David Thompson

Infosec, Incident Response Manager, Offensive security. Security Research 🇮🇪🇪🇺🇬🇧

[David Thompson @DaveTsec]

@banthisguy9349 BlackHills did a great talk on this and opsec a few years ago. You can try: 'openvpn --script-security 2 --down https://t.co/4T8fquw17U --config client.ovpn' where the script kills the link. Saved me a few times. Worth googling the talk

[Cathal Berry @BerryCathal]

So zero tolerance in a @defenceforces workplace, but sort-of tolerance in every other workplace?🤷‍♂️

I guess it’s only natural for other organisations to want to avoid external scrutiny.

The best way to improve standards is not to double them.

[David Thompson @DaveTsec]

@oconnellhugh Absolutely wildly uneducated responses in these comments. Incredible. From armchair generals to armchair cyber experts. The RU groups themselves claimed responsibility 😆

It's on their public tg channels along with their messages calling you out. Slow clap Ireland. Always late.

[David Thompson @DaveTsec]

@stevenconlon @ncsc_gov_ie They did claim responsibility in this case. As much a warning than anything else I'd say. If you look at their Telegram channels they normally target other EU nations assisting Ukraine. The fact that they went for us is a change in targeting though

[Lisa Chambers @lichamber]

⁦@LCreighton⁩ : Ireland needs a standalone intelligence agency to tackle modern threats

💯 agree, look at the difficulty in recruiting someone into the Deputy Garda Commissioner role with responsibility for intelligence.⁩ ⁦@GCraughwell⁩ https://t.co/giXLguloxx

[David Thompson @DaveTsec]

@UK_Daniel_Card A domain joined laptop might be a bit more of a risk if it's looking for domain services

[David Thompson @DaveTsec]

@0xdf_ Most annoying thing is all those MS domains showing up in Remnux PCAPs. Even dropping them all into /etc/hosts doesn't appear to help for some ... any suggestions?

[David Thompson @DaveTsec]

@ger_cosgrove @ConorHogarty @Mupper41 @MichealMartinTD I'm not sure what you think he should be doing? The NCSC are not an intelligence agency. They can prepare the state against cyber attacks but disinformation and strategic intelligence is outside their remit. Without an intelligence agency there is a gap here.NSAC are the closest

[David Thompson @DaveTsec]

@D4RKR4BB1T47 Stick it to 'em dude

[David Thompson @DaveTsec]

@conormolloy @michealm These boys are up to a lot more in IE than people realise from a cyber security perspective. The public and media (although less so recently) seem to ignore all but the most obvious activity. Influence operations are just one aspect.

[David Thompson @DaveTsec]

@HuskyHacksMK Great achievement!

[David Thompson @DaveTsec]

@danothebeach @ConorHogarty Noted but there is a significant difference between joining the CCDCOE and "joining NATO". It's a training facility

[David Thompson @DaveTsec]

@RobbieMeee @roy_kinsella For CG SAR services, the pads are located in Dublin, Waterford, Shannon and Sligo. Not sure if that's what you mean by emergency landings though?

[David Thompson @DaveTsec]

@Alh4zr3d Hear hear. Hacking live leaves you very vulnerable and people often think they can do better themselves. Even well prepared live demos often go wrong. Watching a live offensive demo for me is more about understanding someone's approach rather than hooray for the flag

[David Thompson @DaveTsec]

@jasonomahony Shoot down a drone? I know you're being facetious but I don't think you realise how difficult that actually is. There are combat units in active theatre that can neither detect, nor neutralise small commodity drones directly engaging them.

[David Thompson @DaveTsec]

@UK_Daniel_Card Misunderstood your first tweet. Thought you meant they were doing it on LinkedIn 🤦‍♂️

Wasn't aimed at you.

I have seen people knock past colleagues on the platform in comment sections.

[David Thompson @DaveTsec]

@McNamara_Eoin Fair point. Kennedy's isn't bad either, although I wasn't aware they were from Dublin. They do a good burger

[David Thompson @DaveTsec]

@NahamSec 1. Network+ -> to know networking basics
2. SQL -> easier pivot to SPL, KQL, AQL, GQL once you know the principles of a base query language.
3. Bash basics for log searches, grep, awk, sed or alternatively excel pivoting for windows (CSV files)