0xbad53c

Red Team Operations lead at DXC Strikeforce

[0xbad53c @0xbad53c]

https://t.co/gTjShoxlbc

[0xbad53c @0xbad53c]

APT 0x00 wants YOU.

Not as a victim. As their next worthy adversary.

4 days of purple team combat at #BHUSA 2026 - webshells, process injection, LAPS, RBCD, Kerberoasting.

⏰ Early bird ends May 22
🔗 https://t.co/G9jh0flLX5
@BlackHatEvents

[0xbad53c @0xbad53c]

https://t.co/gTjShoxlbc

[0xbad53c @0xbad53c]

AWS purple team finding:
We logged into the console without MFA a dozen times.
Only ONE alert fired. 🧵

[0xbad53c @0xbad53c]

Test the same auth scenario from every enabled region: ✅ Event generated in CloudTrail
✅ Logs forwarded to SIEM
✅ Detection fires
Each step is simple. Running them together is where gaps surface.
We teach this hands-on at @BlackHatEvents Aug 1-4.
#PurpleTeam #AWS #BHUSA

[0xbad53c @0xbad53c]

The "Console login without MFA" rule was textbook. Standard CloudTrail event, well-tuned.
But only us-east-1 was forwarded to the SIEM.
Every login from eu-west-1, ap-southeast-1, eu-north-1 never reached the SOC. The data existed in AWS - it just never got there.

[0xbad53c @0xbad53c]

We're back at @BlackHatEvents 🎰
Operational Purple Teaming For Defenders - 4 days of live attack-defense exercises against a progressively stealthier threat actor.
Hunt. Detect. Respond. In real time.
August 1–4 | Las Vegas
Early bird ends May 22.
https://t.co/JjDS7Zqq6e
#BHUSA

[0xbad53c @0xbad53c]

https://t.co/ZVwbMFFf3y

[0xbad53c @0xbad53c]

@BruCON, we're back! 25 spots sold out! ✅ Missed it? Level up at the 4-day Operational #PurpleTeaming training at Black Hat Europe (Dec 8–11). Seats waiting for defenders who want to get hands-on. 🔥🔗
#BelgianStyleHacking #BruCON0x11 @BlackHatEvents #BHEU

[0xbad53c @0xbad53c]

Our Operational Purple Teaming For Defenders training at #BruCON was sold out, but we released 5 more tickets. Only 3 left! Sharpen your purple skills and earn a coin! @brucon
🎟️ https://t.co/8mknPjHt3n
If it’s gone, join us at #BlackHatEurope in Dec: https://t.co/sFjgjh3hpE

[0xbad53c @0xbad53c]

Today marks the final day of our @BlackHatEvents #BHUSA #PurpleTeam training in Las Vegas. Participants combat our APT 0x00 threat actor in a controlled #AWS Active Directory environment using #Elastic and #Velociraptor. We came prepared for the #CTF.

[BruCON @brucon]

Combat APT 0x00 in the 3-day Operational Purple Teaming for Defenders Training in September at #BruCON0x11. Experience a realistic attack from the #BlueTeam point of view to gain a deeper understanding of threat actor techniques and detection strategies. https://t.co/ohf6Cotca4

[0xbad53c @0xbad53c]

@Theonly_Hoff It was great having you! Thanks for the participation!

[0xbad53c @0xbad53c]

Our Operational Purple Teaming training at #TROOPERS25 just wrapped! 🔥
Huge thanks to the 25+ defenders who made it a sold-out, high-energy session. 💪
Next stop: Black Hat USA — 4 days, even deeper dives. Limited seats left
🎟️ Link below!
#PurpleTeam #CyberSecurity #BHUSA25

[0xbad53c @0xbad53c]

https://t.co/jkzq5NjQ2U

[BruCON @brucon]

Looking for an affordable, high-quality and engaging cybersecurity course? Check out the #BruCON0x11 training program (22-24 Sept). Choose from 9 red, blue or purple courses with early-bird pricing available until the end of the month! https://t.co/CDOIVF1q1x #HackingForBeer

[BruCON @brucon]

The #BruCON0x11 training program (22-24 Sept) has been published! 9 courses covering AI, hardware hacking, exploit development, social engineering, threat modeling, cloud, MacOS and red, blue or purple teaming. Early-bird prices till end of the month ! https://t.co/CDOIVF1q1x

[0xbad53c @0xbad53c]

Excited to bring our Operational Purple Teaming for Defenders training to 🇧🇪@brucon again! This hands-on course bridges red & blue, empowering defenders with offensive insights to level up detection & response. Join us: https://t.co/8mknPjHt3n
#PurpleTeam #Cybersecurity #BruCON

[0xbad53c @0xbad53c]

The @WEareTROOPERS training is now sold out but you can still catch our 4-day Operational Purple Teaming For Defenders at @BlackHatEvents #BHUSA in August!
https://t.co/jkzq5NjQ2U

[0xbad53c @0xbad53c]

In 2023, I discovered a critical unauthenticated Remote Code Execution (#RCE) vulnerability in HPE Cluster Management Utility (CMU), while analysing source code. After more than two years, this issue has finally been assigned CVE-2024-13804.
https://t.co/mtOfYSt7ka

[0xbad53c @0xbad53c]

https://t.co/jkzq5NjQ2U

[0xbad53c @0xbad53c]

Are you ready to advance your threat hunting and detection engineering skills? Join us at @BlackHatEvents #BHUSA for our Operational Purple Teaming for Defenders training! Let's bridge the gap between offensive and defensive cybersecurity!