Tim Medin

Kerberoast Guy • @RedSiege CEO • IANS Faculty • Former SANS SEC560 Author, Senior Instructor • Packers Owner #GoPackGo • Work Req:

[Tim Medin @TimMedin]

A senator talking about Kerberoasting was not on my bingo card!

[Tim Medin @TimMedin]

Halloween party time!
If you haven’t, go read or listen to Dungeon Crawler Carl.

[Tim Medin @TimMedin]

I’ve been waiting for this moment since I was a little kid. Glad I got to bring my son with me. #WorldSeries #Brewers

[Tim Medin @TimMedin]

For years this will be a case study on internal phishing gone wrong.
I’d bet they weren’t going to give rings, but because of this mess up, they have to (good?).

Tests like this gauge the effectiveness of the ruse, not the effectiveness of the staff. See my @WWHackinFest talk.

[Yahoo Sports @YahooSports]

MSG employees thought they were getting a Knicks championship ring. They got cybersecurity training instead 🤨

A dummy email from the Knicks with two ring options was sent to employees, but clicking on a selection resulted in receiving a mandatory course on how to avoid phishing scams, per @TheAthletic.

[Tib3rius @0xTib3rius]

I too sometimes wish I didn't know PHP existed.

[Tim Medin @TimMedin]

Ditka in heaven rn

[Tim Medin @TimMedin]

As a fellow NFL owner, I know exactly how Jerry feels.

[Tim Medin @TimMedin]

See you @WWHF, and thanks for all the fish.
See you next year.

[Tim Medin @TimMedin]

@Jhaddix @WWHackinFest Sorry to hear that man. Hope everything gets better. Miss you buddy.

[Tim Medin @TimMedin]

@samblaney65 @WWHackinFest @RedSiege Yes you do

[Tim Medin @TimMedin]

Just wrapped up my talk at @WWHackinFest Deadwood, “Dead Man Don’t Click” on how to build better security training, practices, and metrics. Slides are available at https://t.co/k1ikJIBEAn.
If you’re at the event, stop by the @RedSiege booth and get some sweet swag.

[Tim Medin @TimMedin]

Teaching day 1 ✅
Teaching day 2 ✅
Sponsor Stampede ✅
Talk ✅
Kerberos Workshop ✅
I has a tired 😉😅
One more day of @RedSiege both babe work tomorrow! 🔥🔥🔥
Thanks @WWHackinFest

[Tim Medin @TimMedin]

Just wrapped up my talk at @WWHackinFest Deadwood, “Dead Man Don’t Click” on how to build better security training, practices, and metrics. Slides are available at https://t.co/k1ikJIBEAn.
If you’re at the event, stop by the @RedSiege booth and get some sweet swag.

[Tim Medin @TimMedin]

Stop by the @RedSiege booth for stickers, shirts, hats, and some of best folks in the industry.

[Red Siege Information Security @RedSiege]

We're happy to be here at @WWHackinFest! Come stop by the Red Siege booth to meet the team and get some swag!

[Tim Medin @TimMedin]

Sneak in if you can. Always great stuff from Alethe.

[ᗩᒪETᕼE @AletheDenis]

From Before the Door to Breaking In 🤠

This Friday at #WWHF Deadwood, I’m teaching surveillance, reconnaissance, and physical red team planning. The workshop is FULL!

But what happens after the planning is done?

That’s where we pick up in Denver

https://t.co/cAk9QoIvv4

[ᗩᒪETᕼE @AletheDenis]

First talk of the day in Track One at @WWHackinFest … @TimMedin chatting about training the ‘right’ human behaviors to better protect organizations with a packed audience.

[Tim Medin @TimMedin]

@0xSeanG Wow. ORD.

[Tim Medin @TimMedin]

Time once again, to wake up Billy Joe.
https://t.co/Te8Qj3GVMo

[Tim Medin @TimMedin]

@mcuban @robertgraham @grok Not sure what you mean by the last part, but the offensive agents are just an attack swarm. Many attacks are pretty crappy (downright terrible even), but if they send enough, one will eventually work. No new classes of vulns here. Defense doesn't fundementally change (save speed)

[Tim Medin @TimMedin]

@0xderuke @mcuban @grok Sounds good. Except this will be “Extra Dumberly”.