David McGuire

CEO @specterops

[SpecterOps @SpecterOps]

WSL2 is a powerful attacker hideout because it runs as a separate Hyper-V VM, and defenders rarely monitor it.

Daniel Mayer explains how attackers pivot into WSL2 and what it took to build tooling that works across WSL2 versions.

Read more ⤵️ https://t.co/TaPsDDW4Cq

[SpecterOps @SpecterOps]

Credential Guard was supposed to end credential dumping. It didn't.

@bytewreck just dropped a new blog post detailing techniques for extracting credentials on fully patched Windows 11 & Server 2025 with modern protections enabled.

Read for more ⤵️ https://t.co/mYPHg1mTKj

[SpecterOps @SpecterOps]

MSSQLHound leverages BloodHound's OpenGraph to visualize MSSQL attack paths with 7 new nodes & 37 new edges, all without touching the SharpHound & BloodHound codebases.

@_Mayyhem unpacks this new feature in his blog post. 👇 https://t.co/ZvZt45UrOa

[Chris Thompson @_Mayyhem]

I'm SO hyped to finally make MSSQLHound public! It's a new BloodHound collector that adds 37 new edges and 7 new nodes for MSSQL attack paths using the new OpenGraph feature for 8.0!. Let me know what you find with it!
- https://t.co/Hh089SaVOS
- https://t.co/geO0HXTykf

[SpecterOps @SpecterOps]

What does the launch of BloodHound 8.0 mean for Community Edition? Pete McKernan breaks down all the new features available in BHCE, including OpenGraph and additional usability & performance improvements.

Read more ➡️ https://t.co/slB2bA7KXp

[SpecterOps @SpecterOps]

BloodHound v8.0 is here! 🎉

This update introduces BloodHound OpenGraph, revolutionizing Identity Attack Path Management by exposing attack paths throughout your entire tech stack, not just AD/Entra ID.

Read more from @JustinKohler10: https://t.co/TOcfzrrtqS

🧵: 1/7

[Jared Atkinson @jaredcatkinson]

Looks like BloodHound has picked up the scent of something new :)

Join us Thursday to see where the trail leads.

[SpecterOps @SpecterOps]

BIG NEWS: SpecterOps raises $75M Series B to strengthen identity security! Led by @InsightPartners with @AnsaCapital, @M12vc, Ballistic Ventures, @DecibelVC, and @Cisco_Invests. https://t.co/ZkvWqbKYYJ

#IdentitySecurity #CyberSecurity

(1/6)

[David McGuire @davidpmcguire]

Thrilled to announce @SpecterOps has raised Series B funding to tackle Identity Attack Paths! Identity security matters more now than ever. And we're just getting started.

Read more: https://t.co/7IQAHQs7RN

[David McGuire @davidpmcguire]

Proud to share that SpecterOps has earned FedRAMP High Authorization for BloodHound Enterprise! Government agencies are at high risk for identity-based attacks, and now BHE is available to those that operate at the FedRAMP High baseline.
Learn more: https://t.co/LOD6EWwc5A

[David McGuire @davidpmcguire]

Happy to have Kevin join us at SpecterOps. Mandiant is an excellent model for how we want SpecterOps to grow, and I'm grateful to have his guidance. Identity Risk is an enormous blind spot for enterprises, and we look forward to working together to help them solve this problem.

[SpecterOps @SpecterOps]

We are pleased to share that Kevin Mandia has joined the SpecterOps board as chair! Kevin & CEO @davidpmcguire spoke to @gregotto @CyberScoop on how Kevin will help guide SpecterOps & BloodHound Enterprise as we grow our Attack Path Management solution. https://t.co/ect6a1kbJ4

[Greg Otto @gregotto]

Exclusive this morning: Kevin Mandia joins ⁦@SpecterOps⁩ as chair of the board, he and CEO Dave McGuire talked about the future with me ahead of the announcement https://t.co/r9p781oTic

[@eliothiggins.bsky.social @EliotHiggins]

For some reason, @elonmusk's X is now claiming the link to this article about Russia bombing a children's hospital is unsafe, because apparently it has "been identified by X or our partners as being potentially spammy or unsafe". Unsafe to who, Putin? 🤔

[Jared Atkinson @jaredcatkinson]

My On Detection series continues. In part 14 I look at a “special” subset of operations that require a bit more detail to facilitate accurate detection. While this topic is more focused on the model, I finish the post by analyzing one of the variants of PoolParty Injection!

https://t.co/NNalge2TFh

[Jared Atkinson @jaredcatkinson]

My On Detection series is back! In this edition I explore how the same behavior (operation chain) can be implemented using several different execution modalities and the implications of this for detection engineers.
https://t.co/cel9gnwSA8

[Chris Thompson @_Mayyhem]

I'm pumped to announce the release of Misconfiguration Manager, a knowledge base and how-to for both offensive and defensive SCCM attack path management, that @subat0mik, @garrfoster, and I have been working on! Check it out and let us know what you think! https://t.co/OuGS5uLAYA

[SpecterOps @SpecterOps]

The #SOCON2024 summit lineup is now available! 🙌

We’ve got an incredible slate of speakers and talks planned across three tracks. Register today & secure your seat for 50% off for a limited time. https://t.co/0njiU2f3ac

[SpecterOps @SpecterOps]

⏰ Time is ticking on your chance to join our BloodHound Fall 2023 Update happening next week.

Join @_wald0 & @StephenHinck as they unpack some new features & improvements and share plans for the future.

Register now! ➡️ https://t.co/GiDnu74ZEj

[SpecterOps @SpecterOps]

Check out that #SOCON2024 speaker line-up! 😮‍💨

Don't miss out on:

➡️ Trends in Attack Path Management
➡️ BloodHound attack paths
➡️ Offensive security research from SpecterOps

For a limited time, get 50% off the full price! https://t.co/zFToHexcjB

[SpecterOps @SpecterOps]

Registration for #SOCON2024 is now open! 🙌
​​​​
Join us to dive into the latest in attack path management, engage w/ industry experts, and expand your knowledge & skills in the field. For a limited time, secure your summit spot at 50% off.

Register: https://t.co/zFToHexcjB