Ian Reynolds

@ianreynolds.bsky.social :: Security Operating , Incident Responding, Forensicating head scratcher :: {pick-a-colour}-teamer :: SANS Instructor ::

[Kevin Holvoet @digihash]

After two years, the @CCBbelgium is thrilled to invite you to the highly anticipated return of the Quarterly Cyber Threat Report (QCTR) event on Friday 25 April 2025, from 14h00 to 16h00 (CET/UTC+2).

Cyber threats never rest—and neither do we. Join us https://t.co/RCLijmEt4M

[Ian Reynolds @_IanReynolds]

@UK_Daniel_Card Only one viable option 🤯

[Thomas Roccia 🤘 @fr0gger_]

🤓 Since the #100daysofYARA challenge started, I decided to release my YARA cheat sheet version 2, extracted from my book Visual Threat Intelligence!

I hope you will find it useful! Have fun 👇

And if you like this one you might like the full book: https://t.co/iAUmr3r4u1

#yara #malware #cheatsheet #book

[Ian Reynolds @_IanReynolds]

@tazwake I'll see your generic Consultant role @ £590 and raise you a Threat Intel specialist @ £480
At that rate there's a serious disconnect between the advert and the budget

[Ian Reynolds @_IanReynolds]

@UK_Daniel_Card Call that a format?
But {mildly} seriously, it’s worse for me in every measurable way (and several ways that I’d sum up as “feelings”)

[Ian Reynolds @_IanReynolds]

@tazwake @Selyst @TheCybrSecNav @a_ottaway In my experience, if you punish staff then at some point people will decide not to report. The employees worst case scenario is now receiving another strike against them. They won’t report a real risk as it’s a definite down side for them. Hopes and prayers for the phish

[Ian Reynolds @_IanReynolds]

@MalwareJake Just a heartfelt shout to @MalwareJake
To my great shame, it’s been a looong time since I last Crystalled (I’m making that a verb now 🤷🏻‍♂️) and it’s helped blow presentation-writers-block out of the water 😎
IOU a beverage of your choice ☕️🍻🍹🥃

[Ian Reynolds @_IanReynolds]

@keydet89 @cyb3rops Aaand I’d completely forgotten the joys of listening for that little “snickt” sound of the CD tray just popping out slightly over the usually AC noise in the data center.

[Ian Reynolds @_IanReynolds]

@7R15 @HiltonHotels I’m kinda interested to see what mines like. Last week @Marriott just flat out lied about some lost property I reported - so maybe it’s a race to @TravelodgeUK next time. 🤷🏻‍♂️

[Ian Reynolds @_IanReynolds]

@TimMedin 🤶 Weirdly a bunch of us are off to watch this in the cinema this week. Precisely *because* it’s a Christmas movie 🎄

[Ian Reynolds @_IanReynolds]

@UK_Daniel_Card This has escalated into geek Pokémon. Did you catch a Järjestelmänvalvoja as well?

[Ian Reynolds @_IanReynolds]

@UK_Daniel_Card Hmm 🤔 how about you start with sh%*posting randomly redacted DNS records and add a sprinkle or two of FUD.

[Ian Reynolds @_IanReynolds]

@lwolive @nixcraft @UK_Daniel_Card Don’t forget to bunny hop as well, if you’re old enough

[Ian Reynolds @_IanReynolds]

@tazwake Perhaps enable WSL alone and then add Ubuntu separately from the App Store?

[Ian Reynolds @_IanReynolds]

@tazwake It’s one of my top issues with bad logging . I hate high noise log sources but seem to constantly get resistance around picking relevant events. I’m so tired of the “let the SIEM figure it out” school of log collection 😵‍💫

[Ian Reynolds @_IanReynolds]

@tazwake I think he means
“Voters voting changes election results”
It’s in a similar vein to “Lying to voters changes election results” but decidedly more honest.

[Ian Reynolds @_IanReynolds]

@tazwake Tbh, I’ve only read my copy of that mail to see if it was the same (and the one I skipped over due to lack to any real content). I’m also generally allergic to “competitive” salaries - just list a figure if you’re so competitive 🤦🏻

[Ian Reynolds @_IanReynolds]

@tazwake Do I *really* have to follow everyone again 🤦‍♂️
@[email protected]
... ffs x 3