AM

Security Architect | CrowdStrike, Active Directory & Entra ID Expert Sharing PowerShell/API scripts, hardening guides, and articles

[AM @AdiMahluf]

@amsterdamski2 גאוני שיווק, זה הכל.

[AM @AdiMahluf]

@Tank23x0 @GelosSnake @mthcht2 That's true 👆

[AM @AdiMahluf]

@horizon_secured @curi0usJack Not much, unfortunately 🤷‍♂️

[AM @AdiMahluf]

@hetmehtaa This is live one, target Israeli telegram users: t8npxm[.]fun

[AM @AdiMahluf]

🚨 Phishing Alert: Israeli Telegram users! 🇮🇱

Beware of fake Hebrew "System Messages" claiming account violations & demanding verification in 12h.

❌ DO NOT click. Malicious link: t8npxm[.]fun

#Phishing #Telegram #SecurityAlert #IsraelCyber #StaySafe

[AM @AdiMahluf]

@UK_Daniel_Card Yes! I’m using admin01 - let’s see how your password spraying handles this. Haha

[AM @AdiMahluf]

#SpecterOps shows how legitimate #MSSQL & #SCCM roles can lead to full admin. This isn’t a #0day problem - it’s a privilege design failure. Least-privilege still matters.
https://t.co/qfonbblRTJ

[AM @AdiMahluf]

@grok Specify each country and the number of troops it has sent.

[AM @AdiMahluf]

#TenRoot indicates that multiple Falcon EDR deployments unexpectedly transitioned into Reduced Functionality Mode (RFM) following recent Microsoft updates. Notably, this behavior appears to have gone undetected by CrowdStrike to date.#CyberSecurity #Microsoft

[AM @AdiMahluf]

Microsoft January 2026 Security Updates 2026-01 B cause CrowdStrike Falcon agent to enter RFM (Reduced functionality Mode)
#microsoft #update #CrowdStrike #Falcon #RFM

[AM @AdiMahluf]

Stop guessing if a user clicked a link!
UrlThreatScanner automates the "User Browse Trace" workflow -
Dumps local browser history (NirSoft engine)
Checks URLs against active malware feeds
Reports hits in seconds
Open Source & ready for IR: https://t.co/aYKkBR016i

#InfoSec #DFIR

[AM @AdiMahluf]

funny
#WeAreAllDown #DownDetector #CloudFlare #CloudFlareOutage

[spencer @techspence]

Regular reminder… this hardening series by Jerry Devore is super awesome. There’s no way you won’t learn things by reading these.

Part 1 - Disabling NTLMv1
Part 2 - Removing SMBv1
Part 3 - Enforcing LDAP Signing
Part 4 - Enforcing AES for Kerberos
Part 5 - Enforcing LDAP Channel Binding
Part 6 - Enforcing SMB Signing
Part 7 - Implementing Least Privilege

Link to all articles 👇
https://t.co/JNDMfVqoDP

[AM @AdiMahluf]

Do you remember when you joined X? I do! #MyXAnniversary

[AM @AdiMahluf]

@djcows Cut the password as well, use the physical token ;)

[AM @AdiMahluf]

The hell is wrong with my #ChatGPT?
#Prompt it on you ChatGPT:
What is the #emoji of a #seahorse?

[AM @AdiMahluf]

@reprise_99 Makes life easier.
For a few hours (or minutes).

[AM @AdiMahluf]

@grok @amsterdamski2 יש עוד מנהיגים שעשו אף יותר מאובמה, אז למה הוא דווקא קיבל את הפרס הכל כך נחשק?