Paul Navarro

Cloud Security Forensicator🤓

[Paul Navarro @T0P_Cyber]

@HackingDave @HackingDave, Derby changed my Cyber career trajectory. You gifted me tickets for my military retirement and I’ll be forever grateful. It provided me a view of what the community was like and I was able to meet people who have since made me a better security professional. Thanks.

[Paul Navarro @T0P_Cyber]

@ANarrowView Not at this time. But a great idea. Submit an issue on GitHub and we can add that. Thanks for reaching out.

[Paul Navarro @T0P_Cyber]

@Bryson_Byrd I haven’t seen that. Please submit an issue with details on the GitHub and let me see if I can repro it. Have you tried the new version as well? Thanks for reaching out.

[Paul Navarro @T0P_Cyber]

We updated Hawk today. The team is working to keep the updates coming. Checkout https://t.co/ealcTphBRW as well as its intent is to assist Cloud Forensics analysts in using Hawk to collect data and investigate possible M365 compromise. #cloudforensics
https://t.co/afQ8X5W2We

[Paul Navarro @T0P_Cyber]

@josequinones @2BitsEnd0xDEA @Carlos_Perez “Homer” answer here but an honest one😁. Was actually working on this today. As you ingest you can create visualization for tracking and query real-time. #Sentinel https://t.co/DM7bwQuh1X

[Hakin9 @Hakin9]

Phant0m - Windows Event Log Killer https://t.co/DIUg3HhiyF

#infosec #cybersecurity #redteam #pentest #pentesting #hacking #hackers #coding #opensource #Linux #windows #DFIR #Microsoft

[Dirk-jan @_dirkjan]

Here's a demo of the MFA bypass, which I particularly love because it could all be done in the GUI, no need to do any lower level operations (original at https://t.co/pEAYj2Qew4)

[Paul Navarro @T0P_Cyber]

@josequinones See you when you get here!

[Matt Zorich @reprise_99]

In my weekly 'do you know this product does this?' tweet, did you know you can configure Defender for Cloud Apps with all your various IP address ranges to reduce noise from alerts such as impossible travel? Fewer false alarms from security tools is always a win 👇

[Matt Zorich @reprise_99]

To mark 200 days of #365daysofkql I have packaged up all the queries I have written so far to a query pack, so you can one click deploy them to your own Sentinel or Log Analytics instance. If you want to deploy them then click here for instructions - https://t.co/4f2XcJtcEN

[Matt Zorich @reprise_99]

A neat way of being able to keep track of your #AzureAD apps and service principals is to use a Logic App to access the Microsoft Graph, then send that data to custom tables in #MicrosoftSentinel. Anything that is in Graph can be in Sentinel.

[KQLCafe @KqlCafe]

KQL Cafe Session 1 recording https://t.co/cnEdHvEP3Q
and shownotes https://t.co/FMuvweAwz5 are now available

#kql #kqlcafe #MustLearnKQL #kqlcommunity #MVPBuzz

[Roberto Rodriguez 🇵🇪 @Cyb3rWard0g]

🚨 Learning how to install #Sysmon for Linux 🐧 & send security events to #AzureSentinel in a research lab environment!! 🧪 #MSTIC #Microsoft

📡 Sysmon (SysinternalsEBPF) -> Syslog -> SIEM 🚀

✅ Scripts
✅ ARM templates
✅ Sysmon configs and more..

https://t.co/juoMCueKU5

[Command Line Magic @climagic]

If you ever need to create ASCII art text in various styles, there is a great site for generating it at https://t.co/vUAugUPps5

[Paul Navarro @T0P_Cyber]

Great Zero Trust resource.

https://t.co/MjFkurx1O6

[Gladys Rodriguez @Cyber_batgirl]

We are excited to share with you the newly added webinars to our Summer 2021 series!

AZURE SENTINEL
- Jul 28 - The Information Model: Understanding Normalization in Azure Sentinel
- Aug 11 - Deep Dive into Azure Sentinel Normal…https://t.co/zoCRCgK45S https://t.co/CvTFR3oBix

[Paul Navarro @T0P_Cyber]

@InfoSecHotSpot My favorite part is the assumption that retired military cyber experts have free time “volunteer” their services.

[Mark Simos @MarkSimos]

Microsoft Cybersecurity Reference Architectures (MCRA) is updated and available for download.

https://t.co/hUw6Xo2NM8

[Thomas Maurer @ThomasMaurer]

Stop typing PowerShell credentials in demos! PowerShell SecretManagement is here to help! 💻

https://t.co/R8S34OfkrV

#PowerShell

[Gladys Rodriguez @Cyber_batgirl]

Love this article! It highlights how the Mitre Att&ck is being misused to the point that people are confusing quantity vs quality of the attack to make decisions. Also, organizations are even trying to compare who has more alignm…https://t.co/lLaZYR9iaQ https://t.co/9WjCsnIaYV