Carlos Mayorga

System Administrator | Fortinet | Azure | Entra | #cybersecurity

[Carlos Mayorga @Sud0Chul0]

@fswlinux 🐧

[First Steps With Linux @fswlinux]

3 days ago, this account had 0 followers.

Today, we just crossed 1,000. 🐧

To celebrate, I’m giving away 10 copies of First Steps With Linux.

It has everything you need to become a confident Linux user and sysadmin.

Over 700 pages. 📄

To enter:

• Repost this post
• Reply with 🐧

I’ll randomly select and DM 10 winners in 48 hours.

[Carlos Mayorga @Sud0Chul0]

@lfredoreyes @merill Not yet. There was a plan to kill it this or next month, but it got pushed back to the end of the year. It'll probably get pushed back again

[Carlos Mayorga @Sud0Chul0]

@Officialwhyte22 Eth

[Carlos Mayorga @Sud0Chul0]

@aiktp_com @tom_doerr Yes. Use it

[DAN KOE @thedankoe]

https://t.co/7l7Jef99QZ

[Carlos Mayorga @Sud0Chul0]

@mischavdburg Linux

[Carlos Mayorga @Sud0Chul0]

@_0b1d1 Not sure if my 1st comment went through, but PDF please

[Carlos Mayorga @Sud0Chul0]

@sysxplore Windows

[EZ @IAMERICAbooted]

If you want to always have a job in IT, read the documentation. Every day. Make it a lifelong habit.

It's astonishing to me how many people dont. Even people at Microsoft.

I have hands on experience with a lot of vendor products now and the first thing I do is read the documentation. Some vendor documentation is terrible. Other vendor documentation expands far beyond technical capabilities.

I read at least 2 (sometimes much more) hours a day.

Microsoft has more than 5 lifetimes of documentation. You will never be able to read it all. Between Windows, Active Directory, techncial specifications, Exchange, Office, and Microsoft Cloud, I think it's fair to say I have read 100k pages or more of documentation just with Microsoft in the past 7 years.

Other vendors where I have read the documentation (and most of them, all of it):

Okta
Proofpoint
Global Protect/Prisma Accesa
Tanium (x2 for 3 different architectures)
Crowdstrike

Most organizations have these. Some (i.e. Crowdstrike, Tanium Threat Response), the documentation is only available if you are licensed.

You cannot learn IT security by just reading. However, your skills become so much more rich if you spend the time reading. You must build too. But if there's any piece of advice I'd give, I would suggest not skipping on the documentation.

[D4rk_Intel @d4rk_intel]

A lot of you have been asking: "How do I actually start a career in OSINT?"

I have spent weeks compiling everything - from FREE courses & tools to LinkedIn job strategies. Here is your ultimate guide to go from beginner to pro.

#OSINT #Cybersecurity
https://t.co/G2mpJg7J1r

[𝚑𝚎𝚗𝚔 𝚟𝚊𝚗 𝚎𝚜𝚜 @henkvaness]

That was a lot of work. Out now: Guide to Detecting Al-Generated Content. Guess what, it's free thanks to @gijn : https://t.co/bYTSjk9iz5

[ᴅᴀɴɪᴇʟ ᴍɪᴇssʟᴇʀ 🛡️ @DanielMiessler]

First thing I recommend is making the thing that you love your full-time job.

But since that’s not what you asked, I would recommend a nap in between transition periods so that you’re kind of regrouping for the other type of activity.

The model I’ve seen worked best is regular work during the day like family time or regular up obligations maybe a quick little mini nap and then a couple of hours on the second gig.

[Tech Brandon @TechBrandon]

My talk, Finding Holes in Conditional Access Policies, from @CypherCon is live. This was such a fun conference to be a part of. Maybe I'll see you there next year. https://t.co/uhMfUtrF7m

[Joseph Thacker @rez0__]

i get asked all the time how to be an ai hacker.

go read my "how to hack ai apps" post then just read and understand every post on embracethered[.]com by @wunderwuzzi23 and you will be an expert AI hacker.

im not joking. it's that simple. links below.

[Carlos Mayorga @Sud0Chul0]

@dante_14091321 @NathanMcNulty @magnus133 @blueteamer @rucam365 Correct

[Carlos Mayorga @Sud0Chul0]

@nathanyell_ @SecurityAura https://t.co/l6K71XtIA1

[IT Guy @T3chFalcon]

The replies to this blew me away 😅 lots of sharp minds here.

The real answer?
OAuth Consent Phishing + Token Replay

APT-grade tradecraft used by the big dogs like APT29.
Even Microsoft got hit with this.

🧵Here’s how it works:

[Carlos Mayorga @Sud0Chul0]

@Maximum3579 @T3chFalcon True since not everybody can afford E5 licensing, which is required for Defender for Cloud Apps. Also, those who are able to afford it might not always configure the rules and alerts required for detecting suspicious registered apps

[Hacking Articles @hackinarticles]

Pic of the Day

🔥 Telegram: https://t.co/bFiHxFjLZL

#infosec #cybersecurity #informationsecurity #pentesting #ITSecurity #OSCP #PenTesting