Ryan O'Connor

[Ryan O'Connor @_remixed]

@fr0gger_ @Microsoft @msftsecurity Congratulations man!!!

[Ryan K @meansec]

This took WAY too long to get published (not created). Here is some tactical guidance on how to detect the Sunburst excitement that has taken over the internet: https://t.co/ZbBpXZtqH5

[Ryan O'Connor @_remixed]

@darksider9 This looks kinda familiar

[Olaf Hartong @olafhartong]

Microsoft publishes the Security Audit types and the respective EventIDs here https://t.co/JgMzkKdVvR

However, does anyone have the overview of which setting is required for the EventID to be generated?

{Succes:Failure:Success and Failure}

@msftsecurity #AskingForAFriend

[Ryan O'Connor @_remixed]

@aboutsecurity @marcusjcarey @jen_jin @TribeOfHackers

[Ismael Valenzuela @aboutsecurity]

Proud to be part of this world-class team. Lessons learned and full #transparency 👇🏼(more details coming soon)

[Lenny Zeltser @lennyzeltser]

Chepy is a decoding tool for command-line and Python enthusiasts by @securisec. It's an alternative to CyberChef and it's shipped with @REMnux: https://t.co/Kt5z5Va4YL

[Ryan O'Connor @_remixed]

@darksider9 Ha! I have been known to fall into this method of science for sure

[Lenny Zeltser @lennyzeltser]

A catalog of the techniques malware uses to evade defenses, by @fr0gger_ and @darkcodersc: https://t.co/UYI26p8uT2 #UnprotectProject

[Nabil Adouani @nadouani]

You wanna try
@TheHive_Project
4.0 easily, using a config file and a #docker one-liner?

Here you go, check the #gist

https://t.co/RGA1JF0H8L

[The Hazard @darksider9]

I'm not sure why, or who got @Andrew___Morris mad, but...
(p.s. his pre/post-tweets of this one are gold and 100% accurate/on point!)

[𝙶𝚊𝚕𝚕𝚊𝚐𝚑𝚎𝚛 🌻 @DanielGallagher]

Wrote a new Yara rule to detect phishing emails. 🥔

[Rob T. Lee @robtlee]

BREAKING NEWS! DFIR SUMMIT 2020 (July 16/17) is now virtual & (wait for it) --> FREE --> IT IS FREE!!! SIGN UP NOW TO GET A RESERVED SLOT!
https://t.co/47T76spGUR #justreleased #DFIR #DFIRSUMMIT #FreeDFIRSummit #digitalforensics #infosec

[Ismael Valenzuela @aboutsecurity]

Save the date and register for our first group mentor session!

[TheHive @TheHive_Project]

TheHive4py got a second wind, version 1.7.0 released

Go ahead and pip install -U thehive4py

https://t.co/1Mms2oKm4N

[TheHive @TheHive_Project]

Cortex-Analyzers 2.7.0 is out! Including 5 new analyzers for @anyrun_app, #OpenCTI, @abuse_ch MalwareBazaar, #CyberChef & a revamped, much faster @MISPProject Warning Lists analyzer.

It also includes a responder to create tickets in RT.
#FOSS #CTI #DFIR

https://t.co/myXGp5tgkZ

[Ryan O'Connor @_remixed]

@darksider9 Own it for SURE

[The Hazard @darksider9]

#MSTIC is crushing the recruitment as of late. Not like they had a bad team to begin with, but the additions over the last few months have been crazy. Is @Microsoft getting ready to spin out it's own Security company and be like #Alphabet and a bunch of subsidiaries?