Trevor Miller

Manager - CTI & Detection Engineering | Tech Nerd 🤓 | Learning Addict | Dedicated to defensive #Cybersecurity

[Trevor Miller @Cyb3rDefender]

@time4purge @simongerman600 This comment has to be rage bait.

[Trevor Miller @Cyb3rDefender]

Appears using DNS-over-TLS on android "Private DNS" with a "custom provider" to sinkhole DNS requests for trackers and Ads puts a warning that the country may not be accurate because your using a proxy or VPN...

Which is misleading, but I like the spirit of this move by X.

[Amitai Cohen @AmitaiCo]

Every CTI analyst worth their salt has summited the venerable Pyramid of Pain, but I think it's time for a few other threat detection metrics to get their own monuments. Here are a few candidates for your consideration:

[Trevor Miller @Cyb3rDefender]

📢Introducing stutterAI:
Unleash the power of AI in your terminal!
⭐Fix command errors with a single command.
⭐Generate commands from a description.

I Need some beta testers!
https://t.co/glDpTEBXx6

[Trevor Miller @Cyb3rDefender]

Interesting Take.
https://t.co/Ebt4BYtMfo

[Trevor Miller @Cyb3rDefender]

@MalwareJake Blame the British... 🤣
National Cyber Security Centre: The UK's NCSC prefers the two-word form "cyber security," which is evident from its name and official publications. This deviates from the norms in the US and EU.

[Trevor Miller @Cyb3rDefender]

@EricaZelic This is a little outside the scope of your question, but there are already great responses for it, so I'll just add, don't forget the importance of PTR records for rDNS lookups. Helps the mail server that received an email verify the IP is associated with the domain.

[Trevor Miller @Cyb3rDefender]

@hacker_content 7

[Trevor Miller @Cyb3rDefender]

Using the hyphens (or other delimiter) forces the model to see each letter and number instead of tokenized groups of letters.

https://t.co/Uxf9F0YYs8

[Trevor Miller @Cyb3rDefender]

@Oddvarmoe @SwiftOnSecurity Just need to account for the tokenization of the model and disrupt it. This works.

[Trevor Miller @Cyb3rDefender]

This is a cool #Python project! The only thing is that when exporting the #MITRE #ATTACK layer to SVG, the Tactic row has no background; I think I identified why.

Posting for attention in case someone smarter than me has time to check it out.
https://t.co/5ZVGeNFId4

[Trevor Miller @Cyb3rDefender]

@mslopatto https://t.co/d1cbBhIW9x

[Trevor Miller @Cyb3rDefender]

@mslopatto I got Bard to reason its way to answering the question correctly. I know that isn't the point of your article, but I found it interesting.

Side note, Bard seems to struggle with using previous responses containing code snippets as context.

[Trevor Miller @Cyb3rDefender]

@mslopatto I got Bard to reason its way to answering the question correctly. I know that isn't the point of your article, but I found it interesting.

Side note, Bard seems to struggle with using previous responses containing code snippets as context.

[Trevor Miller @Cyb3rDefender]

😂
https://t.co/7tdufa7kUv

[Trevor Miller @Cyb3rDefender]

@BillyM2k @elonmusk https://t.co/5oXNik1WCF

[Trevor Miller @Cyb3rDefender]

#Bing actually did the best job. On follow-up questions, #GoogleBard gave some nonsense KQL queries where Bing was pretty much spot on.

[Trevor Miller @Cyb3rDefender]

I got access to #GoogleBard this morning and asked about CVE-2023-23397, and it was helpful, not perfect, unlike #ChatGPT which had no idea what I was talking about. However, I think #Bing did a good job too.

[Trevor Miller @Cyb3rDefender]

@wutcts_mike @GrogsAxle @mattjay If that isn't the first thing out of their mouth then they have failed the question.

[Trevor Miller @Cyb3rDefender]

@geekypanda411 https://t.co/lMB8jvRCxC

[Trevor Miller @Cyb3rDefender]

@ACEResponder @Cyb3rMonk I've found that giving clear instructions on tone and audience works well. I had some success with this prompt the other day. It wasn't perfect but it saved me a lot of time.