JMP RSP

offensive security addict. @falconforceteam co-founder. speed maniac.

[JMP RSP @0xffhh]

@jsecurity101 @_xpn_ Exactly this! The ROI on c2 detections is super low. You need a lot of data, a lot of time and detection effort, and still are guaranteed to miss a lot of things. Detecting bad behavior has a waaay bigger ROI.

[Wild West Hackin' Fest @WWHackinFest]

Sponsor Spotlight | @falconforceteam

We would like to thank FalconForce for being a Silver Sponsor for Deadwood 2023! Check out all about their company and services here: https://t.co/11xh6sEBt6

[JMP RSP @0xffhh]

@Flangvik @HackingLZ Congrats man! Epic car 😎

[JMP RSP @0xffhh]

Having an implant running undetected on an edr protected machine is all cool, but detecting TAs is just ~20% about detecting their implant. Detecting the stuff they do with their implant is what matters way more. Local priv esc, cred dumping, lateral movement, etc. Just saying 🤷‍♂️

[JMP RSP @0xffhh]

@N7WEra @Jean_Maes_1994 https://t.co/VzckoFYpBz 🤷‍♂️

Tl;dr very low tax rates for expats.

[JMP RSP @0xffhh]

@GayzeMay I’m still waiting for @KLM to respond. Same ‘no response’ on social media…

[JMP RSP @0xffhh]

Hey @KLM, i’m waiting for 6 months already for a claim to be handled. Don’t you think it’s about time to fix this? Already called you a few times and you keep saying ‘it’s busy’. So taking the shaming route now…

[JMP RSP @0xffhh]

@KwyjiboUK @UK_Daniel_Card @LisaForteUK @AppSecBloke @brechtcastel does this kind of magic as well.

[JMP RSP @0xffhh]

@pati_gallardo Build a random go project as lib and statically link into your project? 🤷‍♂️😋

[JMP RSP @0xffhh]

@yarden_shafir Red and black trees with a few green nodes?

[JMP RSP @0xffhh]

Does anyone have a working .NET core gadget for a deserializing vulnerability with https://t.co/y1yzulUlMY? The documented .NET framework gadgets don’t work in core. #SharingIsCaring

[JMP RSP @0xffhh]

@ChenCravat / Raymond Chen is a genius! Every time i encounter something weird in windows, he has documented it 10+ years ago 🤷‍♂️😎

[FalconForce Official @falconforceteam]

It’s #FalconFriday and summer is here! Take a refreshing dive into our newest blog, where we will shed some light on how Certipy and Rebeus work with UnPAC-the-hash and shadowing creds, and how to detect these techniques with our free #Kusto detections.

https://t.co/cxjyW3IxCg

[JMP RSP @0xffhh]

@n0x08 It’s more nuanced! Dependens on country/airport. Amsterdam allows you to leave everything in your bag. While many other eu airports require you to take stuff out. US is famous for shoes off, but was flying from SAN recently, and was allowed to leave liquids in the bag go figure🤷‍♂️

[JMP RSP @0xffhh]

@alisaesage Just wanted to say thanks for offering 10 spots for free for those who’re not fortunate enough to have an employer pay for it.

[JMP RSP @0xffhh]

@chvancooten @olafhartong @DebugPrivilege @DebugPrivilege no pressure…👀👀 when do you want to drop by? We’ll still off you a drink if you don’t want to share - promise!

[JMP RSP @0xffhh]

Does anyone know what the status is of API Monitor? Is in dead? Will it ever get an update or be open sourced? I have so many usecases and/or feature requests…🤯
Cc: @rohitab

[JMP RSP @0xffhh]

@chvancooten @olafhartong @DebugPrivilege Awesome! Can you forward me the invite as well, so I can make sure to be there? 😋 (i.e. when do you want to drop by?)

[JMP RSP @0xffhh]

@tijshofmans @defcon Check! Ik ben er + nog stapel collega’s.