Purple Teamer | Probably a SIEM log | Send Memes | Putting the Tater in Administater | Security Spud @TrustedSec
Joined May 2022
- Tweets261
- Following274
- Followers540
- Likes1.6K
Pinned Tweet
Come check out our new offerings- we've been hard at work expanding our services!!
Your analysts are your strongest defenders, but are they equipped to keep up with the daily grind? 🐉 In our latest blog, @mega_spl0it breaks down our Purple Team's assessments and how to find the right engagement to develop your team. Read it now! hubs.la/Q04kK4_Y0
Megan retweeted
One of the most common questions on red team kick off calls is how should the defense respond if the red team is detected? This is a great question and seeks to maximize the value of the engagement.
I wrote this post in 2019 to directly and practically answer this question, and it's held up surprisingly well.
trustedsec.com/blog/red-team…
Megan retweeted
Released cldap_ping.py: AD user enum over real UDP cLDAP, plus anonymous rootDSE recon over TCP.
cLDAP tooling commonly runs the ping over TCP, which Event 5156 catches. Sending it over UDP leaves only netlogon.log (per Part 6). 😈
github.com/4ndr3w6/cldap_pin…
Megan retweeted
What do you do when you find an unfamiliar binary? Purple team it! 🟣
WWAHost.exe + a sideloaded AppX package = a real Microsoft login that hands OAuth tokens to an attacker.
Learned a ton about AppX. Best detection: MSAppHost/3.0 UA to non-MS hosts.
huntress.com/blog/stealing-o…
Megan retweeted
Manufacturing knows what happens when IT and OT go separate ways; #AI governance is an unexpected opportunity to do it differently. In our blog, @RockieBrockway walks through the unified governance model that bridges both. Read it now! hubs.la/Q04tlsmy0
Megan retweeted
Last call guys... Red teamers are going to LOVE this class. 😈
Get a sneak peek at what's waiting for you at @BlackHatEvents 👀 August 1-4 with our "Supply-Chain to Runtime: Attacking & Defending the Modern DevOps Stack" training. Last week to register at the current price—enroll now! blackhat.com/us-26/training/…
@curi0usJack @__spitzer__
Megan retweeted
Come check out our new offerings- we've been hard at work expanding our services!!
Your analysts are your strongest defenders, but are they equipped to keep up with the daily grind? 🐉 In our latest blog, @mega_spl0it breaks down our Purple Team's assessments and how to find the right engagement to develop your team. Read it now! hubs.la/Q04kK4_Y0
Megan retweeted
Don't miss this Wednesday's #webinar as TrustedSec's @curi0usJack and @mega_spl0it sit down with @Binary_Defense's @n0decaf to tackle how #AI is changing detection engineering — from both the offensive and defensive side. Register now! hubs.la/Q04nqwyG0
Megan retweeted
For our next webinar, we're joining forces with @Binary_Defense! TrustedSec experts @curi0usJack and @mega_spl0it, along with BD’s @n0decaf, team up for a dynamic conversation about how AI is affecting the way security teams operate. Secure your spot now! hubs.la/Q04lLPLl0
Megan retweeted
Is your #SOC speaking the same language as your adversaries? In our next webinar, @mega_spl0it will be presenting an overview of MITRE ATT&CK® mapping across cloud and on-premises environments, improving your team’s detection strategies. Register now! hubs.la/Q04cBpvG0
Megan retweeted
MCP servers often rely on SSE and WebSockets, which makes manual testing tricky. In this blog, @hoodoer introduces MCP-ASD, a new #BurpSuite extension designed to help testers identify, enumerate, and interact with #MCP servers more effectively. Read now! hubs.la/Q041yWN50
Megan retweeted
What's the future of #AI? In our next #webinar, our experts will discuss:
🔮 Future AI Trends
🐋 Emerging Threats
🏆 AI-Driven Solutions
And so much more. Secure your spot and join us next week!
hubs.la/Q041M7_D0
@HackingDave @HackingLZ @paulsems
Megan retweeted
JWTs power modern authentication, but missteps are common. In our blog, Aaron James shares a practical guide to assessing JSON Web Tokens, highlighting common weaknesses, testing techniques, and tools every security practitioner should know. Read it now! hubs.la/Q041-Dlf0
Embrace the Purple life! Developing both red and blue skillsets will make you a more well-rounded professional, guaranteed.
How does one Purple Team? In our latest blog, @mega_spl0it shares open-source tools, techniques, and tips for security practitioners exploring Purple Teaming, along with advice to boost offensive and defensive skills. Read now!
trustedsec.com/blog/purpling…
Megan retweeted
Thinking about going Purple? Let's talk! A Purple Team Engagement is a great way to identify gaps within your existing security controls. Find out more on our website! #PurpleTeam trustedsec.odoo.com/r/SRx
Megan retweeted
Log the right stuff—focusing on user and machine activity is the key to stronger alerts and threat detection. In our new blog, @ZBStrike explains how basic activity monitoring can boost your team’s security. Read it now! trustedsec.com/blog/i-got-99…
Megan retweeted
Join us for our next #webinar "Attack and Defend: Hard-Won Insights From Purple Team Operations" on May 21! @__spitzer__ @ZBStrike @cleverhandle3 will provide guidance on best practices after a #PurpleTeam engagement. Register now! trustedsec.zoom.us/webinar/r…
Megan retweeted
Don't forget to test your detections! In our new blog, @mega_spl0it discusses why this practice is valuable and how purple teaming can assist in building better, higher fidelity detections. Read it now! trustedsec.com/blog/the-nece…
Megan retweeted
In our new blog, Research Practice Lead @freefirex2 walks us through how to modify the system routing table when connecting to a virtual private network (VPN) with basic, user-level access. Read it now! hubs.la/Q03bh2bg0
Megan retweeted
A Red Team engagement is a serious commitment for any org who wants to improve their security posture. In our new blog, @curi0usJack breaks down some goals of a Red Team engagement so that you can better measure its success. Read it now! hubs.la/Q039HVd70
