Bryce

🐗 🦅 🎯 Research & Discovery @ Google/Mandiant

[Bryce @bryceabdo]

My new EDR startup company idea:

- Privacy FIRST! — CASH 💵 only
- No telemetry collection! (Send what feels right for you ♥️ 😇)
- Vendor agnostic, which means it don’t collect nothin 🫡😤
- Guaranteed 100-day SLA response time for critical incidents 🔐 💯

[Bryce @bryceabdo]

crowdstrike booth at defcon is nuts

[Bryce @bryceabdo]

Update: #ImposeCost

[Bryce @bryceabdo]

okay which crowdstrike APT is this

[Justin Elze @HackingLZ]

Hey @grok what was the best year of the OST offensive security tool debate on X. Who were the biggest players on either side.

[vx-underground @vxunderground]

@bryceabdo Where did this go guy? He always posted funny memes and now he's gone

[Bryce @bryceabdo]

@ItsReallyNick @cPeterr @JershMagersh Congrats Chuong ! (and Nick 😅)

[Bryce @bryceabdo]

@cPeterr Pigeons NOT included, will involve a bullet proof licensing system to deter non educational or ransomware usage

[Bryce @bryceabdo]

okay which crowdstrike APT is this

[Bryce @bryceabdo]

@jamieantisocial

[Bryce @bryceabdo]

@AShukuhi

[Bryce @bryceabdo]

@ImposeCost TIL i live my life like this

[Bryce @bryceabdo]

@ItsReallyNick not an answer to your Q but, adding spur context filters into very very loose methodology/multiple-event rules where src/dst IPs in the audit logs must meet certain criteria is pretty neat 🥵👀

[Bryce @bryceabdo]

@icsk3n @Big_Bad_W0lf_ @JohnHultquist

[Bryce @bryceabdo]

@Big_Bad_W0lf_ @icsk3n @JohnHultquist 450 north are great, put a can out in the sun tomorrow for some explosive fireworks

[Bryce @bryceabdo]

@jhencinski love me some bubbles

[Bryce @bryceabdo]

@ImposeCost bullish news for the baldies

[Bryce @bryceabdo]

@ImposeCost altitude matters