infosecKE

Information Security

InfoSec | Cyber Security

[infosecKE @InfosecKe]

@rekdt He actually pulled it off this time..... hats off

[infosecKE @InfosecKe]

@LetsDefendIO This is so hilarious......

[infosecKE @InfosecKe]

@Kabogo_Henry Hehehehe I was not the only one who noticed

[infosecKE @InfosecKe]

@Karanimutonga Eeeeehhhh this has made my day, epic epic epic

[infosecKE @InfosecKe]

@trevorsaudi @AlteredSecurity Congratulations............

[ARCHIVED: Jen Easterly @CISAJen]

“Being a CISO right now is like standing on lava islands while juggling radioactive lightsabers.” Worthwhile read from Daniel Meissler on the potential rise of the Cyber-CFO and a necessary evolution to “less magic & more accounting.”
https://t.co/G6MSMH54KY

[Christopher Peacock @SecurePeacock]

Stop trying to catch the ransomware executable, it’s too late then, exfiltration has typically happened already, and defenses are likely turned off. Start trying to catch initial access broker procedures like rundll32 proxy execution and net group enumerations that were reported a decade ago in the APT1 report!

[infosecKE @InfosecKe]

@Sam0x90 @MITREattack This is quite amazing work! 💪

[infosecKE @InfosecKe]

@oste_ke The story of sandworm, EPIC https://t.co/aczgTg4fFp

[infosecKE @InfosecKe]

@_josehelps This is a great resource!

[Jose Enrique Hernandez @_josehelps]

Hey, infosec brains trust! 🧠 Ever felt like you're juggling digital chainsaws? 🪚💻 I've been in the trenches with:

🔹#LOLBAS 🛠️: Your multi-tool for Windows. A treasure trove of Binaries, Scripts, and Libraries that adversaries may use to live off your land.

🔹#GTFOBINS ⚙️: Your field guide to Unix binaries, masterfully navigating through airtight local security restrictions.

🔹#LOLDRIVERS 🚀: A rogues' gallery of Windows drivers, exploited by adversaries to bypass security controls and wreak havoc.

These projects are more than just a catalog for abuses of the OS; they're a rich wellspring of intel and detection enrichment. 📚🔍 I'm curious, have you spun these into threat detection tools (sigma rules) or defenses? How did you automate the data collection process from these projects?

The million-dollar question 💰: Have you rolled up your sleeves and used all the LOL resources in https://t.co/u6tdIrcq8n by @br0k3ns0und, or just cherry-picked a few?

🔄🔒 #DefenseDIY #InfoSecJugglers #LOLBinLife

[infosecKE @InfosecKe]

@oste_ke Heeeehhh wuuueeehhh noma sana

[infosecKE @InfosecKe]

@LetsDefendIO Hehehehehehehehe.......................

[infosecKE @InfosecKe]

This is interesting https://t.co/DNFC5V11R1 #CyberAttack #Kenya

[Applied Network Defense @NetworkDefense]

In our latest video, @ForensicITGuy performs malware analysis of a malicious Python package that exfiltrates data over Discord.

It's available today in the Analyst Skills Vault! 🚀

[muchilwa @muchilwa]

Set a reminder for the Breach Anatomy Space! Breaking down the Naivas hack https://t.co/qssCrjeenx

[infosecKE @InfosecKe]

@KETRACO1 Please add a procurement system to your list. @MoICTKenya @CA_Kenya @ODPC_KE

[KETRACO @KETRACO1]

𝐏𝐔𝐁𝐋𝐈𝐂 𝐍𝐎𝐓𝐈𝐂𝐄

KETRACO placed the attached advertisement in The Standard Newspaper on April 25th, 2023.
Please follow the instructions on the tender from KETRACO Website https://t.co/rTaiKxF8WI

[Anyungu @AnyunguWanyungu]

4 things

1. Build projects. (Not necessarily off-head)
2. Consult.
3. Show the world what you can do.
4. Position yourself.

[infosecKE @InfosecKe]

@CJ_Haslett @3lOr4cle what advice would you give a young Kenyan as the best course of action.......

[infosecKE @InfosecKe]

@KagasiJavan Congratulations......................