Josh Rickard - Thought Thinker

Creative problem solver, writer, speaker. #Automation #InfoSec #opensource #phishing #DFIR @TribeOfHackers #BlueTeam Atomic Red Team maintainer

[Josh Rickard - Thought Thinker @MSAdministrator]

Every SecOp person

[Josh Rickard - Thought Thinker @MSAdministrator]

@shenetworks This is older now but it may still be helpful expanding into classes, inheritance, etc. https://t.co/A2gFIEG8zI

[SecKC @sec_kc]

@sysaaron is getting a Dickbutt tattoo. The catch: you have to fund it.

Raise $5,000 for Hope House and the ink goes on at SecKC in June. Permanent. Public. For charity.

Donate now: https://t.co/6iWAGBOcVo

#SecKC #HopeHouse

[Josh Rickard - Thought Thinker @MSAdministrator]

@sama Then you should read this https://t.co/4mZXPjC4aX

[Josh Rickard - Thought Thinker @MSAdministrator]

@CalmCoding @HackingDave Because of hiQ V. LinkedIn & Van Buren V. United States

[SecKC @sec_kc]

Do you want to contribute to a good cause?We’re collecting donations for charity now through our June meeting.

What do you get out of it? Good feels and the knowledge that you are part of the reason @sysaaron has a tramp stamp! We’re less than $400 away!

https://t.co/gMGnqY972A

[Josh Rickard - Thought Thinker @MSAdministrator]

I wanted to share a new blog post I’ve been tinkering with called “The Agentic Web”.

This post is my thoughts on a direction that LLMs can (should) take.

As a caveat the ideas are mine but did have Claude help :)

https://t.co/4mZXPjC4aX

[Josh Rickard - Thought Thinker @MSAdministrator]

I’m excited to share that my talk titled “LLMs: Prompting, Agents, Assistants, Oh My!” was accepted for @_BSidesKC on April 25th!

We’ve all been hit by this tornado called LLMs. Join me as we navigate the yellow (LLM) brick road!

[Josh Rickard - Thought Thinker @MSAdministrator]

Checkout of this draft paper I cowrote about the externalities of generative AI on our society.

#llm #ai

https://t.co/GMH8TqA7gI

[Josh Rickard - Thought Thinker @MSAdministrator]

Checkout of this draft paper I cowrote about the externalities of generative AI on our society.

#llm #ai

https://t.co/GMH8TqA7gI

[AISecHub @AISecHub]

https://t.co/U6lBLvfdam

[LP @jotunvillur]

Getting mid results from LLMs? @MSAdministrator says you're probably not giving it enough context, and he's right (don't @ him)

Part 2 is live on @THOR_Collective Dispatch. full breakdown, advanced example included.

https://t.co/0wuiJdd3sr

#cybersecurity #ai #thrunting

[vx-underground @vxunderground]

Big news on the internet today as the United States Department of Justice wildly underestimated computer nerds

Mahmoud Al-Qudsi (@mqudsi), the founder of NeoSmart Technologies, is a nerd who specializes in computer forensics. His entire career (dating back over 2 decades) has been focused almost exclusively on data forensics, data restoration, and data backups.

Because Mr. Al-Qudsi is a nerd who unironically enjoys painstakingly reviewing computer forensics at the byte level, something almost no one else on the planet enjoys, Mr. Al-Qudsi began exploring the recently released Epstein files.

Today he released a write-up explaining the problems with the Epstein redactions, errors they left in the PDF files, ... and all sorts of other artifacts the Department of Justice accidentally left behind. By leveraging these different digital artifacts, it is possible for experts such as Al-Qudsi to reconstruct the files without their redactions.

See subsequent post for his write-up

tl;dr he's reverse engineering and reconstructing epstein files. but hard and will take lots of work

pic: me trying to understand computer forensics based on fonts used

[Josh Rickard - Thought Thinker @MSAdministrator]

I haven’t written a blog/article in a long while. This is my first stab at getting back into the rhythm and I hope it helps!

Check it out!

[LP @jotunvillur]

Most security pros prompt LLMs like a Google search and wonder why the output is mid.

@MSAdministrator breaks down what actually works on @THOR_Collective today; role-stacking, systems thinking, and more. ✨

Join us at 👉 https://t.co/ubdzJGLJnf

#threathunting #thorcollective

[LP @jotunvillur]

Most security pros prompt LLMs like a Google search and wonder why the output is mid.

@MSAdministrator breaks down what actually works on @THOR_Collective today; role-stacking, systems thinking, and more. ✨

Join us at 👉 https://t.co/ubdzJGLJnf

#threathunting #thorcollective

[Josh Kamdjou @jkamdjou]

we have seen a 100x increase in ICS phishing attacks the past couple months. we are doing 2 things:

1. last week, we released support for automatic calendar invite remediation in @sublime_sec

2. open sourcing a toolkit for the broader community to remediate calendar attacks, no matter your email security solution

🧵

[Josh Rickard - Thought Thinker @MSAdministrator]

When I was a kid we weren’t allowed our Nokia phones at school. We would use pay phones & beepers.

Schools around the country are banning phones. Kids nowadays are chatting in a shared Google Sheet.

We are the same and I’m here for it.

[Josh Rickard - Thought Thinker @MSAdministrator]

@cyb3rops This may across as a ploy to sell something but it’s not I promise…

That being said, anyone (open source project or not) can use @sublime_sec platform to help protect against these phishing attacks. Seriously you can just sign up or run your own for free https://t.co/gy8jqZoF33

[Josh Rickard - Thought Thinker @MSAdministrator]

@HackingLZ @skocherhan Yep yep yep - blank is better than bestbuy or Wikipedia :)

[Josh Rickard - Thought Thinker @MSAdministrator]

We’re hiring for my team — we need detection engineers ready to deep dive and create rules to detect #phishing threats! If interested please hit me up or dm me !

[Josh Rickard - Thought Thinker @MSAdministrator]

@BlinkzSec @JAMESWT_WT @banthisguy9349 It’s collecting system info