Daniel Karistai

hacker, recovering sysadmin turned security manager. Constantly wondering where my next coffee is going to come from. Bsky:

[Daniel Karistai @hackswithcoffee]

"The only way to deal with an unfree world is to become so absolutely free that your very existence is an act of rebellion."

- Albert Camus

[Daniel Karistai @hackswithcoffee]

@cantcomputer This is what Instagram stories are for.

[Daniel Karistai @hackswithcoffee]

@benhackshealth I’m more interested in maintaining the team’s morale.

[Daniel Karistai @hackswithcoffee]

@rekdt Joke's on them. I no longer have any dreams.

[Patriotic Millionaires @PatrioticMills]

We wouldn’t be where we are without teachers. But too many are struggling to afford the basics.

There’s a bill in Congress that would put more money in teachers’ pockets — paid for by millionaires like us. We’re all in.

https://t.co/Lk3eTRHeUk

[Dave Kennedy @HackingDave]

I’ve been working the past year relentlessly on something that has turned into something incredible. NightBeacon is our AI solution @Binary_Defense that has drastically transformed our SOC.

Isn’t marketing fluff - laser focused on agentic workflow, reducing analyst time to determine good or bad and all about MTTD and MTTR.

I built it and my team is contributing everyday. The beauty is it works, and we are making it better everyday.

If alarms don’t have enough data for confidence, automatically reaches out to retrieve additional data for determination. Our own models trained on security event analysis and reinforcement learning and enriched everyday by our analysts.

Has a built in MCP for using your own harness for quick investigations and incident response. Integrates into CAPE, Hayabusa, Suricata, Zeek, Sigma, Yara, Velociraptor, and many more. Auto submits to various threat intelligence feeds. Automatically disassembles binaries, attachments, and pretty much any format type.

Understands tonality of email if it’s phishing, integrates into phone systems for vishing, and a ton there.

Automatically spins up virtualization for sandbox detonation and shellcode analysis. Full threat hunting capabilities and a ton more.

Super simple to integrate into existing tech stack, had a customer up and running in their CrowdStrike environment in 7 minutes flat.

It’s legit. While we are an MDR company, we are also offering it for non-MDR customers - as a product.

If interested hit me up, will do a personal demo and show you the amazing innovation we have going on at #BinaryDefense

[Daniel Karistai @hackswithcoffee]

Seeing a lot of these types of articles lately - AI proves to be much more expensive than human labor and corporations are acting so shocked about it.

Does everything in Late Capitalism have to be FAFO?

https://t.co/aQes6quS9U

[Daniel Karistai @hackswithcoffee]

@HackingDave So far, the "sharper judgement" and "more honesty about its own progress" has just amounted to it talking to me more than it already did - and that was too much to begin with.

[Daniel Karistai @hackswithcoffee]

Wild how relevant this part in NIST's decision to selectively enrich CVEs is today.

[Daniel Karistai @hackswithcoffee]

Especially this bit. When the CNA can't necessarily be trusted to rate their CVEs objectively or fairly (looking at Microsoft here), a separate score from an independent body is often useful.

[Andrew Case @attrc]

MSRC woke up and decided to kill off all the good will it has built up over the last decade:

https://t.co/EqmlcWqYfU

[rootsecdev @rootsecdev]

Last time I dealt with MSRC.

Responsibly disclosed an issue with legacy auth that allowed me to spray passwords at <redacted endpoint> and avoid smart lockout.

Receives email.. 5 months after initial case opening.

“Doesn’t meet the bar for servicing”

Microsoft silently fixed. Closed case.

https://t.co/9iFpMJMSXC

[Hyper Reel Vibe @HyperReelVibe]

@Vivek4real_ Spending two years and trillions of dollars building an artificial super-brain just to realize it's still cheaper to pay a 23-year-old junior dev in cold brew and pizza is the funniest possible outcome of the AI bubble. 🍕

[CG @cgtwts]

scenes at GitHub HQ right now:

[Daniel Karistai @hackswithcoffee]

The readme explains the workflow &amp; it all runs on my mac mini. With some changes, you can hand the transcription + extraction off to whatever LLM you want. I upload the .md files to NotebookLM for the group to reference.

It's worked well so far, hope others find it useful too!

[Daniel Karistai @hackswithcoffee]

I've had a few conversations recently about this D&amp;D "scribe" I've vibe coded for my campaigns. So I thought I'd clean it up and post it to my github for anyone else who might want to automate the note taking side their sessions.

https://t.co/pat2jUTpgu

[Daniel Karistai @hackswithcoffee]

👀👀

[The Cyber Security Hub™ @TheCyberSecHub]

CISA Admin Leaked AWS GovCloud Keys on Github https://t.co/fYcg6D32jM

[Malwarebytes @Malwarebytes]

Oh.

[Daniel Karistai @hackswithcoffee]

@HackingDave I removed it from my Home Screen, because no.

[Daniel Karistai @hackswithcoffee]

Truly one of the most meaningful communities I have ever been a part of.

[Ben Canning @benhackshealth]

It’s not an easy thing to describe. It’s more a be a part of it and find out kinda thing…

#wehackhealth

[Fox Pick™ 🦊 @Fox_Pick]

On the road again, heading up to @bsidesnash! We are grateful to have been apart of this conference for 10 + years and look forward to many more! See you all soon with 4 different colored badges!!! #3DPrint #BadgeLife #LockPickVillage #FoxPick