Eric Olmstead

[Eric Olmstead @ewolmstead]

LevelBlue DFIR testing confirmed that file content can be successfully retrieved from Microsoft 365 while the audit log records “FileAccessed,” with no corresponding “FileDownloaded” event. https://t.co/0o9MCwrdTb

[Eric Olmstead @ewolmstead]

A lot of MDR surprises come down to assumptions, not technology. This article is a solid reminder to spell out scope, ownership, and response actions up front. https://t.co/5CJDTtlXT7

[Eric Olmstead @ewolmstead]

When was the last time you checked whether your Zscaler setup still matches today’s environment? This article offers a useful five-part health check for the gaps that quietly build over time. https://t.co/cInQ0VLKJT

[Eric Olmstead @ewolmstead]

Nearly 2 in 10 U.S. water and wastewater organizations studied showed active infostealer exposure. One compromised vendor device can put multiple customers at risk. We’ve been discussing this at LevelBlue. Worth a read: https://t.co/yj9PTjmFIY https://t.co/QYJUQQ8mnQ

[Eric Olmstead @ewolmstead]

Are we planning for the people side of incident response, or just the systems? https://t.co/A6eh4VHQC7

[Eric Olmstead @ewolmstead]

SpiderLabs has been seeing the same Defender-bypass pattern survive more than one patch cycle.

The current ShieldCrash release looks incomplete, but the filesystem and object-manager artifacts are still useful for detection work. https://t.co/ZsqL8wLlQI

[Eric Olmstead @ewolmstead]

AI is putting cyberattacks on fast-forward. Deepfakes, lookalike domains and impersonation campaigns can now scale faster than ever. Digital Risk Protection helps connect the signals and break the chain.

#Cybersecurity #AI #LevelBlue https://t.co/5FQaKJlM8I

[Eric Olmstead @ewolmstead]

Our SpiderLabs team at LevelBlue continues to see the same Microsoft Defender bypass pattern persist through multiple patch cycles. https://t.co/ZsqL8wLlQI

[Eric Olmstead @ewolmstead]

https://t.co/NahsKuC9eR How do you explain AI-enabled risk to leaders without losing the room? This upcoming webinar focuses on business impact, governance, and tabletop prep to strengthen cross-functional coordination and improve crisis readiness:

[Eric Olmstead @ewolmstead]

I just got tickets to The Way Coffee Company's event, Pouring Possibility https://t.co/JyTvrzNUQl

[Eric Olmstead @ewolmstead]

@MathematicaKen @agerlund Not too surprising, If you go back before Msft combined all events. MMS in Vegas was 5k - 8k depending on the year.

[Eric Olmstead @ewolmstead]

@FieldYates The only thing I took from this video was I had no idea AB was left-handed.

[Eric Olmstead @ewolmstead]

@H3KTlC https://t.co/qwmjrAZkkQ

[Johan Arwidmark @jarwidmark]

This btw, is one of the reasons I absolutely love the Intune and ConfigMgr community. After spending a good chunk of hours researching, I was minutes from basically throwing in the towel, and start creating a scripted solution instead. Thanks again Thomas. #HappyFriday

[Eric Olmstead @ewolmstead]

@KateWWMT I thought it was the medalist in Marshall at first. Can't beat that view.

[Eric Olmstead @ewolmstead]

@espn

[Eric Olmstead @ewolmstead]

View my verified achievement from Microsoft on Acclaim. https://t.co/wzF1TcmA9F

[Eric Olmstead @ewolmstead]

90% of our IT infrastructure is now in the #cloud & only #Azure management tools can help us monitor, update, backup & secure it all: #MSFTAdvocate https://t.co/SaC9f8OYlV

[Eric Olmstead @ewolmstead]

Microsoft tops Thomson Reuters top 100 global tech leaders list https://t.co/QZDlXfsd7m

[Eric Olmstead @ewolmstead]

Create a #NotHotDog Azure Function w/ our #CognitiveServices & live out your very own episode of #SiliconValley! Try it out: https://t.co/bKllIq2FD7