Team AMBUSH

Technical services team at FRSecure.

[Biohacking Village 🧪 @DC_BHV]

@DC_BHV CTF TOP 3 teams! Congratulations!!
Our CTF is a learning experience, so points are not important, your knowledge and perhaps new passion for healthcare cybersecurity is the real prize!
THANK YOU to the team that has spent months preparing and long hours supporting it!

[Evan Francen @evanfrancen]

Clones of popular Ad blockers caught ad frauding millions of Chrome users https://t.co/SztlWE37O2

[Matt Hand @matterpreter]

Releasing a new tool to aide in Sysmon evasion, Shhmon (https://t.co/ydLxxl4REW) with an associated blog post including defensive recommendations https://t.co/AD8Pe7LPUM

[SpecterOps @SpecterOps]

New on the blog - @matterpreter releasing a new tool, Shhmon, which helps in evading Sysmon by targeting its driver. His post also includes defensive recommendations for detecting this technique.

Check it out: https://t.co/HFlpx2EpUp

[Team AMBUSH @AMBUSH_Sec]

Check out our very own Matt Findlay presenting his research on link shortening services at B-Sides MSP! Track 1 @ 12:00PM on Day2!

[Security B-Sides MSP @BSidesMSP]

Well kids, we'll be taking a short break while we say goodbye to @DerbyCon...We'll be working on getting the final comms out when we get back, in the meantime a little peek at the schedule as of today.

[OffSec @offsectraining]

Kali Linux is getting a major metapackage makeover. Find out more: https://t.co/rLltICzVEu

[Andy Robbins @_wald0]

Muscular Dystrophy killed my mother, her brother, and her father. Now it's killing my sister.

Here's my ask: if you have benefited from #BloodHound, don't buy me a beer. Instead, donate whatever amount you can to MDA using this link: https://t.co/oO3SRNnAnU

[packet storm @packet_storm]

Backdoor Found In Utility For Linux, Unix Servers https://t.co/AEkfyqLNIU #news

[Sean Metcalf @PyroTek3]

#ActiveDirectorySecurityTips
Run this AD module cmd:
get-aduser Administrator -prop PasswordLastSet,LastLogonDate,servicePrincipalName
(change name as needed)

* PW should change every year.
* If there's a SPN, get this removed ASAP.
* Account should not have a recent logon.

[Binary Defense @Binary_Defense]

More than 58,000 records found via an #unencrypted database belonging to #MoviePass. The database has been taken down, but the data very well may still be out there. https://t.co/PklvrWJ3mr

[Team AMBUSH @AMBUSH_Sec]

@digivalk We appreciate the kind words. At the end of the day, the reason we enjoy these types of events is the challenge. Thank you pTFS for being a challenge. Looking forward to competing with you again in the future.

[Team AMBUSH @AMBUSH_Sec]

@GadgetryTechJoe @Gam3z_Inc @defcon This seems unlikely. We do not frequent gyms, as it is difficult to find wall outlets for our laptops.

[Gam3z Inc. @Gam3z_Inc]

Congrats to all teams that participated in the warl0ck gam3z CTF @defcon 26. Props to team PTFS for earning their #DEFCON 26 Black Badge!

[Team AMBUSH @AMBUSH_Sec]

2nd Place! On stage for closing ceremonies two years in a row! Thanks @Gam3z_Inc for a fun ctf. #DEFCON

[Gam3z Inc. @Gam3z_Inc]

One hour remains in warl0ck gam3z CTF @defcon 26! Leadership of the board has changed once again. #DEFCON

[Team AMBUSH @AMBUSH_Sec]

This is what a final night of CTFing looks like. #DEFCON

[Team AMBUSH @AMBUSH_Sec]

Warming up earlier for the @Gam3z_Inc warl0ck ctf at #defcon

[Team AMBUSH @AMBUSH_Sec]

@SpecterOps Fantastic training. Thank you to everyone involved!