Joined June 2012
- Tweets 5,161
- Following 882
- Followers 497
- Likes 15,895
192 Photos and videos
Pinned Tweet
Musky twitter's not for me
Mastodon is where I'll be
1
30 days til this account gets annihilated, I guess. Oh well!
1
107
Insightful thread. There's feasible, useful automation. That will not/should not lead to an autonomous SOC.
26 Oct 2022
🧵 the 'Autonomous SOC' is a pipedream. 1/n
forrester.com/blogs/the-auto…
1
1
⚠️ATTN @punsandrosess @DoGoodComplex
27 Oct 2022
Why are Microsoft employees never relaxed?
They’re always on Edge.
3
Awesome work by @turboCodr, opening up a can of OSINT on x509 certs. (Part 1 of the blog is here: blog.gigamon.com/2022/10/19/…)
27 Oct 2022
Here is the follow up post of a 2-part series I've written on OSINT analysis of x509 certificates used by phishing, malware, and everyday companies. This one focuses on the Subject Alternative Name and all the bits you can infer from it.
blog.gigamon.com/2022/10/24/…
1
26 Oct 2022
This week on #BreakingBadness, @tw_pierce, @punsandrosess and @timhelming discover you can't talk about #OldGremlin without talking about the movie Gremlins. The crew also discusses double extortion attacks from #BlackByte. Listen here: bit.ly/3suzqTs
1
26 Oct 2022
This week on #BreakingBadness, @tw_pierce, @punsandrosess and @timhelming discover you can't talk about #OldGremlin without talking about the movie Gremlins. The crew also discusses double extortion attacks from #BlackByte. Listen here: bit.ly/3suzqTs
1
⚠️ATTN Gremlins fans
26 Oct 2022
This week on #BreakingBadness, @tw_pierce, @punsandrosess and @timhelming discover you can't talk about #OldGremlin without talking about the movie Gremlins. The crew also discusses double extortion attacks from #BlackByte. Listen here: bit.ly/3suzqTs
2
Thanks @mWISEConference for having us...always a great event and @gclef_ and I enjoyed sharing our research.
@DomainTools #ThreatIntel
1
4
1
4
I'm SO STOKED to be presenting with @gclef_ ! Super fun collaborator and great researcher. @DomainTools #cybersecurity
1
4
Well, in about 20 minutes now :)
14 Oct 2022
1
5
This is my first @GrrCON but I sure hope it won't be my last. Very impressive show. Only regret: that I can't see all of the talks!
Speaking of talks, I'll be presenting on #DomainBlooms, something we at @DomainTools have been studying for a couple of years now.
2
5
Excellent thread on how IR in operational technology (OT) is a very different beast from in IT
6 Oct 2022
OT incident response requires pretty different skillset, mindset, and tools than IT incident response, and if a cybersecurity company tells you otherwise they are trying to sell you something. I call it ‘OT/IT DFIR divergence’, and it makes it challenging to hire and train folks.
Excellent thread
5 Oct 2022
I love @MITREattack - but the ways some vendors operationalize it is misleading and often useless. 🧵
1
1
This is cool. @tw_pierce talked about the leak of #bruteratel on the #BreakingBadness podcast this week and one of the things we kicked around was how soon there would be good detections.
4 Oct 2022
Super proud of the work the team did to get #bruteratel 🛡️ detections and playbooks out, in this blog we:
1. ⚗️ Reverse an example
2. ⚒️ Breakdown the C2 capabilities
3.🤺 Simulate for testing using Atomic-C2
Here are the bloody details: splunk.com/en_us/blog/securi…
#STRT #splunk
1
5
I wrote about the need to broaden the set of paths into infosec—it doesn't make sense for us to simultaneously decry the skills gap and hold unrealistic requirements for entry-level positions. I also wrote a bit about my own path.
29 Sep 2022
.@CISAJen was right - the #infosec industry needs good people! @TimHelming describes his nonlinear path to a career as a security evangelist with skills from previous jobs and often overlooked soft skills. Read the full story here: bit.ly/3E8kGkh
1
2
Always worth checking out @securityskeptic 's stuff!
Dave Piscitello @securityskeptic will present findings & recommendations from recent studies of 3M phishing and 2.5M malware reports @M3AAWG #mtg56. Security experts also will discuss TLS, DNS, DDOS, malware, spam texting & more. Info m3aawg.org/upcoming-meetings
1
2
