Berry A Langley

[Katie Nickels @likethecoins]

Precision of language is important. A vulnerability is a weakness that has to be exploited by a threat. You don't detect vulnerabilities - you detect the threats that exploit them.

[Berry A Langley @BearRadar]

@DFIRScience O...cent.

[Berry A Langley @BearRadar]

@fletusposton So many cases over the last two years, external RDP no 2FA = Ransomware at a minimum.

[Berry A Langley @BearRadar]

#ransomware #hellokitty #nomorecrypto

Don't keep your recovery passwords on a cloud drive. You are begging a TA to come find them.

[Berry A Langley @BearRadar]

Yessss! I am now a proud patron of The DFIR Report on @patreon, and you should be too: #NewPatron https://t.co/87etkWPz8u

[Berry A Langley @BearRadar]

Amazing new tool in the belt.

[Berry A Langley @BearRadar]

@waggabat @SBousseaden @cyb3rops @k1dr3k @_julesi @g4l4drim @secuip @sk4la @inf0sec1 @_jeanga_ @j_themee This is F'n amazing! Thank you.

[Paul Melson @pmelson]

TRUTH: The two best predictors of a team’s long-term performance are not talent or funding, they are interpersonal trust and work ethic.

[Berry A Langley @BearRadar]

@_RTXBot_ I am on there within 1 minute every time and they are out of stock.

[Berry A Langley @BearRadar]

@fletusposton That is complete truth!

[Berry A Langley @BearRadar]

https://t.co/jyuUycIGLE

[Berry A Langley @BearRadar]

@fletusposton I've handle 30+ breach investigations over the last 8 months. Nobody know what they have!

I wonder if the controls are so hard to accomplish, if maybe they should be re-racked/stacked? Or re targeted, like, "Know your externally accessable infrastructure" vs know everything?

[Berry A Langley @BearRadar]

@phillmoore You are awesome! Don't let them get you down. I start every Monday with your content.

[Berry A Langley @BearRadar]

@r0wdy_ You speak so much truth!

[Berry A Langley @BearRadar]

@fletusposton @j_opdenakker Haha! So true!

[Berry A Langley @BearRadar]

Great blog on how to get started with TimeSketch.

https://t.co/WCGbBqEtSl

[Berry A Langley @BearRadar]

Enjoyed this article and would really like to do more forensic testing.

Detecting Lateral Movement 101: Tracking movement SMB/Windows Admin Shares through Windows Log… by imp hash https://t.co/kazzrIcMTd

[Berry A Langley @BearRadar]

@quicktrip it's time to get with the program. Your 2313 Reidsville Rd, Spartanburg, SC location is a COVID factory. Not one employee was wearing a mask, to include the one making food. Won't be back there.

[Berry A Langley @BearRadar]

@keydet89 @markaorlando There are a couple questions from that article which speak to my own knowledge gaps. Gotta dig in more.

[Berry A Langley @BearRadar]

@EricRZimmerman @__Amat3ur__ Haha!