Richard Bejtlich 💾 🇺🇦

Inactive on Twitter since 1 November 2022. Find me here:

[Richard Bejtlich 💾 🇺🇦 @taosecurity]

Inspired by @netresec, I decided to claim @taosecurity on a Mastodon server: https://t.co/li3aoxSde9

[Richard Bejtlich 💾 🇺🇦 @taosecurity]

@OliverRochford @tenzir Congratulations, and great title!

[Richard Bejtlich 💾 🇺🇦 @taosecurity]

If you'd like to read well-researched #history to abandon politically-driven myth, I recommend these 2 books: #ad

The Gunpowder Age: #China, Military Innovation, and the Rise of the West in World History
https://t.co/CFoe3qmI4x

The Myth of the Lost Cause
https://t.co/0ozLsEMVBV

[Richard Bejtlich 💾 🇺🇦 @taosecurity]

@SEKTOR7net Thanks, I'm glad you like them. I'm working on publishing the recordings of the recent #ZeekWeek conference. I expect them all to be public over the coming weeks.

[Richard Bejtlich 💾 🇺🇦 @taosecurity]

As an ex-@usairforce intel officer who was active duty in 1999, I enjoyed the new book "Shooting Down the Stealth Fighter," by the Serb personnel manning the S-125/SA-3. It's mostly about IADS, but it offers a ton of unclass details for #airpower fans. #ad https://t.co/l0mQb3JmyY

[Richard Bejtlich 💾 🇺🇦 @taosecurity]

I’m concerned that Putin is planning a repeat of his 1999 Moscow apartment bombing. I’m worried he orders use of a “dirty bomb” in UA, maybe Kherson, and then blames it on UA. He’s already learned from recent Western tactics to give public early warning, except his would be lies.

[Richard Bejtlich 💾 🇺🇦 @taosecurity]

@johnchiment Sorry, no. I quit later that year. Being a full time PhD candidate was not compatible with being a full time FireEye employee. If I try again, I will do so after retiring from full time work. I will also pursue a history PhD and have nothing to do with cybersecurity.

[Richard Bejtlich 💾 🇺🇦 @taosecurity]

@shanvav @thedailybeast Reuters concurs https://t.co/rJqfgPrS5M

[Richard Bejtlich 💾 🇺🇦 @taosecurity]

@shanvav @thedailybeast Politically, it makes sense for the Republicans to not declare they will support the president's Ukraine initiatives. It's better for them to be skeptics and get the president to trade for something they want in return. I hope that's what happens, and they are not simply opposed.

[Richard Bejtlich 💾 🇺🇦 @taosecurity]

I'm pleased to see @Suricata_IDS getting some marketing love at my company @corelight_inc's web page. We offer a true #networksecuritymonitoring platform at up to 100 Gbps, with all 4 NSM data types (alerts, transaction logs, extracted files, and pcap). https://t.co/u5GnM6S9jC

[Richard Bejtlich 💾 🇺🇦 @taosecurity]

@lev_tomer @pswapneel Thank you for joining the conversation. 🙏

[Richard Bejtlich 💾 🇺🇦 @taosecurity]

I’m concerned about the following scenario. 1) RU “evacuates” civilians from Kherson. 2) UA approaches city to retake it. 3) RU destroys Kherson while retreating, and claims UA is responsible. 4) RU denies UA the territory via destruction and accuses UA of “war crimes.”

[Richard Bejtlich 💾 🇺🇦 @taosecurity]

@ILDannyMoore "I'll take 'I don't understand cyber warfare' for $500, Alex."

[Richard Bejtlich 💾 🇺🇦 @taosecurity]

@pswapneel That sounds like a good blog or Discourse post.

[Richard Bejtlich 💾 🇺🇦 @taosecurity]

@wendiwhitmore @Zeekurity @Unit42_Intel Thanks for speaking Wendi. Your keynote was awesome. 🔥

[Richard Bejtlich 💾 🇺🇦 @taosecurity]

@falconsview Regulators will eventually decide that if you are responsible for critical infrastructure, then someone in charge should have a license. Expect comparisons to general contractors, architects, etc., and professions that protect lives and property, like law and medicine.

[Richard Bejtlich 💾 🇺🇦 @taosecurity]

Prediction: heavily-regulated industries will be the first to see requirements to have their cybersecurity program headed by someone with some sort of state- or Fed-approved license. This is no different from general contractors needing a license, while workers need not have one.

[Richard Bejtlich 💾 🇺🇦 @taosecurity]

@keithjjones Glad to hear you are doing well Keith.

[Richard Bejtlich 💾 🇺🇦 @taosecurity]

@olafhartong @bettersafetynet @Zeekurity @thecyberlama @corelight_inc @Microsoft @Windows Sure thing. Incidentally this is not strictly a "Corelight" project. Yes, the Zeek devs working on this are Corelight employees, but the Microsoft code is going into the public open source Zeek GitHub repo.