James

Research | Product Management | IT Security | Digital Forensics | Malware. Tweets are my own views, RTs not necessarily.

[James @EndpointSec]

Just because AV missed it doesn't make it an APT, unless APT stands for Average Preventable Event. Stop reacting, start preventing

[James @EndpointSec]

Captain Helme at the helm @BSidesLanc

[James @EndpointSec]

@HelenJoScott @trisha_gee @G2kIJ Ah, apologies. Happy 51st!

[James @EndpointSec]

@HelenJoScott @DaliaShea You just go with whatever @DaliaShea says

[James @EndpointSec]

@TodmordenHigh @EmilyTeaches1 go you!

[James @EndpointSec]

@TodmordenHigh What font do you use for these notices?

[Marc Maiffret @marcmaiffret]

I was recently interviewed on @VICENews where we discussed hacking as a career path. @BiaSciLab clearly shows the future is amazing and vibrant, with a strong glow of terminal green. https://t.co/xV4NRnihsq https://t.co/BvvRcBjOXw https://t.co/GfaBTYRK3d

[James @EndpointSec]

@martyn_amos I just ordered a Martin Amis book when I wanted to read about biocomputing

[Emma Gallagher @EmmaRec84]

What a journey so far on the @girlsoutloudorg Big Sister Programme! Me and my ‘little sister’ 📸 Loving watching this girl grow! 💫 Kudos @BeyondTrust for sponsoring such a meaningful initiative 🧡 #mentoring #community #beyondtrustlife

[Samir @SBousseaden]

looking/hunting for MS Office -> suspicious child processes on macOS (sh, osascript etc.) ? this is how MS Office Errors Reporting looks like on macOS :D

[James @EndpointSec]

Fantastic to have @marcmaiffret onboard!

[Marc Maiffret @marcmaiffret]

Excited to be back at @BeyondTrust building on all of the great progress that's been made. Thank you to the infosec teams that invited me in to work along side them the last few years. I will bring that empathy forward with what I do next. https://t.co/abhZU57SeW

[Wim Remes TR @wimremes]

"We don't think we're vulnerable to this local privilege escalation CVE because no unprivileged users access our servers."

F
M
L

[James @EndpointSec]

@digininja Yep, it still baffles me all the different systems that we have in the UK.

[James @EndpointSec]

@HelenJoScott Just to clarify when they say they can’t do anything for you is that because your teeth are fine or beyond saving?

[James @EndpointSec]

Is ending a sentence with "socially distanced of course" the equivalent of returning from doing the shopping and saying "I didn't steal it"

[James @EndpointSec]

@Scott_Helme Is this your version of "avengers assemble!" ?

[James @EndpointSec]

This is why removing admin rights and application control has such a big impact. You remove the easy short paths from the attacker forcing them to take the long way round which they might not be able or willing to do

[James @EndpointSec]

"Attackers prefer short paths and rarely attempt long paths. This means anything you can easily throw in their way to increase the number of actions they have to
take is likely to significantly decrease their chance of absconding with the data" - Verizon DBIR 2020

[James @EndpointSec]

@Scott_Helme @Ubiquiti Are you on a mission to complete YouTube?

[Helen Scott @HelenJoScott]

Today's the day #IntelliJIDEAConf! We will be getting things started in an hour with our keynote! 🥳