Kim McAloon

Cybersecurity Threat Hunter with a passion for cupcakes.

[Binary Defense @Binary_Defense]

How does malware avoid detection? By "sleeping" its way through!😴 Our new blog explores the ins and outs of sleep obfuscation and what it means for security teams. Read more below!
#Blog #Malware
https://t.co/I5ql6WDJU8

[Kim McAloon @CupcakeNinja007]

@_ChezDaniela @HackingDave Yes!

[Kim McAloon @CupcakeNinja007]

So excited for this webinar tomorrow! Join us to learn how the Binary Defense Threat Hunting team conducts hypothesis-based threat hunts utilizing threat intelligence to take a proactive approach in identifying and countering active threats.

[Binary Defense @Binary_Defense]

Uncover hidden threats and stay ahead of adversaries with proactive hypothesis-based threat hunts. Join the webinar to enhance your organization's security posture. 🕵️🔒
#Cybersecurity #ThreatHunting
https://t.co/WhzrOMpMgb

[Binary Defense @Binary_Defense]

Uncover hidden threats and stay ahead of adversaries with proactive hypothesis-based threat hunts. Join the webinar to enhance your organization's security posture. 🕵️🔒
#Cybersecurity #ThreatHunting
https://t.co/WhzrOMpMgb

[Binary Defense @Binary_Defense]

#Qakbot is a banking trojan and botnet that has been active since 2008. Last year the servers associated with Qakbot were taken down. However, it has recently reemerged with some minor changes. Read what our threat researchers have found in this new #blog!
https://t.co/zydgCFMXIe

[Kim McAloon @CupcakeNinja007]

Amazing research by @jw4lsec on MalSync malware!

[Binary Defense @Binary_Defense]

Research by @jw4lsec reveals that MalSync malware (a DuckTail PHP variant) uses Facebook API calls for data theft, targeted social media credential theft, sophisticated data extraction functions, and communication with a command-and-control server.
https://t.co/4CyzUyUxYH

[Kim McAloon @CupcakeNinja007]

Great writeup about how the Threat Hunting team at Binary Defense operates for our customers. #ThreatHunting

[Binary Defense @Binary_Defense]

What is hypothesis-driven threat hunting? What makes it unique? Read the full blog below about the process behind hypothesis-driven threat hunting and what makes it different than the standard approach.
#ThreatHunting #Blog
https://t.co/kUNybh2Mhp

[Kim McAloon @CupcakeNinja007]

Excellent blog post from Adam Paulina, who recently completed a Threat Research internship at Binary Defense!

[Binary Defense @Binary_Defense]

Did you miss our most recent blog?

No worries! Read the full blog at the link below and learn how attackers are manipulating the boot process while evading defenses.
#CyberSecurity #BootkitsExposed #Blog
https://t.co/We8WM0Tvff

[Binary Defense @Binary_Defense]

Missed our webinar with @ExtraHop?

No problem! You can watch the full webinar at the link below to learn about how human expertise factors into threat hunting.
#webinar #ThreatHunting #CyberSecurity https://t.co/0ZkTHzIu12

[Binary Defense @Binary_Defense]

Last call!

Today at 1PM ET join experts from Binary Defense and @ExtraHop as they walk through the tactics that emphasize the pivotal role human expertise plays in neutralizing evasive #cyberthreats within your network. Register below!
#webinar
https://t.co/r0dgjC2pep

[jill wohlner @JillWohlner]

Am I the only one without career goals? Mine are like 'do well, don't work too much.'

[Binary Defense @Binary_Defense]

Check out our most recent #blog, authored by #ThreatHunting Team Lead, @CupcakeNinja007, on how to hunt for files that might contain #passwords on your #endpoints.

#securityawareness #infosec #informationsecurity #cybersecurity #passwordsecurity
https://t.co/xc6oQ8l8AC

[[email protected] @rpargman]

If you are wondering whether some domain admin in your enterprise has a disaster waiting to happen hiding in a plain text file full of passwords on their desktop, and you want to do something about it, check out this awesome blog by @CupcakeNinja007 https://t.co/CM2mrYadgK

[blueteamblog @blueteamblog]

I rarely use this account anymore, but due to the potential #Okta breach here are some SIEM rules which could potentially be useful running back over the past 90 days of data if you can.

https://t.co/FyuAxIRd5M

https://t.co/fhuGabRlTp

[Mick Douglas 🇺🇦🌻 @bettersafetynet]

I've had 3 calls so far today (it's not even 10) about defending against Russian cyber ops

I'm tired of having the same call... so... here's what I've told everyone. This is the playbook you need... but it's not going to be what you think it will be.

Ready? Lets go!
1

[OrdinalExport @OrdinalExport]

We are expanding our Defense and Countermeasures (Purple) Team at @TrustedSec! Go check it out! https://t.co/lQf365yR2i

[Dave Kennedy @HackingDave]

We are growing!

Ton's of positions open @Binary_Defense and looking to add some awesome folks!

Threat hunters, SOC analysts, Python Developers, Business Dev positions and much more.

Check us out:

https://t.co/4GF740eGp7

#BinaryDefense

[[email protected] @rpargman]

I’m so excited that I get to share a presentation at PancakesCon again! I’ll be baking some soft pretzels 🥨 and beer 🍺 🧀 cheese dip. If anyone lives in the Seattle area and would like to have some 🥨 after the talk, I can meet you at a light rail station 🚉 to share some!

[[email protected] @rpargman]

Blue team tool drop: #log4j internal honeypot for active defense. Alerts you by sending a message to your Slack, Teams, or Mattermost channel if it receives a GET or POST with suspicious ${ in headers or form fields. Use to detect scanning from the inside: https://t.co/5ysf4UO6Fm

[Grzegorz Tworek @0gtweet]

Need to download mimikatz (or some other nasty stuff) without alerting Windows Defender Antivirus? Paste these 3 lines into the command line 👇👇👇 1/2