
Computer security enthusiast and martial artist. I like to find holes in defenses and exploit them. OSCP, OSCE, CISSP. Adversarial Engineer at @Lares_
Guelph
Joined May 2010
- Tweets6.5K
- Following898
- Followers1.1K
- Likes2.4K
You had one job @Sportsnet ; provide a legal stream for Canadians for the game tonight. And you failed miserably.
ShellStorm retweeted
Got a new blog out about detections and hunting in AWS Bedrock - definitely a new area for me to explore - learned a lot writing this one.
Also a tad bittersweet as this will be my final blog at Sumo - a new & exciting journey begins next week!
sumologic.com/blog/defenders…
ShellStorm retweeted
𝐇𝐨𝐰 𝐝𝐨𝐞𝐬 𝐬𝐨𝐦𝐞𝐨𝐧𝐞 𝐠𝐨 𝐟𝐫𝐨𝐦 𝐡𝐚𝐜𝐤𝐢𝐧𝐠 𝐗𝐛𝐨𝐱 𝐜𝐨𝐧𝐬𝐨𝐥𝐞𝐬 𝐭𝐨 𝐥𝐞𝐚𝐝𝐢𝐧𝐠 𝐫𝐞𝐝 𝐭𝐞𝐚𝐦 𝐞𝐧𝐠𝐚𝐠𝐞𝐦𝐞𝐧𝐭𝐬?
Check The Security Repo podcast featuring @bhohenadel, a red teaming OG with a wild ride of a career! 📺 buff.ly/4cCQJGZ
If you're going to @AtlSecCon this week please find me and say hello. It's been a minute since I've been to a conference and would love to chat with InfoSec people in person.
ShellStorm retweeted
Just heard an excellent consulting/offsec team lead became available for whoever is first. Feel free to DM for intros. This guy is fucking ace and will take your team to new heights!
ShellStorm retweeted
Lares' Managing Director of Security Services, Mike Guthrie, breaks down Lare's approach to this issue and how our team makes sure each other logs the heck off when they are on PTO…real PTO.
👉 Get the Security Week article here: buff.ly/3VFf3mm
ShellStorm retweeted
Look, we know you're not a therapist (unless you are, then that's awesome). But mental wellbeing in your security team? That IS your business. Overworked, stressed-out people make mistakes. And those mistakes can be way more costly than someone not responding to your slack
ShellStorm retweeted
Ready to see how the bad guys get in?
Don't miss Brendan Hohenadel, Adversarial Engineer at Lares, break down his techniques for breaching Fortune 100s at ATLSECCON. His talk, "How I Hack Into Fortune 100s", gives you a front-row seat to the hacker's mindset.
I don't think I have ever been treated as poorly as I just was trying to cancel a room with @HamptonByHilton . The person groaned, sighed, yawned, talked over me and was incredibly condescending. Consider me one very unsatisfied customer.
ShellStorm retweeted
A lot has been said about removing hooks and kernel callbacks to stop an EDR from detecting malicious activity.
What if we could terminate the process completely?
Well ...we can.
Check this out:
spikysabra.gitbook.io/kernel…
ShellStorm retweeted
If you're worth your salt on the webapp testing side of things, we want you on our team. DM me for deets. I'll use this thread to detail what we are looking for.
This dude's a rockstar. You should be so lucky to work with him. This is your chance.
Do you enjoy Detection Engineering & Threat Research? Want to work with a super cool, cloud-native platform at a great company with an awesome team; including telling me what to do?
Check out this posting!
boards.greenhouse.io/sumolog…
Had a recruiter reach out asking me to apply for a senior pentest role at a large well known company.
Me: "No thanks, I already work for the greatest company in our industry: @Lares_. Anywhere else is a step down. I have no interest in working for that company"
ShellStorm retweeted
The @NahamSec Hacking APIs book giveaway!
Giving out 10 signed print copies and I'll ship them anywhere 🌎🌍🌏
One entry per:
♥️ Like 🔁 RT
Ends in 48 hours!
Don't want to wait? Pick up a copy over @nostarch.
nostarch.com/hacking-apis
'journalist' aka blogger gets paid for poorly written article with clickbait title
Finding new exploits in Microsoft Teams is proving to be a lucrative endeavor.
trib.al/bcywYYL











