What a cool night on ICS CTF 2022 by SANS/Dragos, Inc. Could make my way to the top 3 individuals and had a lot of fun! BIG Thanks for this free CTF to SANS Institute AND Dragos, Inc. #ICSSecurity #ICSSummit #OT #OTsecurity #CaptureTheFlag #cybersecurity

Thanks for this great CTF! Big thanks to Jessica Hyde Magnet Forensics for this great opportunity! #DFIR #CTF #Forensics

#mastodon a semi-brief guide to Mastodon 😀 github.com/joyeusenoelle/…

Great new way for defenders to protect and monitor your DC's! #CyberSecurity

Happy New Year! Just released Collect-MemoryDump v1.0 with various enhancements. ARM64 Support, Pagefile Collection w/ Magnet RESPONSE, and much more. #MemoryAnalysis #DFIR github.com/evild3ad/Colle…

Real-World #PingCastle Finding #14: Misconfigured Certificate Templates The attackers gained Domain Admin rights within 2 hours after the initial infection on a recent IR engagement, investigated by NOP__. That's quick - how could they gain DA so fast? I'm glad you asked.

I finally came around to publish a blog post called "N-IOCs to Rule Them All", which is based on my FIRST talk from last year. The research presented may not be groundbreaking, but some of you might learn a thing or two. Enjoy 🤓 dfir.ch/posts/n-iocs/

Check out my new project Microsoft-Analyzer-Suite (Community Edition). A collection of PowerShell scripts for analyzing data from Microsoft 365 and Microsoft Entra ID extracted by Microsoft-Extractor-Suite. Invictus Incident Response #M365 #BEC #DFIR github.com/evild3ad/Micro…