0xPrashanthSec

SOC Lead | Threat Hunter | Automation
Building scalable detection systems, Sigma converters & IOC enrichment tools.
Sharing workflows, cleanup scr

[0xPrashanthSec @0xprashanthSec]

👋 Hey Twitter, I’m Prashanth — SOC Lead, threat hunter & automation nerd.

I build tools to:
⚙️ Convert Sigma rules to SIEM queries (Elastic, Sentinel)
🧠 Enrich IOCs from threat intel blogs
📅 Automate daily planning with GitHub Actions + Telegram

🔗 Explore my GitHub: https://t.co/5Qv5wnvEq9
💬 DM me if you want to collaborate or geek out on detection engineering.

[0xPrashanthSec @0xprashanthSec]

@AirIndiaX @AirIndiaX still no update on this?

@DGCAIndia

[0xPrashanthSec @0xprashanthSec]

Booked and paid for Seat 15F on @AirIndiaX , but was assigned 28E instead. Flight no: IX-1378. This is unacceptable. If customers are paying extra to reserve a specific seat, the airline should honor that commitment or proactively provide a refund and explanation. This feels like a scam. Please resolve this immediately. #AirIndiaExpress #CustomerService

[0xPrashanthSec @0xprashanthSec]

@AirIndiaX I have shared my PNR

[0xPrashanthSec @0xprashanthSec]

@DGCAIndia @AirIndiaX @Cleartrip

[0xPrashanthSec @0xprashanthSec]

@CRED_club my account is showing “there seems to be an issue with your account” and I’m locked out of the app. Already reached out to [email protected] — hoping for a quick fix! 🙏 #CREDapp

[0xPrashanthSec @0xprashanthSec]

@Kostastsale @RFGroenewoud 😅😅

[0xPrashanthSec @0xprashanthSec]

I just completed That's The Ticket room on TryHackMe! IT Support are going to have a bad day, can you get into the admin account? https://t.co/13JMgY5QPC #tryhackme via @tryhackme

[0xPrashanthSec @0xprashanthSec]

@Itsfoss https://t.co/qoC2xrH97A

[0xPrashanthSec @0xprashanthSec]

I just published WhatsApp as a Weapon: Detecting the VBScript-to-ManageEngine RMM Campaign with EQL https://t.co/h4LXZh4ddr

[0xPrashanthSec @0xprashanthSec]

@ZackKorman Using a service account for interactive sign-ins

[0xPrashanthSec @0xprashanthSec]

I just published BlueKit: The Phishing Kit That Makes MFA Irrelevant https://t.co/JejdkfIm1x

[0xPrashanthSec @0xprashanthSec]

@AlteredSecurity This is really good; Thanks for sharing!

[0xPrashanthSec @0xprashanthSec]

I just published ClickFix + VLC DLL Sideloading: How Attackers Are Hiding RATs Inside a Signed Video Player https://t.co/5wOMWfjeg8

[0xPrashanthSec @0xprashanthSec]

I just published Inside the Panic: Why CVE-2026–0257 is a Real Wake-Up Call for VPN Security https://t.co/LJlLF1M7Sh

[0xPrashanthSec @0xprashanthSec]

@syntaxish nah~

[0xPrashanthSec @0xprashanthSec]

I just published Hunting ADCS Attack Paths: Detecting ESC1–ESC6 Privilege Escalation in Active Directory https://t.co/A3dgyuz4X0

[0xPrashanthSec @0xprashanthSec]

@rucam365 Curious - what remediations are in place to deal with this?

[0xPrashanthSec @0xprashanthSec]

@SBousseaden @_devonkerr_ Nice..!

[0xPrashanthSec @0xprashanthSec]

Hot take: silence after a breach isn’t caution — it’s a liability calculation.

Dashlane hasn’t explained how 2FA was bypassed. Hasn’t directly contacted affected users.

For a password manager, that standard isn’t acceptable.
#CyberSecurity #InfoSec #Breach

[0xPrashanthSec @0xprashanthSec]

Dashlane: ~20 encrypted vaults stolen after attackers bypassed 2FA.

No explanation of how 2FA fell. No ransom info. No direct comms to affected users.

“Systems weren’t compromised” + stolen vaults = pick one.

#CyberSecurity #InfoSec #Breach #PasswordSecurity