Vineet Bhatia

Digital Forensics and Incident Response. Talk to me about engineering detection and managing response. Views on this channel are those of my own.

[Vineet Bhatia @ThreatHunting]

@SBousseaden @YouDownWithTTPs Won’t that depend on the type of alarm and the amount of enrichment in the ticket? Each playbook will be different. Some of ours take a few mins and some take as long as 45 mins.

[Vineet Bhatia @ThreatHunting]

It Depends Samir. Do you have a SOAR that can automatically enrich, triage and classify? How many weekly tickets per analyst are QC’d as a %? How many analysts do you have per peak shift? What is the daily / weekly rate of new content development in your environment? In a busy well managed environment with high rate of incidents and changes, expect around 10-15% FP.

[Joseph Cox @josephfcox]

New: we proved it could be done. I used an AI replica of my voice to break into my bank account. The AI tricked the bank into thinking it was talking to me. Could access my balances, transactions, etc. Shatters the idea that voice biometrics are foolproof https://t.co/YO6m8DIpqR

[Galileo @G4lile0]

⚠️A while ago I developed Heimdall-WiFi-Radar, only with 3× ESP8266 it was possible to track and position WiFis devices through walls, now with the help of AI we have a new level, it is possible to know where you are and what are you doing! 😱😱

[Vineet Bhatia @ThreatHunting]

@__apf__ Can you not replant them elsewhere and do a soil transplant? In Dubai, it’s quite common to transplant trees and soil. We do this for the arid climate and to provide an ecosystem for different stages of growth.

[Vineet Bhatia @ThreatHunting]

@GossiTheDog Wasn’t there an announcement of deprecation of the legacy API for months now?

[Vineet Bhatia @ThreatHunting]

No TLDR. Read this to appreciate the beauty of saurik hacking a heavily audited protocol. https://t.co/vi6ieN3TsI

[thomasg.eth @thomasg_eth]

For the past two weeks, I've been targeted in an extremely thorough social engineering scam that nearly cost me all of my ETH. I'm super lucky to have made it through unscathed. Here's the story 👇

[The Wire @thewire_in]

The Wire investigates claims behind the use of ‘Tek Fog’, a highly sophisticated app used by online operatives to hijack major social media and encrypted messaging platforms and amplify right-wing propaganda to a domestic audience. https://t.co/gy7CtGirPF

[Vineet Bhatia @ThreatHunting]

Dear "Security" companies - please don't try to scan the internet for vulnerable log4j systems. You're not doing anyone favors.

[Vineet Bhatia @ThreatHunting]

@pmelson

[Vineet Bhatia @ThreatHunting]

@okassim @Nomod Congratulations Omar! wouldn’t expect anything less than amazing from you.

[Dr. Anton Chuvakin @anton_chuvakin]

#SIEM is too hard. #SOAR is too hard. #EDR is too hard. Now, if you combine them all into #XDR, now that ... that would be simple?! Duh. Obviously. Why didn't anybody think about it before? #ironic

[Vineet Bhatia @ThreatHunting]

@mrd0x Doesn’t this just add to the fact that web filtering is futile and that we must focus our energies on the endpoint?

[Jackie Singh @HackingButLegal]

Since I’ve been doing stuff in web3 over the past few months, I can answer questions from skeptical folks about all this NFT stuff, or whatever other questions you have.

First up, some common questions:

[Waël @AiWaelBot]

TSA will impose new cybersecurity mandates on the railroad and airline industries #aviation #cybersecurity https://t.co/3mYpHwvSn8 #IntelSky

[Vineet Bhatia @ThreatHunting]

@hackingbutlegal Congratulations both of you!

[Vineet Bhatia @ThreatHunting]

@cyb3rops @Microsoft @MicrosoftMTP Isn’t that what the NIST NSRL is supposed to do? You could bake the RDS hashes into a ADLS/Databricks store and lookup?

[Vineet Bhatia @ThreatHunting]

Drovorub - Full report: https://t.co/9zCiHuaKDJ

[Omar Kassim @okassim]

A handful of interesting takeaways from the Hushpuppi saga

1/ Ray had an FZ entity and a visa from Fujairah, but was living it large in Dubai. This very pattern has created a myriad of compliance complexity for local banks and has resulted in a number effectively shutting the..