Jeremy Brown

Coffee Lover. Nerd. Does wild stuff in network sessions. VP of Analysis @TrinityCyber

[Jeremy Brown @AlteredBytes]

Excited to be presenting at @BlackHatEvents with a sponsored session talk - diving into hidden and impactful threats.

Come see for yourself!

https://t.co/uBV9Glnbq2

[Jeremy Brown @AlteredBytes]

@stvemillertime @TrinityCyber We got you, Steve. Full session, inline file parsing and actions like replace, remove and modify on payloads.

[Jeremy Brown @AlteredBytes]

@stvemillertime Preeeeach

[Jeremy Brown @AlteredBytes]

@ImposeCost Absolute madness, I tell you.

[GreyNoise @GreyNoiseIO]

We cannot thank @TrinityCyber enough for providing valuable intel on CVE-2023-20198 last month. 🤝 With this information, we acted quickly and got a tag out! Grateful to be able to work together to keep our customers safe + secure.

[Jeremy Brown @AlteredBytes]

Had a blast chatting with @JasonSWalls for his new podcast, Epik Mellon.

Go check it out!

[QA Cafe @qacafe]

Subscribe to our #podcast, Epik Mellon, on YouTube (https://t.co/E6KBXoQFVY) and on your favorite podcast platform now! First episodes feature @twintersunh, our CTO, and @AlteredBytes from @TrinityCyber. #networks #cybersecurity #broadband #wifi #ipv6

[Jeremy Brown @AlteredBytes]

@Mao_Ware @likethecoins We’ve got an opening, can you DM me?

[Jeremy Brown @AlteredBytes]

Don’t miss this hot new collab between @TrinityCyber and @GreyNoiseIO where we provide some of the latest exploits used by Mirai, including CVE-2023-1389.

Sharing Intel benefits everyone. Go check it out!

https://t.co/ZbhwtLFs27

[Jeremy Brown @AlteredBytes]

Massive win for the team!

We’re honored to be protecting USAF internet traffic and working together for better outcomes.

[Trinity Cyber @TrinityCyber]

.@TrinityCyber and @ATT deliver a new #cybersecurity solution to the @usairforce. Our Secure Internet Gateway offers automated threat prevention at scale and will greatly enhance #cyber protections for all federal agencies. Learn more: https://t.co/HTxMpuUN6w

[Jeremy Brown @AlteredBytes]

PaperCut server exploits are in the wild; here’s how you detect the first stage:

HTTP GET/POST + URI ending in “SetupCompleted”

AND

HTTP Response “200 OK” + header “Set-Cookie: JSESSIONID=“ with a valid token.

Go hunt for this!

#ThreatHunting

[Jeremy Brown @AlteredBytes]

.@TrinityCyber is actively stopping attacks on PaperCut servers connected to the internet. Exploit details are embargoed, but involve the use of JavaScript, encoded PowerShell, RMM agents and lead to ransomware.

@BleepinComputer

https://t.co/9uLxRuQEzL

[Steve YARA Synapse Miller @stvemillertime]

The #100DaysofYARA crew slayed it this year: big hustles fm @greglesnewich @shellcromancer @BitsOfBinary @wxs @Qutluch @notareverser @silascutler @dan__mayer @AlteredBytes @malvidin @th3_protoCOL @tlan @jstrosch @threathog @pmelson @Vert1cal_ & more. Props y'all.

YARA rules.

[Jeremy Brown @AlteredBytes]

@greglesnewich +1 for another great resource, UUID Global. You can research a LOT about CLSIDs in LNK files with it: https://t.co/H4AKMJRBjl

[Jeremy Brown @AlteredBytes]

@jessjohannes Those eyes…so cute

[Jeremy Brown @AlteredBytes]

omg 2 year Twitter anniversary, yaaaas

[Jeremy Brown @AlteredBytes]

@greglesnewich vCalendar and LNK files!

[Jeremy Brown @AlteredBytes]

@stvemillertime Same, bro

[Jim Mandelbaum @Jmandelbaum]

Time to listen to my latest podcast with @AlteredBytes where we talk beyond the packet and some best practices for cyber security #gigamon #cybersecurity https://t.co/iGw8xelSqk

[Jeremy Brown @AlteredBytes]

I’m looking for an experienced (3-5 years+) threat hunter who’s comfortable with both network traffic and static file analysis.

You find it, you can actively take it out with @TrinityCyber tech.

This you? Shoot me a DM

[Jeremy Brown @AlteredBytes]

Having grown up in a state that’s got trigger laws going into effect as we speak - I’m beyond disappointed at SCOTUS ruling.

This is a brutal attack on women’s health, bodily autonomy, and a 50 year regression for America.

I’ll always support the right to choose.