Matt Coons

SIRT manager @GitLab - I post about #DFIR #Cloud #AI #Automation #DevSecOps and occasionally #Fitness

[Bill Staples @bstaples]

Devs, you were right all along: https://t.co/djveovZ7rf

GitLab delivers more than DevSecOps and AI, we give you independence.

DM me to get started on your path back to freedom.

[Sid Sijbrandij @sytses]

GitLab Duo CLI is now out in public beta.

[Nicolas Krassas @Dinosn]

GitLab Threat Intelligence Team reveals North Korean tradecraft https://t.co/44Nx5fuimi

[Cookie Connoisseur @browsercookies]

How do you catch a DPRK actor you ask? Here are a few things to think about;

1. They love to use a VPN when applying for jobs. Check your HR system.

[Matt Coons @arborbytes]

@adrianmacneil I got an Aranet as well and love it - it’s crazy how fast my home office will get to really levels if I have my door closed - cracking a window (even just a tiny bit) makes such a big difference

[Florian Roth ⚡️ @cyb3rops]

Welcome to the era of the token.

In the past, attackers had to breach networks, bypass security controls, escalate privileges, and evade detection just to reach confidential data. Now? A single OAuth authorization - granted with one click - can hand over access to emails, files, and cloud services.

No need to dump credentials, bypass EDR, or move laterally. Just steal a token and walk right in. The cloud-first world has made security more convenient - but also far more fragile.

[NFL @NFL]

The @Lions secure a spot in the #NFLPlayoffs 🔥

#EasyToCelebrate | @budlight

[🦊 GitLab @gitlab]

GitLab Duo 🤝Amazon Q

Today, we’re announcing a joint offering with @awscloud that brings together GitLab Duo with Amazon Q.

Learn more here: https://t.co/6MvHqAxk7J

[Florian Roth ⚡️ @cyb3rops]

What people often overlook in #DetectionEngineering is that there’s no "one-size-fits-all" rule to detect a threat. It depends on your goals.

How specific should the rule be? Are you tracking a threat actor, detecting the tool/malware, or focusing on the technique? Should it be based on code, content, form, or metadata?

Just like in art, you can create an abstract, impressionist, or realistic painting of the same subject, and all can be masterpieces in their own right

[Matt Coons @arborbytes]

@Usher All of his tweets are back…

[Matt Coons @arborbytes]

Hit a deadlift PR with #overclock 🔥375lbs #wehackhealth

[Matt Coons @arborbytes]

Time to get it 💪 #wehackhealth

[Matt Coons @arborbytes]

It’s here 🔥🔥🔥 #wehackhealth

[Matt Coons @arborbytes]

Love this! I ordered my pre workout - can’t wait for it to get here!

[Dave Kennedy @HackingDave]

Excited to announce the launch of our pre-workout and protein with @bencanning87.

Two years in the making.

The wait is over.

Thank you all for the support and patience as we navigate a new chapter in the Hacking Your Health movement.

https://t.co/C83djXxzQA

#wehackhealth

[Matt Coons @arborbytes]

@RayRedacted Honestly one of the coolest attraction I’ve been to - Area 51?

[Matt Coons @arborbytes]

@dladd10 💯

[Matt Coons @arborbytes]

This this! The Great Lakes are just as awesome - or even better than the ocean!

[Brianna @bwitt722]

I just think people who haven't been to a Great Lake don't understand. This is an unfiltered shot of Lake Michigan.

[Matt Coons @arborbytes]

@HackingDave @KillrBunn3 For me the problem is about 3 days into the break and I’m like - oh man, I miss the pick me up 😭😂

[David Gilbert @daithaigilbert]

This story is just mind-blowing. Not only the scale ($11B in three years) and the scope (they sell cattle prods to keep slave labourers in check) but mostly for the fact it's operating almost completely in public and has links to Cambodia's ruling family....