#BLM @ColonelPanic@infosec.exchange
Near the Salish Sea
Joined June 2012
- Tweets5.2K
- Following880
- Followers495
- Likes15.9K
Insightful thread. There's feasible, useful automation. That will not/should not lead to an autonomous SOC.
🧵 the 'Autonomous SOC' is a pipedream. 1/n
forrester.com/blogs/the-auto…
⚠️ATTN @punsandrosess @DoGoodComplex
Awesome work by @turboCodr, opening up a can of OSINT on x509 certs. (Part 1 of the blog is here: blog.gigamon.com/2022/10/19/…)
Here is the follow up post of a 2-part series I've written on OSINT analysis of x509 certificates used by phishing, malware, and everyday companies. This one focuses on the Subject Alternative Name and all the bits you can infer from it.
blog.gigamon.com/2022/10/24/…
This week on #BreakingBadness, @tw_pierce, @punsandrosess and @timhelming discover you can't talk about #OldGremlin without talking about the movie Gremlins. The crew also discusses double extortion attacks from #BlackByte. Listen here: bit.ly/3suzqTs
This week on #BreakingBadness, @tw_pierce, @punsandrosess and @timhelming discover you can't talk about #OldGremlin without talking about the movie Gremlins. The crew also discusses double extortion attacks from #BlackByte. Listen here: bit.ly/3suzqTs
⚠️ATTN Gremlins fans
This week on #BreakingBadness, @tw_pierce, @punsandrosess and @timhelming discover you can't talk about #OldGremlin without talking about the movie Gremlins. The crew also discusses double extortion attacks from #BlackByte. Listen here: bit.ly/3suzqTs
Thanks @mWISEConference for having us...always a great event and @gclef_ and I enjoyed sharing our research.
@DomainTools #ThreatIntel
You’re unable to view this Post because this account owner limits who can view their Posts. Learn more
I'm SO STOKED to be presenting with @gclef_ ! Super fun collaborator and great researcher. @DomainTools #cybersecurity
This Post is from an account that no longer exists. Learn more
This is my first @GrrCON but I sure hope it won't be my last. Very impressive show. Only regret: that I can't see all of the talks!
Speaking of talks, I'll be presenting on #DomainBlooms, something we at @DomainTools have been studying for a couple of years now.
Excellent thread on how IR in operational technology (OT) is a very different beast from in IT
Excellent thread
I love @MITREattack - but the ways some vendors operationalize it is misleading and often useless. 🧵
This is cool. @tw_pierce talked about the leak of #bruteratel on the #BreakingBadness podcast this week and one of the things we kicked around was how soon there would be good detections.
Super proud of the work the team did to get #bruteratel 🛡️ detections and playbooks out, in this blog we:
1. ⚗️ Reverse an example
2. ⚒️ Breakdown the C2 capabilities
3.🤺 Simulate for testing using Atomic-C2
Here are the bloody details: splunk.com/en_us/blog/securi…
#STRT #splunk
I wrote about the need to broaden the set of paths into infosec—it doesn't make sense for us to simultaneously decry the skills gap and hold unrealistic requirements for entry-level positions. I also wrote a bit about my own path.
.@CISAJen was right - the #infosec industry needs good people! @TimHelming describes his nonlinear path to a career as a security evangelist with skills from previous jobs and often overlooked soft skills. Read the full story here: bit.ly/3E8kGkh
Always worth checking out @securityskeptic 's stuff!
Dave Piscitello @securityskeptic will present findings & recommendations from recent studies of 3M phishing and 2.5M malware reports @M3AAWG #mtg56. Security experts also will discuss TLS, DNS, DDOS, malware, spam texting & more. Info m3aawg.org/upcoming-meetings
This made me think of you @jfslowik . 14k bricks. Note human for scale in the top-down image.
