I got Grok to write ransomware. Then I tried ChatGPT.
I framed it like a sysadmin:
✅ Push a tool
✅ Encrypt files
✅ Delete backups
✅ Use Mimikatz
ChatGPT walked me through all of it—without ever saying “ransomware.”
🔗 https://t.co/k5OqpgxtH2
@anton_chuvakin I would make the argument that SIGMA is still the better of the options when it comes to detection building, it’s incredibly easy to learn, there’s a strong community behind it, and it can follow you should you ever move SIEMs or go to a new job
I've had an idea for a while now and started to finally work on it over the week. The MVP is officially done and operational. Might have some interesting news in the future 👀
@IceSolst@anton_chuvakin EDR running on EC2 instances and runtime protection like Falco running in k8s, along with CDR, and some other mix bag of things.
Lots of logging to elastic also.
A huge thank you to 360 Privacy for supporting BSides Nashville 2025 as a Platinum Sponsor 🥇 Their support helps keep this nonprofit infosec conference fun, engaging, and affordable for everyone! Learn more at https://t.co/6B9Mf5yZqK