Ed Marrow

Old school sec-nerd, or maybe just old.

[Ed Marrow @EntsecEd]

@HeatherMahalik Love Middleswarth. They are a staple here in the compound.

[Ed Marrow @EntsecEd]

@jhencinski @0xdabbad00 I find myself in this situation now. Upskilling a SOC on multiple CSP.

[Ed Marrow @EntsecEd]

This is awesome.

[Heike Ritter @HeikeRitter]

Yay! 🥳 "Live response" got backported and is now in public preview for earlier versions of Windows - check it out and don't forget to give feedback! 🙏
https://t.co/KMXqkGnrjS #MDATP #infosec #cybersecurity

[Mark Simos @MarkSimos]

Security should ensure there is just enough friction in the process to force genuine critical thinking at the right time (e.g. thoughtfully answering how could an attacker abuse this application) while avoiding unnecessarily slowdowns in capturing new business and customer value

[Ed Marrow @EntsecEd]

I’m more productive. However everyone thinks less commute time is perfect to schedule more meetings.

[Jeff Hicks @JeffHicks]

If you are WFH, are you finding yourself to be more productive or less? #pstweetchat

[Mark Simos @MarkSimos]

Check out the new security docs site Microsoft just published to make it easier for #cybersecurity professionals to do their job. Central place for resources + bonus 55 new videos on Security Best Practices! (security architecture recommendations section) https://t.co/gdMgbWPQEg

[Ed Marrow @EntsecEd]

Makes you think.

[Briain Ó hEoghanáin (Brian Honan) #BLM He/Him @BrianHonan]

Hmm, makes one wonder what else could Apple do to your Mac with a silent update

[Ed Marrow @EntsecEd]

Puzzling out someone’s ugly script it it’s own kind of hell.

[Jeff Hicks @JeffHicks]

"Monthly #PowerShell reminder: full cmdlet & parameter names in your scripts. No aliases. Think of the next person - could be you."

[Heike Ritter @HeikeRitter]

Whooo-whoooo 🤗 🥳 check out why it's time to switch from your traditional vulnerability management solution to Microsoft's Threat & Vulnerability Management 💪🏼
https://t.co/kHecUx79QZ #mdatp #wdatp #tvm

[InfoSecSherpa 🏔️ @InfoSecSherpa]

Important personal announcement 📢

Due to a company layoff, I am now seeking new employment.

- GSEC certified
- 2 yrs SOC exp
- OSINT / research / TI exp
- Master of Library & Information Science
- Philadelphia or remote

Please RT for reach. Thanks.

https://t.co/aXhr7WBxjw

[Ed Marrow @EntsecEd]

@williamslauram School nights, in bed at 9. Lights out at 10. Weekends/summer, bed at 10 lights out 11

[Ed Marrow @EntsecEd]

This is big for IR. Possibly huge. Isolate a machine and still run script.

[Heike Ritter @HeikeRitter]

Another new Microsoft Defender ATP feature is now in public preview! Live response - pure awesomeness for SecOps 🤤 check it out!
https://t.co/T0hpw0zTmU #cybersecurity #mdatp #microsoft #wdatp #infosec

[Ed Marrow @EntsecEd]

I'm pretty excited about this.

[Tanmay Ganacharya @tanmayg]

Microsoft Defender ATP for Mac now in open public preview. Starting today, Microsoft Defender ATP customers who have turned on preview features can access Microsoft Defender ATP for Mac via the onboarding section in Microsoft Defender Security Center. https://t.co/aQBNYflPOF

[Microsoft SIEM and XDR @MSThreatProtect]

#BearLPE, #SandboxEscape, #AngryPolarBearBug2, #InstallerBypass, #CVE-2019-0863 - If any of these are cause for concern, check your exposure now with the new #MDATP Threat Analytics report for recently disclosed elevation-of-privilege vulnerabilities https://t.co/pLVzEbX72a

[Microsoft SIEM and XDR @MSThreatProtect]

Concerned about attackers leveraging firmware and digging deeper in the stack to hide? We are waiting for them with the new hardware-rooted sensors. Read more about Winodws Defender System Guard runtime attestation service.

[Ed Marrow @EntsecEd]

I’m a fan.

[Tanmay Ganacharya @tanmayg]

📢 @CNET now recommends Microsoft Defender as the best free antivirus protection 🎉🎊

https://t.co/PCma6pqbJm …

#cybersecurity #security #infosec

[Microsoft SIEM and XDR @MSThreatProtect]

Microsoft Threat Experts is generally available! - now in the ever poular blog format. Also available, upon request, in a range of colors and tastes https://t.co/eqEydNlj7B #MDATP #MTE

[Ed Marrow @EntsecEd]

Checking into the hotel, front desk guy says “free WiFi, no password. Just pick guest. “ #NotTodaySatan

[Microsoft Threat Intelligence @MsftSecIntel]

Microsoft Defender ATP APIs are now generally available! This rich set of APIs enable customers to automate workflows and innovate defenses based on Microsoft Defender ATP’s capabilities. https://t.co/XCfZyJREo3

[Ed Marrow @EntsecEd]

@itdojo @LinkedIn I loved itdojo questions when studying for #CISSP.