Finally put pen to paper on a topic that's been irking me. Fun fact: there is no AI malware doomsday on the way, nor is there an impending arms race of AI-powered malware vs AI-powered EDR. That's just vendor-serving rhetoric. fieldeffect.com/blog/the-brass…

I've long been interested in how EDRs work under the hood and how we can apply a more evidence-based approach to evasion. I'm happy to announce that I've written a book covering these topics with No Starch Press which is now available for preorder 🎉 nostarch.com/book-edr

sinusoid showed me this blog post that I somehow missed last year. I'm blown away by well it articulates many of the challenges that are facing red teams. jackson_t.gitlab.io/it-depends.html If you haven't read it yet, worth the 5 minutes.

“The greatest goals are achieved through minor but continuous ekkedt [sic: effort].” This quote from Anatoly Dneprov's thought provoking short story, "The Game" (1961) has resonated with me lately. hardproblem.ru/en/posts/Event…

One can tell how a red team operator thinks by which word in "information technology" they put most weight on in steering their engagement activity.

jackson-t.com/are-we-helping/

I don’t really talk about personal stuff on here, but this is important. My daughter’s leukemia has relapsed. We’ve been admitted to the children’s hospital for treatment, but it’s going to be a long road. One of the potential courses of treatment is a stem cell transplant..