Why is it that legit applications on internal devices are relying on external services to get their IP address?

Hey Aqua Security I got a question on this: with the chroot to "/host" -- does this mean the actors mounted the host OS to that directory first? Making sure I understand #DFIR #threathunting #ThreatIntelligence blog.aquasec.com/teamtnt-reemer…

Hey... how about, NOT naming DLLs in some high entropy pattern with matching high entropy folder?? I AM LOOKING AT YOU .NET Microsoft Security #threathunter #dfir

SwiftOnSecurity Phil Venables The final thing I’d leave you with: detection is a compensating control. “Compensating” implies that it’s in lieu of something better! Don’t settle for a highly-monitored environment full of risk. DO detect a cut finger in milliseconds, but also - remove the sharp edges!

Hey Huntress -- any chance I can get a "huntress" shirt? One of my coworkers was rocking one from DEF CON and the FOMO is real

Last night I finalised a little pet project- using lambda to run a script every hour to scrape an API for availability to a lido… the things I do for a swim! #Geek #NERD #loveagoodswim

Compile Error: You need v142 build tools //installs v142 build tools Compile Error: You need v142 build tools

Hey BSides Bristol — any chance for a late CFP? I got it ready to go :)

Excited to be speaking at BSides Bristol tomorrow -- going to try and get there as early as I can to take advantage of all the cool looking talks! #computersecurity

Apparently my Mac is the only mac in the world that doesn’t “just work” 🙄 Almost AV fail whale luckily BSides Bristol had my back… THANK YOU WINDOWS

Roll up, roll up! 🥁 The lovely ladies of Ladies of Cheltenham Hacking Society are hosting another meetup next week at our favourite haunt Bottle of Sauce in Cheltenham 💚 Join us for quantum physics hax, OSINT hax, and food and drinks kindly sponsored by PhishDeck 🎣 RSVP using Meetup (link below) 👇

The DFRWS USA 2024 CFP is open! For over two decades, DFRWS has been the premiere venue for academic researchers and industry practitioners to publish #DFIR research. The 2024 event will be hosted in Baton Rouge at LSU. Please visit buff.ly/3GkedT0 for details.

Cheltenham folks! I'm hosting a Hack The Box Meetup starting on the 25th Jan, at Hub8 Brewery Quarter! Come along for hax, pizza and drinks! RSVP here: meetup.com/hack-the-box-m… Hub8 + Hack The Box ❤️

Our next event is next week, and there’s still time to sign up! Sarah will be speaking about Android malware and reverse engineering, and Liz will be talking about application cybersecurity by design. RSVP here: meetu.ps/e/MPd2B/PGr2l/i See you there! 🥳 #LadiesOfCheltenham

Call for Papers still open sessionize.com/cheltenham-bsi…

I am speaking at Scot-Secure Summit 2024. Join me on Wednesday, 27th March in Edinburgh. invt.io/1txbu455xyy #dfir #threathunting

sketchymoose.blogspot.com/2024/02/i-made… I made a Chrome Extension with ChatGPT to make viewing recipes easier using cooked.wiki. Follow along :) #chatgpt #LifeHack

I am calling it now -- surprise guests Anthony Scaramucci and Katty Kay on the The Rest Is Politics roadshow this autumn?! ALASTAIR CAMPBELL Rory Stewart

New blog post: Gotta Captcha Them All! Leveraging yara rules to find FakeCaptcha URLs and other assorted badness sketchymoose.blogspot.com/2025/03/gotta-… #yara #virustotal #dfir