David Pany

Interested in the cyber.

[David Pany @DavidPany]

@nicastronaut @bryceabdo @TheGamblingBird Sign me up!

[David Pany @DavidPany]

Excited to share some attack path diagram tips and tricks tomorrow with Brad! #DefendersThinkInGraphs #DFIR

[SANS DFIR @sansforensics]

Join us at #DFIRSummit when @DavidPany and @BSlay88 discuss how they plan attack diagrams and tools they have used so you can develop your first or next diagrams.

Register here: https://t.co/wdW6548mxp

#DFIR #IR #IncidentResponse

[David Pany @DavidPany]

Is it weird that it’s a well known faux pas to roll your own crypto, but every website has been rolling their own identity with password policies, hashing, salting, storing, mfa, etc. for many years?

Recent advances in “log on with” providers must be relief for devs.

[David Pany @DavidPany]

@nicastronaut Wait DavesHell for real? It’s been so long.

[David Pany @DavidPany]

@nicastronaut @Gigs_Security I taught another person how to XLOOKUP today!

[David Pany @DavidPany]

@ItsReallyNick @derekcoulson @3dRailForensics @MicrosoftTeams

[David Pany @DavidPany]

I just made a vector graphic and I liked it. Please don’t tell MS Paint. I’ll tell it via text when I’m ready.

[David Pany @DavidPany]

@jamieantisocial @Sysinternals Long time complainer, first time requester: https://t.co/2C1gainsZA

Hopefully we have some luck!

[David Pany @DavidPany]

Anyone know if Sysmon EID 9 RawAccessRead can record the target file being accessed? I only see the process doing the access (less useful if injected) and the Device being accessed (how is that useful?). Not seeing answers in docs/blogs/etc.
#DFIR

[David Pany @DavidPany]

@nicastronaut

[David Pany @DavidPany]

Planning a New Year's resolution to get a new job at an awesome #DFIR company? Make it happen with:

Weekend shift IR: https://t.co/CyZPvaZij7

Engineering our in house world class toolset:
https://t.co/VIbeaqzEMh

https://t.co/uOaonScgUa

Questions? Let me know.

[David Pany @DavidPany]

@nicastronaut Internet currently doing whatever snow does in summer.

[David Pany @DavidPany]

@inversecos Such a good artifact! In case you have the full image and haven't already tried this, point this usn jrnl record carver at the whole thing and parse the output with your preferred $J parser. It's amazing what has turned up in unallocated journal records: https://t.co/yHJgmFRUPg

[David Pany @DavidPany]

#FrozenDFIR

[David Pany @DavidPany]

Okay here are more #FrozenDFIR memes you did not ask for to pick up from https://t.co/oXumbQ29bT

[David Pany @DavidPany]

@nicastronaut @Gigs_Security #FrozenDFIR

[David Pany @DavidPany]

#FrozenDFIR although @gigasheet changing this one up!