How do I detect technique X in Windows Applied Methodology to Defin... youtu.be/GVRIUsgrwSQ great job by Matt Graeber as always. @markrussinovich if would be great is sysmon allows for ingestion of a configurable set of ETW providers.

A poorly functioning tabulation app that is one of three ways results are tabulated has only minimal impact on the integrity of the elections. Let us not go overboard in making this a larger issue than it is.

Anyone know of a good alternate to keybase? Asking for a friend.

Friendly reminder - your best mitigation against BEC is to have out of band validation of the request. BEC via an account takeover is impossible for both technology and humans to detect.

For all red-teamers out there, if you value your C2 infrastructure and are using it for high-value targets, don't also use it on a company that specializes in IR.