Ashwin Ramesh

Security Engineer @Plaid | Views / Opinions are my own

[Scott Swingle @biobootloader]

Today I used GPT-4 to make "Wolverine" - it gives your python scripts regenerative healing abilities!

Run your scripts with it and when they crash, GPT-4 edits them and explains what went wrong. Even if you have many bugs it'll repeatedly rerun until everything is fixed

[Florian Roth ⚡️ @cyb3rops]

Interesting obfuscated PowerShell loader in LNK file

Sample VT
https://t.co/tWovPy0duI

Malware Bazar
https://t.co/d9WimcFtQO

Stage2 - CS Beacon
https://t.co/i8HBq0twgd

[Daniel Abrahams @DanAbrahams77]

Last week the esports team I work with won an $18,000,000 tournament

The coach, players, and management of @TundraEsports had worked tirelessly for 6 months with myself on 5 biopsychosocial pillars to give us our best chance to win

Here’s a thread (🧵) to explain what we did 👇🏻

[Jon Hencinski @jhencinski]

Go ask your SIEM or EDR if calc.exe spawned regsvr32.exe somewhere in the environment.

It’s likely Qakbot activity.

[Jon Hencinski @jhencinski]

To the "do it all" IT folks or new #SOC analysts that need a little help - a thread for you.

Cheat sheets and example queries for Endgame, CS Falcon, ATP, and CbR using a recent incident as the starting point.

cc: thanks to @AshwinRamesh94 for the query work