Brian Marks

SHUT DOWN THE CLUSTER !!!

[Brian Marks @brianDFIR]

@EvinPriest Congrats on the book release. I loved the "Chasing Majors" podcast series, however I can't find it online anymore. Is there a reason for this? I would love to relisten to a a few episodes.

[Recon InfoSec @Recon_InfoSec]

For those aspiring to win https://t.co/ppYocDgP90 @defcon 29 -- you could be the first to receive this prize!

We have minted 5 digital coins in the form of NFTs that will be awarded to each member of the winning team!

https://t.co/nk4aTBgdPT #defcon29 #opensoc @BlueTeamVillage

[Recon InfoSec @Recon_InfoSec]

We are thrilled to announce the winning teams of https://t.co/ppYocDgP90 #DEFCONSafeMode finals.

8M @graylog2 queries
91K+ scoreboard submissions
800+ participants
500+ challenges
350+ teams
260GB+ PCAPs
150GB+ endpoint telemetry
10K+ @osquery queries
20+ hours of content

[Brian Marks @brianDFIR]

@jordanbarth *rocketship

[Brian Marks @brianDFIR]

This looks like the last supper of hacker jeopardy. @DerbyCon #lastderbycon

[Brian Marks @brianDFIR]

@4n68r @JessLJohnson @andreasanchos Haha nice! Easy A!

[Brian Marks @brianDFIR]

@secrisk @BlackHatEvents Question that I should have asked at the Arsenal- is there any existing way of integrating this with cobaltstrike? Like export commands run in CS into VECTR. Or do you use it as a totally separate tool?

[Brian Marks @brianDFIR]

@Niki7a @defcon I'm trying to register right now and it still says "Unavailable". Are there any issues with Eventbrite?

[Brian Marks @brianDFIR]

@jordanbarth @cshanahan @stevegibson @LaraNell @andreasanchos Uh we’ll need a KPMG crs certification trip first.

[Brian Marks @brianDFIR]

@mbromileyDFIR @4n68r Here’s a mental picture for you.

[Brian Marks @brianDFIR]

@Hitchhikerbrew @oakmontbbqco Happy anniversary. This is how I enjoyed my last Whole Punch.

[Brian Marks @brianDFIR]

@gmm5005 @fsmikey True story. It was my first gobbler.

[𝙳𝚊𝚗 @4n68r]

Proud of all our teams tonight and thanks to @sansforensics for a great #netwars

[Brian Marks @brianDFIR]

@4n68r @sansforensics Congrats team! Nice job!

[Brian Marks @brianDFIR]

@robtlee New #sansdfir sticker as well. Represent @FranklinBbq #DFIRSUMMIT

[Brian Marks @brianDFIR]

@josephwshaw @KPMG_US Best of luck in the future to you and your family Joe. Keep in touch.

[Brian Marks @brianDFIR]

@markrussinovich @GuyGregory @mbromileyDFIR @scottgu If it's any consolation, I think you would be the good terminator that would come back to save John Connor.

[Brian Marks @brianDFIR]

@markrussinovich @mbromileyDFIR Thanks Mark. Glad you liked it. Had fun diving deep into sysinternals researching for it.

[Oddvar Moe @Oddvarmoe]

@scsinusy @HackingDave @brianDFIR @mbromileyDFIR Its me. :-) Thanks for the mention @mbromileyDFIR and @brianDFIR

[Matt Bromiley (🇺🇸) @_bromiley]

Can't wait to attend @nola_con this week!! Come catch me and @brianDFIR talking about SysInternals gone rogue. #favoriteconever