OpenIOC (@OpenIOC) profile picture

The Twitter account for http://t.co/nftBwAFjCq. Here to answer questions about OpenIOC, IOCs, and how they can help you improve your response to modern threats.

Joined August 2010
Congrats to @cci_forensics for placing in the Volatility Plugin Contest for 2014 with his plugin for OpenIOC! ow.ly/DxqBb
1
1
the handlers at @sans_isc now offer OpenIOC format via their API: isc.sans.edu/forums/diary/No…
1
3
3
IOCBucket.com just received a major #MIRcon face-lift! Check out the new look!
6
1
RT @zwned: Friend of mine just put this up… use it iocbucket.com/ #DFIR (cc. @IOCBucket)
2
2
New installment of the #OpenIOC blog series - OpenIOC: Back to the Basics mnd.tt/1k-yb #DFIR @OpenIOC @wgibb
10
1
RT @mandiant: M's @wgibb introduces the Back to Basics Series ft. @OpenIOC on M-Unition mnd.tt/mtah2 #DFIR #InfoSec
Podcast: Live from Black Hat 2013: @OpenIOC & IOC_Writer mnd.tt/pqql8 #blackhat #freeware
4
2
RT @w3nd1g04n6: @jaimeblascob Publicly releasing Snort, YARA and @OpenIOC indicators, all along with the article, this is why you guys rock!
. @Mandiant's Chris Bream presenting on @OpenIOC & intel sharing in M's booth 2439 @ 12:20pm today! mnd.tt/zqxoj #RSAC
2
1
. @Mandiant's Chris Bream presenting on @OpenIOC & intel sharing in M's booth 2439 @ 12:20pm & 5:20pm today! mnd.tt/zqxoj #RSAC
Replying to @threatintel
@threatintel Cool, how about releasing your indicators in @openioc format? Or at least a text file?
2
1
1
RT @mandiant: Still time to reg for today's webinar on @OpenIOC! mnd.tt/-5305 2pm ET. Follow live tweeting w/ #m_fp #dfir #APT1
1
RT @p0wnlabs: 'Bout time to join the mandiant .@OpenIOC web session cc.readytalk.com/r/v950ujivj… join in if you're into IOC
Hello @drshow listeners, if you want to see @openioc format for sharing threat intel, Web site is openioc.org/ Free, open standard.
1
1
Replying to @OpenIOC
I'd like to hear your opinion on this: #IOC are just simple #APT sigs & useless against other malware? siliciumsecurity.com/2012/03… @OpenIOC #DFIR
2
2
3
Freeware Release: IOC Editor (IOCe) v2.2.0 mnd.tt/us4zn #dfir #freetools @OpenIOC
1
11
5
downloads include related IOC RT @alienvault: Georbot #Botnet: A Cyber Espionage Campaign Against Georgian Government? ow.ly/eV9d0
3
1
Process involves extracting term values from IOCs, and using that to build splunk queries. Code on github/bechtel in near future. #MIRcon
2
3
Discussing using github for IOC version control, coordinating between host & network based indicators, & searching Splunk w/ IOCs #MIRcon
3
2