buddy4361

Security what?

[buddy4361 @buddy4361]

@ContiLeaks Where did that data leak come from?

[buddy4361 @buddy4361]

@CTV_PowerPlay @EvanLSolomon @SenDPatterson The conservatives have missed an opportunity, the media keeps putting the trucker protest on the conservatives, but the liberals are the party in power and could of taken some positive action to deal with this but they sit back and let the media bash the conservatives.

[buddy4361 @buddy4361]

@EricRZimmerman Thank you

[buddy4361 @buddy4361]

@Jlentz428 @cyb3rops Velociraptor

[buddy4361 @buddy4361]

Does not look like you can contact Rock group

[buddy4361 @buddy4361]

@m3g9tr0n Sounds like your work was a check mark for a compliance checklist.

[buddy4361 @buddy4361]

@SquiblydooBlog @HuskyHacksMK Just finished PMAT and found it to be a very well done course and would recommend it to anyone wanting to increase there knowledge of how to tear apart and understand malware.

[buddy4361 @buddy4361]

@eduardfir @velocidex Nice

[buddy4361 @buddy4361]

@velocidex Staff

[buddy4361 @buddy4361]

@RewardsCanada Sure would be nice if BMO Rewards would answer the phone

[buddy4361 @buddy4361]

@LadyRed_6 Ever wonder if someone near you hear what you are thinking

[Velociraptor @velocidex]

Very excited to announce the final #velociraptor 0.6.1 release is out! There are so many cool new features that I needed a blog post to show them... Host quarantine, Timelines, CobaltStrike config parsers and so much more... Check it out!

#DFIR

https://t.co/1MCtDGdRFe

[buddy4361 @buddy4361]

@Travisdhanraj @CPC_HQ So part of the problem is the definition of Assault weapons. Original US Army definition is a selective-fire rifle chambered for a cartridge of intermediate power. By selective-fire they mean full-auto or something like 3round burst.

[buddy4361 @buddy4361]

@MalwareJake Remember downloading code on my 386 using a modem, boy did it take time to compile

[buddy4361 @buddy4361]

@mathias_fuchs With Velociraptor it is very fast. Push it with PDQ or even GPO.

[buddy4361 @buddy4361]

@tazwake Whack-A-Mole

[buddy4361 @buddy4361]

@hal_pomeranz Good to make the right tone, but often there is someone to blame

[🥝🏳️‍🌈 Benjamin Delpy @gentilkiwi]

This #printnightmare / CVE-2021-1675 is really serious 🤪

Just adapted/simplified original POC then:
*From Remote standard user to SYSTEM*

Here on a domain controller, but valid on all systems with RPC to spooler available, remote or local

➡️ disable service now (no patch yet)

[buddy4361 @buddy4361]

@fwosar @demonslay335 https://t.co/qPFu6vrPhr

[buddy4361 @buddy4361]

@fwosar This is interesting, what leads you to believe that it is EvilCorp?