Registration for VeloCON 2022 is NOW OPEN!! Join other DFIR experts and enthusiasts from around the world this September as we take Velociraptor to the next level of endpoint management, detection and response. Register today: docs.velociraptor.app/announcements/…

Join me and Jonas Bülow Knudsen for our workshop, "Azure Active Directory Abuse Fundamentals". 🗓️ - Friday, October 28th, 1-3PM Eastern 💵 - $100 USD* Read the full description and register here: eventbrite.com/e/so-con-2022-… *All proceeds will be donated to charity.

If you’ve been interested in my On Detection blog series, check out the “Deconstructing Adversary Tradecraft” workshop. We’ll try to cover as many of the related topics as possible in the time slot. I’ll also preview some of the ideas I’m working towards, but haven’t blogged yet.

"The enemy does not check your risk register prior to attacking." - Sun Tzu, The Art of Cyber War

Great week of training and workshops. SpecterOps Joshua Prager Luke Paine Jared Atkinson Andy Robbins

#infosec #TwitterBlue

I know it’s been a while but I turn on 9NEWS Denver at 10pm and Kyle Clark looks like he lost some weight. All celebrities these days are on Ozempic. Say it ain’t so.

It’s Friday and Casey Smith is back.

Did I see strandjs - [email protected] will be doing one of the keynotes at RMISC23.

I've long been interested in how EDRs work under the hood and how we can apply a more evidence-based approach to evasion. I'm happy to announce that I've written a book covering these topics with No Starch Press which is now available for preorder 🎉 nostarch.com/book-edr

Spent almost 2hrs listening to Rob Fuller this morning on HTB. You can tell when someone truly has a passion for industry and willing to spread the knowledge.

⭐️It's official! ⭐️The #LOLDrivers 1.0 release is out and includes a tremendous number of new additions! Release Blog: medium.com/magicswordio/l… loldrivers.io 1. New Driver Enrichments - Authentihash, signature metadata, and more! 2. Driver Binaries under the drivers/

Picked up VTI by Thomas Roccia 🤘 cant wait to get going.

I wish the industry would take more time to cross train IR/CTI with Red/Blue teams and vice versa. The fact people operate in vacuums is wild.

SANS CTI SUMMIT bringing out some heavy hitters for 24. Joe Słowik 🌻 Thomas Roccia 🤘 J⩜⃝mie Williams Roberto Rodriguez 🇵🇪 Andy Piazza SANS Institute Katie Nickels

Watching CTI Summit talks. Irrespective of the great content, J⩜⃝mie Williams has to be the definition of a humble individual.

With all the recent router/VPN/NGFW 0-days being used lately, this is the only logical solution 🙃

I’m giving away 10 FREE signed copies of our new book, Black Hat Bash! 🎉 Want one? Repost for a chance to win. #BlackHatBash #free #Giveaway

To help celebrate Arcanum Information Security Information Security's two-year anniversary, JS0N Haddix gave me 5 codes good for any Arcanum course to give away! Winners will be announced on 1/22. 👍 1 Like = 1 Entry! ♻️ 1 Share = 2 Entries!