Markus Einarsson 🇸🇪

Blue teamer, defensive security, digital forensics, incident response, personal productivity, GTD, paperless, metalhead.

[Markus Einarsson 🇸🇪 @einarssonm]

Achievement unlocked: Presenting at BSides Amsterdam! ✅💥
On Nov 20th I presented my talk ”From Hours to Minutes: Automating Incident Response Triage with Open-Source Tools”. Thanks to the @BSidesAMS organizers and attendees for a great event with valuable knowledge sharing!

[Markus Einarsson 🇸🇪 @einarssonm]

Achievement unlocked: Presenting at BSides Munich! ✅✨
On Nov 17th I presented my talk ”From Hours to Minutes: Automating Incident Response Triage with Open-Source Tools”. Thanks to the @BSidesMunich organizers, volunteers and attendees for an amazing conference!

[Markus Einarsson 🇸🇪 @einarssonm]

Achievement unlocked: Presenting at BSides Tallinn! ✅🎉
This week I premiered my talk ”From Hours to Minutes: Automating Incident Response Triage with Open-Source Tools”. Huge thanks to the @bsidesTLL organizers + attendees for the questions, discussions & great vibes!

[BSides Tallinn @bsidesTLL]

Velociraptors in a talk? No, we're not going back 70 million years. But to dig deeper and go "From Hours to Minutes: Automating Incident Response Triage with Open-Source Tools" you should attend a talk by Markus Einarsson, a Security Architect and Incident Response Lead at Sectra

[Markus Einarsson 🇸🇪 @einarssonm]

@shortxstack @microcenter @BambulabGlobal Huh? I thought you’d nev… Nevermind. 🙃

[Markus Einarsson 🇸🇪 @einarssonm]

Attending the three-day conference FIRST TC Oslo 2024 - Cold Incident Response, with ~300 participants. Yesterday we had a good workshop about ”Hands-on Investigation of Email-based Malspam”. We now have two days with incident response related talks. @FIRSTdotOrg #FirstTCoslo24

[Markus Einarsson 🇸🇪 @einarssonm]

Back in Norway for two security conferences. Today was my first time attending BSides Oslo, a well-organized event with great talks. The breaks were spent learning new tricks in the lockpick village. @OsloBSides

[Markus Einarsson 🇸🇪 @einarssonm]

@_bromiley @BlackHatEvents @shortxstack @eric_capuano What a dream team! Have a fantastic week in Vegas! 💙

[Markus Einarsson 🇸🇪 @einarssonm]

@eric_capuano …or as a defender in a certain CTF, a very exciting day. 🔥

[Markus Einarsson 🇸🇪 @einarssonm]

@bettersafetynet @anton_chuvakin Something like this from @SBousseaden ?

https://t.co/x1s5SCu1Pp

[Markus Einarsson 🇸🇪 @einarssonm]

@eric_capuano Bleeding edge scenario, nice! Sounds like something recently described on the Crowd$trike blog. 🙃

[Markus Einarsson 🇸🇪 @einarssonm]

@BSidesMunich Which are the official dates? The website says Nov 10 for workshops and Nov 11 for the conference.

[Markus Einarsson 🇸🇪 @einarssonm]

@eric_capuano @shortxstack Oh yes! 🔥👍👀

[Markus Einarsson 🇸🇪 @einarssonm]

@SecurityYamato The --low-memory-mode is ⭐️ when parsing WEF logs, which are often huge. No more out of memory errors in Hayabusa!

[Markus Einarsson 🇸🇪 @einarssonm]

I’m back at the security conference @brucon in Belgium after 5-6 years. Great talks and workshops, as always. Right now watching the keynote by @mikko - Robot vs. Robot, featuring his 32 year old infected floppy disk.

[Markus Einarsson 🇸🇪 @einarssonm]

@KevinPagano3 @bunsofwrath12 Congrats, both of you! Keep up the amazing work for the DFIR community!

[Markus Einarsson 🇸🇪 @einarssonm]

Attending SANS DFIR Summit & Training in Austin, TX for the first time. Summit ongoing with lots of good talks, and nice chats with old & new friends. @sansforensics

[Markus Einarsson 🇸🇪 @einarssonm]

On June 15-16 I participated in SANS DFIR NetWars for the 1st time in 1,5 years, w/ updated forensic challenges+evidence. After 6+ hours I finished 2nd 🥈, after a fun battle against @r3nzsec . Tools: SIFT, KAPE, EZTools, Volatility, Wireshark, NetworkMiner, nfdump, Bash, AXIOM.

[Markus Einarsson 🇸🇪 @einarssonm]

@4enzikat0r @SANSInstitute @sansforensics @HeatherMahalik @chadtilbury @DFS_JasonJ @phillmoore Congrats, Kat! 🎉

[Markus Einarsson 🇸🇪 @einarssonm]

I’m back at @x33fcon in Gdynia, Poland after four long years. It’s a great conference for both defensive and offensive security, with interesting talks and workshops. Many familiar faces from the international security community, to share experiences with during the breaks.