Richard Nelson

FSU'19 MS in CS
🇺🇸
Lebron🐐  

[Richard Nelson @Clutchard]

@PolymarketSport The people of okc can’t afford 22 dollar beats

[Richard Nelson @Clutchard]

@CoconutBGaming Crazy

[EZ @IAMERICAbooted]

Replicate what real threat actors are doing in your test tenants and seeing what they look like in the logs, then find what controls you can put in place tenant wide to mitigate, prevent, and decrease blast radius.

I also do all the learning paths for Microsoft certifications including sc-300, sc-100, sc-400, md-102, ms-102, az-500, and AI fundamentals.

[Richard Nelson @Clutchard]

@WMPhoenixOpen @WasteManagement @tpcscottsdale @darenw @kpfoley @annehelen let’s get tickets

[sshell @sshell_]

New blog post about all the fun I had red teaming at @NationalCCDC this year!
Covers some of the fun we had this year specifically relating to the web side of things, as well as some tips and resources for competitors & those interested in participating
https://t.co/ofshcp66uP

[Towards AWS @TowardsAws]

AWS Transit Gateway: Advanced Routing Control with Selective VPC Connectivity

https://t.co/6vgcifuId3

[spencer @techspence]

If you had to harden a traditional windows domain in 24 hours… and no matter what you couldn’t add anything else… what’s your first move?

It’s tiered security for me. If access was well defined and strictly controlled I think we’d all sleep better at night

[Sascha Stumpler 💻 @SasStu]

Step by Step: 2-Tier PKI Lab https://t.co/VjGASeYpHA

[Sascha Stumpler 💻 @SasStu]

Passwordless RDP Authentication for On-Prem Servers with Smart Cards (FIDO2 Security Key) https://t.co/nlhwhb8F5I

[XINTRA @XintraOrg]

Fortinet dropped an APT34 report just days after we launched our APT34/OilRig lab:
https://t.co/NM6R9xxHxj

Our emulation covers the exact TTPs:
✔️ Kernel elevation
✔️ Malicious JS payloads
✔️ Password Filter DLL
✔️ In-memory keyloggers

Try it yourself 👉 https://t.co/TJHYNhyoue

[manny @mannyfidel]

$300,000 in PPP loans that were forgiven 👇🏾

[Chris Roberts @young_robbo]

The end game for SCCM is now in play for us. Uninstalling the agent will start next month and completed by the end of April on 100K devices.

Intune management only from now onwards for Windows.

[Leandro Carvalho @LeandroEduardo]

💡New and updated Azure Virtual Network documentation with the latest best practices covering all 5 Well-Architected pillars, new design recommendations including redundancy, security and monitoring patterns https://t.co/s6QnEM52I2 #Azure #AzureTipOfTheDay

[Towards AWS @TowardsAws]

AWS PrivateLink Cross-Region Connectivity

https://t.co/S03BvT6taz

[Alvaro Cintas @dr_cintas]

OpenAI has released a new prompting guide for their reasoning models.

It emphasizes simplicity, avoiding chain-of-thought prompts, the use of delimiters, and when to use them.

Here’s a breakdown and an optimized prompt to have it write like you:

[rootsecdev @rootsecdev]

In case anyone is interested in the havoc C2 framework. Nice post.

https://t.co/OEQDhje8T5

[Tom Wechsler - Microsoft Azure & CDM MVP @tomvideo2brain]

Active Directory: Advanced Threat Hunting - A PowerShell script for Hunting (Passive) Domain Information!
@Microsoft @github @MITREattack @msftsecurity @mvpaward @DirectoryRanger #Microsoft #ActiveDirectory #mvpbuzz #coolstuff #communityrocks
👇👇👇👇
https://t.co/Eud1KiYYhg

[IAM!ERICA @EricaZelic]

To people who don't know M365:

Entra ID
Exchange Online + Protection
Defender Suite of tools (there are at least 10 different ones)
Teams
SharePoint
OneDrive
Purview (8 more tool suites with different functionalities)
Admin Center
Apps Admin Center
Intune
Power Platform

It takes an enormous amount of time to learn what buttons to push where, especially in defense because all of these apps are ALL CONNECTED in various ways.

Most people cannot understand the amount of effort involved.

[IAM!ERICA @EricaZelic]

I'm looking for at least 12 people in the US who would be interested in training provided by @_dirkjan

I cannot attend trainings outside the US, so I'm curious if there are enough Americans willing to meet somewhere for a private training with him somewhere in America.

Please Repost? 🙏

[Joe Stocker @ITguySoCal]

It happened. today.
All devices in Intune are Compliant. ✅
How many of you have witnessed such a rare and historic event such as this? 🤣