Matt

Leader; follower. Speaker; listener. Student; teacher. (Following, RTs & Links ≠ Endorsement)

[Martin Crowley @AIToolReport]

"My boss thinks I'm an AI genius, (I'm not) it's because I read The AI Tool Report (and they have no idea it exists.)" - AI Tool Report Reader

[VIRginia International Raceway @VIRNow]

🚨GIVEAWAY🚨
To celebrate the start of the #Rolex24, we are giving away a pair of @IMSA #MichelinVIR tickets! You have 24 hours to enter 🕰 #IMSA

How to Enter:
1. RT this Tweet 📲
2. Like this Tweet ❤️

@MichelinRaceUSA / @Rolex24Hours / @DAYTONA

[Matt @drmattjmorris]

#KQLHunt! I will continue to update. In this iteration we are looking at MFA Failed Logins, both non-interactive and interactive. I have the option to filter by error code as well! Happy hunting! #clouddefense

Link: https://t.co/vgsEFjwXPg

[GPS @madebygps]

🐧 Earlier this year I passed my Linux Essentials and it was probably the most enjoyable cert I've studied for. Linux skills are a MUST for cloud computing. Here are my notes:

[Matt @drmattjmorris]

@Essb33 Congrats!

[marc ochsenmeier @ochsenmeier]

I have updated the #Malware Analysis Fundamentals | Files and Tools slides
https://t.co/Hviiujo9Z1

[Microsoft Azure @Azure]

Continuing the #AzureAI Essentials series, @MaddyButzbach shows you how easy it is to add AI to your apps: https://t.co/xCOrbhtM0s

[Nathan McNulty @NathanMcNulty]

Ever wonder what Windows Server services you should disable for performance or security purposes?

Wishing there was a comprehensive list?

This doc has been around for a long time, but you might have missed it because the title is confusing...

https://t.co/ZlmexK45pt

[Microsoft Threat Intelligence @MsftSecIntel]

New blog: Guide for security administrators using Microsoft 365 Defender and Azure Defender to identify and implement security configuration and posture improvements that harden enterprise environments against Solorigate’s attack patterns https://t.co/WRiVtfPFYx

[Olaf Hartong @olafhartong]

Sysmon 13 has just been released. I’ve just published a detailed look at the new ProcessTampering feature in a blog.

https://t.co/QtWyBqm2rq

#DFIR #Infosec #Sysmon

[David das Neves @david_das_neves]

Check it out if you don´t know it, yet.
[Repo] Prowler (AWS Security Tool) - is a command line tool for AWS Security Best Practices Assessment, Auditing, Hardening and Forensics Readiness Tool.
https://t.co/DtxScVbei9

#CloudSecurity #AWS

[SANS Cloud Security @SANSCloudSec]

Start the new year off right with our NEW #Cloud cheat sheet - "Fix Security Issues Left of Prod"

Download now: https://t.co/77eCaXGd4l

[SC Media @SCMagazine]

A look at what the community is facing today https://t.co/aF0hkzjixG

[Matt @drmattjmorris]

Nice! #securityweekly #appsec

[Paul Asadoorian @[email protected] @securityweekly]

And we’re back with this week’s #AppSecNews!

Join us for the live stream: https://t.co/wJGYCeTaCt

Come hang out in Discord: https://t.co/Q2jCBubNcE

#InformationSecurity #InfoSec #ApplicationSecurity #AppSec #DevOps #WebAppSec #SecurityWeekly #Podcast #LiveStream

[Matt @drmattjmorris]

Some additional resources for searching for potential exposure: GitDorker - Fast GitHub Dorks for Easy Bug Bounty Wins | Medium #owasp #appsec https://t.co/zobUPyEfhI

[Matt @drmattjmorris]

Be sure to secure your enterprise GH implementations: #owasp #appsec

[Omar (mainnet arc) @acceleratooooor]

The Ultimate GitHub Dorks List v2 is out now!

180+ new dorks added! A total of now 400+ dorks for sensitive information exposure to find easy wins :)

Text File:
https://t.co/EkpgxT8foN

#BugBounty #bugbountytip #bugbountytips #100DaysOfCode #BlueTeam #CyberSecurity #github

[Matt @drmattjmorris]

OAuth security analysis #owasp #appsec

[Binni Shah @binitamshah]

Exploiting OAuth 2.0 — Authorization Code Grants (Everything required to test a novel OAuth 2.0 implementation ) : https://t.co/L5nh4H1cGS credits @xploitprotocol

Ref* : A Comprehensive Formal Security Analysis of OAuth 2.0∗ : https://t.co/mYwLs3pUUm (pdf)

[Matt @drmattjmorris]

@TripwireInc report on emerging public cloud security challenges. Securing API’s, locking down user access, and Insider Threat are among top concerns: https://t.co/Qe45JgVgEe #cloudsecurity #DevSecOps

[Anthony Randazzo @amrandazz]

Mapped all of the Amazon GuardDuty Findings to @MITREattack. A bit more of an art than a science. Hopefully useful to some detection and response teams out there. See 🧵for more detail 👇

[Matt @drmattjmorris]

Currently there is an AWS outage that is impacting Kinesis among other services. Here is a link to the outage page to track: https://t.co/i3Q863ZpLw Article: https://t.co/Y9sS3tri6p
#cloudsecurity #awsoutage #bcpdrp