
It has been shown that maintaining this connection to the outside world can help incarcerated people stay on the right path because they have something to hope for.
They're looking for engineers, designers, and product folks.
25
173
583
29,248
Jen Miller Osborn retweeted
Feb 18
We're hiring! 🚀
We have an open position for the Senior Deception Engineer role at @watchtowrcyber
Looking for someone with deep #honeypot and deception experience to join my team!
careers.watchtowr.com/jobs/7…
10
26
5,298
Jen Miller Osborn retweeted
Cost of software development continues to rapidly approach zero
Anthropic just published an experiment where researcher Nicholas Carlini set up 16 Claude agents running in parallel to build a C compiler from scratch in Rust
Over two weeks and about $20k in API costs, the agents produced a 100k-line compiler that can build the Linux kernel
19
24
181
46,442
Jen Miller Osborn retweeted
🔥 NEW research published: We uncover #DKnife, a China-nexus gateway-monitoring framework that intercepts network traffic, monitors user activity, and delivers malware #Shadowpad & #DarkNimbus via routers and edge devices.
blog.talosintelligence.com/k…
1
40
143
17,095
Jen Miller Osborn retweeted
Jan 5
We got our hand on a Chinese DLP program the government and national security agencies use to monitor state employees computers for leakage and usage of confidential documents. Meet 保密管理系统. 1/9
10
140
648
73,753
21 Nov 2025
Shields Up: Alleged Microsoft Office Zero Day for Sale
dataminr.com/resources/intel…
1
106
Jen Miller Osborn retweeted
Blackhoodie returns to BOOTSTRAP25 with a 1-day FREE women hackers course on compiler internals for security: ringzer0.training/bootstrap2…
3
3
683
Jen Miller Osborn retweeted
11 Mar 2025
Oof, RIP Southwest, guess it’s Delta and United for me moving forward.
11 Mar 2025
May whoever decided to RUIN Southwest Airlines be immediately fired and NEVER allowed to touch the company again
13
2
69
5,057
Jen Miller Osborn retweeted
10 Mar 2025
No lies detected.
9 Mar 2025
How did we get into this mess? You ask. Well, too many of you had football coaches for social studies teachers.
1
2
4
509
Jen Miller Osborn retweeted
6 Mar 2025
Breaking News 🤫 #TheWireReunion
Date & Details On The Way!
Wait til you see who I got pulling up!
BTW this will be the first one out of multiple Wire parties, panels, reunions. The Whole entire industry knows how long I’ve been keeping the show alive so this one’s for you.
I’ve been campaigning for these reunions for years & NOW it’s finally happening!
Sincerely
CHANEY VISION ENTERTAINMENT! #TheWire #Party #Reunion #Panel #Autograph #Pictures @Ziggys_Duck
7
39
337
22,840
Jen Miller Osborn retweeted
28 Feb 2025
Live from the Oval Office
348
5,234
33,776
3,317,994
Jen Miller Osborn retweeted
11 Feb 2025
2025-02-10 (Monday): #StrelaStealer distributed through #malspam targeting EU. Zip attachment contains .js file that retrieves and displays decoy PDF before running StrelaStealer DLL hosted on #WebDAV server. More info at bit.ly/3QgxaLr
ALT Example of email and attachment for StrelaStealer. Screenshot of a computer screen displaying an email, with German text and including a PDF attachment. Additionally, a detail window on the side shows the contents of the attached ZIP file and the JS script inside it via Notepad.
ALT Screenshot of a Wireshark network analyzer interface showing HTTP requests and responses, highlighting a section labeled 'Traffic from an infection filtered in Wireshark.' Key details are visible, such as IP addresses, ports, and HTTP methods like GET and POST. The script retrieves StrelaStealer DLL. The script retieves the decoy PDF document. StrelaStealer data exfiltration.
ALT Decoy PDF retrieved by JS file. Screenshot of a PDF file titled 'invoice.pdf' displayed in a PDF editing software with various tools visible on the left side.
ALT HTTP POST request to C2 server for data exfiltration by StrelaStealer.
1
41
112
9,144
Jen Miller Osborn retweeted
1,255
35,977
361,483
4,370,762
Jen Miller Osborn retweeted
7 Feb 2025
APT Hunting 2015: Mimikatz.exe in Shim Cache, lsass.zip, SAM.sav, shell.aspx
APT Hunting 2025: Entra audit log analysis, sign-in log monitoring, user behavior analysis - plus figuring out how to export and scan writable folders on a vulnerable perimeter firewall
51
200
11,434
Jen Miller Osborn retweeted
9 Nov 2024
"Not every single woman has a scary story about a man" Yes they do. I promise you that they do.
5,387
43,353
303,155
6,727,451
Jen Miller Osborn retweeted
10 Nov 2024
I don’t know which journalists need to read this, but I do know which ones don’t.
2
3
36
1,151