Nde

SOC Analyst || 💙 Blue Team journey || #cybersecurity👨🏿‍💻

[Kostas @Kostastsale]

𝗝𝘂𝘀𝘁 𝗹𝗮𝘂𝗻𝗰𝗵𝗲𝗱 𝗮𝘄𝗲𝘀𝗼𝗺𝗲-𝗱𝗳𝗶𝗿-𝘀𝗸𝗶𝗹𝗹𝘀 𝘄𝗶𝘁𝗵 @fr0gger_ !

Designed to save time during investigations and everyday DFIR tasks

Thomas has built an excellent malware triage skill, and I’ve added a couple of timeline analysis skills to help you get started. Feel free to contribute and use these skills to save a ton of time, like we already do.

https://t.co/HbT67gyVbb

Learn about skills:
- https://t.co/Wj9yZwv80U
- https://t.co/PVqnvOPdNb

[Nde @YourNextCISO]

@Hassans_Sec @cyberwarfarelab Congratulations man

[spencer @techspence]

DO NOT hire a pentesting firm until you've done this...

This was a great conversation for 2 reasons:

1, we talk about why your organization might actually not be ready for a pentest and
2, we talk about stuff to do before a pentest so when you do have a pentest, you get more out of it.

Appreciate all the regular, new and occasional listeners! 🙏
https://t.co/v8Xa4IarE4

[Nde @YourNextCISO]

@Lizettle_ @sisinerd Congratulations mentor 🎉

[Elizabeth Ekedoro @Lizettle_]

Let me tell you how much of a BIG DEAL this is!!!!!!!

Black Hat is the top 5 and one of the most respected/prestigious cybersecurity conferences in the world!!!!!!!!!!!!!!!!

Truly miracles happen, truly God answers prayers, and truly God is good.

Thank you @sisinerd

[Dr Iretioluwa Akerele @ireteeh]

We launched CyBlack SOC Academy last year, and we are proud to share that we have recorded 18 jobs so far.

Application for the next cohort is now open.
As part of the selection process, CyBlack will host a Pre-Entry Pitch on August 9th, 2025, live on X. This is the first stage of getting into the Academy.

If you know any aspiring SOC Analyst who will be interested in this life-changing opportunity, kindly share with them.

https://t.co/o9RF5BIrun

[Nde @YourNextCISO]

@Secfortress @yeswehack Nice work 🔥

[Nde @YourNextCISO]

@DamilolaAbiona8 Congratulations 🎉

[Olúmáyòwá.dev @akintunero]

If you missed the session this morning: https://t.co/P04bfOqUCV

[Myd33n 🤡 {GIRAN} @Mydeen4u]

Please help repost and like when you see this🙏

[ToluTalksSecurity @TisforTolu]

Cybersecurity is broad.

Before you start thinking “ethical hacker” or “SOC analyst,” pause.

The real first step? Understanding the domains, the core areas of cybersecurity that guide everything from career paths to certifications.

Let’s break them down 🧵

[iPsalmy👻🥷🏽 @Dghost_Ninja]

Got my write-up published on a DevSecOps page...LFG! 💪🏽🔥

[Mehmet Ergene @Cyb3rMonk]

🚨Bad news for defenders, good news for red teamers:
Linkable token identifiers in Entra ID are useful only in an AiTM scenario. Doesn't even cover Device Code Phishing. Blog soon.

#ThreatHunting #DetectionEngineering #redteam

[IT Guy @T3chFalcon]

Scheduled Task Persistence via SharpPersist + Cobalt Strike.

Runs a Base64-encoded PowerShell payload
Executes hourly via Task Scheduler (schtask)
Delivered fully in-memory through Beacon

Tool: SharpPersist
Method: Scheduled Task
Payload: Encoded PowerShell

#redteam

[I am Jakoby @I_Am_Jakoby]

Added a new tool to:
https://t.co/v4FnSVbaDD

⚠️Please Use Responsibly⚠️

You can use this to instantly generate an obfuscated reverse shell in powershell that i have personally used to beat EVERY single EDR out there right now.

I've added some pretty cool stuff to my website but this is one of my favorite additions.

🛑 Disclaimer: This tool is for educational and authorized security testing only. Misuse could be illegal. Don’t be dumb.

Shoutout to the only ones that were actually able to stop it, using something called "ring fencing" @ThreatLocker

This is not a sponsored post, just a fan of them
#Edr_Is_Not_Enough

[IT Guy @T3chFalcon]

Everyone knows certutil.exe.
But certreq.exe?

Native to Windows
Signed by Microsoft
HTTP POST support
Can exfil small files

Originally for certs.
It wasn’t designed for exfiltration… but it works especially for small files.

https://t.co/hqFwxNLqVt

[IT Guy @T3chFalcon]

Decrypting Edge Browser Passwords

Modern Edge/Chrome encrypt saved logins with AES-GCM.

Step 1: Extract AES key from the Local State file
Step 2: Use DPAPI to decrypt the key
Step 3: Use that key to decrypt credentials from the SQLite blob

Boom, plaintext passwords.

👊🏾

[bluecapesec @bluecapesec]

🔷 Want to learn real Windows forensics?
Join our live walkthrough of a real-world compromise + see what a structured forensic process actually looks like.

👉 Register free: https://t.co/hE5jRIDXTO
#DFIR #DigitalForensics #SOCAnalyst #BlueTeam

[Nde @YourNextCISO]

@Olufela_Jr Congrats 🔥🔥

[IT Guy @T3chFalcon]

https://t.co/rciL2BL4mn