Branbot

CyberSecurity Professional specializing in technology and threat research with experience in Private and Government security.

[Branbot @branbot1000]

@TheTraitorsUS Hey, what if you had secret Traitors that us, the viewers, don’t know, like they’re cloaked during the kill mtng. Or make all of them secret, so we have to figure it out by all of the clues along the way too. Love the show, my wife is addicted and hooked me too.

[Branbot @branbot1000]

@MarieSchmarcy78 @jm_reviews_ I just received an email confirmation. I got kicked from the line 5 times…it went to sold out to available to sold out a few times. Not sure how it went through.

[Branbot @branbot1000]

@MarieSchmarcy78 @jm_reviews_ Payment hold was made on my card and shows in my Shop app as confirmed, but I haven’t received an email yet. I figured with the weirdness of the checkout today, they’re having some issues. I’m hoping that’s the case at least.

[Cyborg Security, Now Part of Intel 471 @CyborgSecInc]

Cyborg Security is gearing up for fantastic #BlackHat! Join us at Booth #2817 as we take threat hunting to a new level. Swing by our neck of the woods to join in on: Engaging Discussions, Exclusive Swag and Giveaways, Live Demos, and a Special Happy Hour!

[Cyborg Security, Now Part of Intel 471 @CyborgSecInc]

Exciting news! 🎉 @CyborgSecInc Security has taken a giant leap in revolutionizing threat hunting with the introduction of REST API into our HUNTER Platform!

#CyborgSecurity #ThreatHunting #API"

https://t.co/fqlMC0nrFw

[Branbot @branbot1000]

You’re really only helping the attacker with yet another weapon in their arsenal, and leaving defenders scrambling to stand up a vulnerable server/service, work with the POC and hope it works right…do better

…rant over

3/3

[Branbot @branbot1000]

Just putting this out there. If you’re a company, vendor, or researcher and want to release a PoC for a vulnerability, patched or unpatched…if you’re truly doing it for the good of the community, release logs along with it. You’ve done the work already, help the defenders!! 1/3

[Branbot @branbot1000]

If you don’t release the logs from the vulnerable server, service or whatever you’re attacking, I’ll just assume you’re chasing clout, or doing it “just because you can”. 2/3

[Cyborg Security, Now Part of Intel 471 @CyborgSecInc]

🔐😎 #NokoyawaRansomware is getting crafty, exploiting #CVE202328252 and playing with IcedID. Get your free HUNTER Community Account from Cyborg Security and level up your threat hunting game today.

https://t.co/9F1jNNDfMK

[Branbot @branbot1000]

@chompie1337 Any shareable Windows Logs or Security EVTX export available for defenders??

[؜ @xxByte]

lot of #infosec jobs here:
https://t.co/3L5BiOOyor

Please RT for people who have been in the recent #layoffs

[Cyborg Security, Now Part of Intel 471 @CyborgSecInc]

Are you attending #RSA2022 this week? Want to talk tech and #threathunting? Stop by the Corelight booth and look for the @CyborgSecInc t-shirts to get a hands on demo of the HUNTER threat hunting content platform!

#threatintel #infosec #threatdetection #cybersecurity

[Cyborg Security, Now Part of Intel 471 @CyborgSecInc]

⚠️ Emerging Threat Alert ⚠️

Spring4Shell (CVE-2022-22965) is the critical remote code execution vulnerability found in Spring Core Framework.

Get the free Hunt Package here! 👉 https://t.co/rKhR6iaqoE

#threathunting #threathunt #threatdetection #threatintel #cti

[Cyborg Security, Now Part of Intel 471 @CyborgSecInc]

Join Cyborg Security for a live threat hunt for the #Conti #ransomware using the latest #threatintelligence reporting, and the very real pitfalls organizations face in trying to operationalize this data.

Register 👇
https://t.co/IK3kBsgLeF

#threathunting #cybersecurity #infosec

[Cyborg Security, Now Part of Intel 471 @CyborgSecInc]

Register today to join us for a live threat hunt to learn how to begin implementing forward-looking defenses by moving beyond IOCs when defending against the #contiransomware! 👇

https://t.co/gQ1QoB26xe

#webinar #threathunting #threatintel #cybersecurity #infosec #blueteam

[Nicolas Krassas @Dinosn]

This document serves as a list of resources, and other things that aid in malware analysis / dev and exploit dev https://t.co/0PKuKl1MPI

[inversecos @inversecos]

1\ How to prove malicious macro was enabled & clicked? 👀 #DFIR

HKEY_LOCAL_MACHINE\USERDAT\Software\Microsoft\Office\<VERS>\<PROGRAM>\Security\Trusted Documents\TrustRecords

Look ONLY for values where last four bytes are "FF FF FF 7F".

These files had macros enabled

👇👇👇

[Cyborg Security, Now Part of Intel 471 @CyborgSecInc]

Learn why existing tools simply don't work for hunt teams, and why structured #threathunting is the most effective way to operate.

Access the #whitepaper now 👇
https://t.co/9U1CiLRpB8

#infosec #informationsecurity #threatintelligence #artificialintelligence #ai #cybersecurity

[Cyborg Security, Now Part of Intel 471 @CyborgSecInc]

Strengthen your defenses by learning strategies your hunt team can immediately use at next week's webinar! Register today 👇

https://t.co/NphQv9jHki

#webinar #livewebinar #threathunting #threatintel #threatdetection #blueteam #cybersecurity #informationsecurity #infosec #ndr