A

DFIR enthusiast | mountaineer

[A @dfir_as]

@IntCyberDigest so @AnthropicAI can detect isolated session hijacking, but not any testing going wrong?

smells like bullshit (or part of the fear-mongering marketing plan)

[A @dfir_as]

@elasticseclabs How easy is this portable to @claudeai ?
@AnthropicAI want to give a hand?

[A @dfir_as]

hans anyone ever trained a LLM on all @SANSInstitute course material?

is that something SANS would be interested in?

I have noticed that we got a lot of models that are great at vulnerability discovery, exploit writing and pentesting / red teaming.

none specialized for DFIR

[A @dfir_as]

@ProtonSupport Agreed, but I don't need the additional features. All I would like is ProtonPass (plus Mail Plus).

Therefore a new account it is.

[A @dfir_as]

@ProtonVPN is there a reason why Proton Mail Plus subscribers can not profit from the ProtonPass lifetime offer?

Do I really need to create a new account? Not the best customer service for paying customers.

[A @dfir_as]

@qualys when are you planning to release a QID for CVE-2021-3449?

@TenableSecurity has one available since yesterday

[A @dfir_as]

@ScottSmith95 @troyhunt @OctoPrint3D Looks more like i3 MK3S+ than Mini.

[A @dfir_as]

@Tanium The first two teams have completed all the challenges. #taniumctf

[REMnux @REMnux]

REMnux v7 is now available! https://t.co/g0eAoxjnKI

[REMnux @REMnux]

REMnux v7 release likely next week. Lots of new and exciting tools, including @FireEye capa. Thanks for this handy tool, @williballenthin, Moritz Raabe, and team!

[TheHive @TheHive_Project]

We've been speaking about it for almost 2y. We've been making it for more than 1y. And soon we will unleash it.
TheHive 4. A brand new architecture, more than 40k lines of Scala code, multi-tenancy, RBAC & much more.
That's #FOSS. Done right 💪🏼 https://t.co/0SOl50wmXX

[A @dfir_as]

@TheHive_Project Fantastic news. Integration into existing DFIR processes will be much easier.

[SOF-ELK @SOF_ELK]

New VM distribution!!
Biggest news: Initial KAPE support (LNK and MFT so far), NetFlow v9 (including IPv6 parsing), and Elastic stack 6.7.2. VM details and download: https://t.co/gaN5H112k2

Thanks to @EricRZimmerman for the KAPE tool and help integrating to SOF-ELK!

[Sarah Edwards 👩🏻‍💻🐈‍⬛ @iamevltwin]

If APOLLO (https://t.co/gc4N2FSy5r) has helped you in anyway - can you provide an anecdote/quote for some upcoming public presentations. Can be anonymous/any detail you can/want to provide/any specific modules. Reply, DM, or contact via https://t.co/ETPYpxsmYo - Much appreciated!

[Chad Tilbury @chadtilbury]

Microsoft Recommended Block Rules https://t.co/X3jtOUZuPs << Awesome collaboration between MSFT and many "notables" in our field.

[Sophos X-Ops @SophosXOps]

Someone is attacking internet-facing Windows database servers with #GandCrab ransomware... https://t.co/24URFWz2U9

[MISP (@[email protected]) @MISPProject]

New MISP module expansion added which supports url and file submission from MISP to Joe Sandbox. Thanks to @joe4security for the contribution. #ThreatIntel https://t.co/4GgBZ8ga54

[BugReplay @BugReplay]

The #RCE #vulnerability known as "BlueKeep" (CVE-2019-0708) has a fix available from @0patch. They have some great #threads w/the #micropatch source code as well. @BleepinComputer & @serghei have an #article on this news here: https://t.co/CBxovKtXtg