Helms

Cyber / Threat Intel.
[email protected]

[Chris Sanders 🔎 🧠 @chrissanders88]

I've been working hard for the past few months on a BIG update to my Investigation Theory course. I added a bunch of new material from my recent research, added new exercises, and re-recorded all the course videos. I'm really happy with how it has come together.

[Paul Melson @pmelson]

Really excited to share this!🎯
Target’s Cybersecurity team has open-sourced its digital skimmer detection framework, MerryMaker! Really great work by @AffableKraut @cr_carlson and team!
https://t.co/5eACQzk2jT

[Helms @halfcafcat]

@mattyb1512 @ddd1ms

[A Beacon Of Wisdom In These Ignorant Times @KyleTDavis1]

Gave a internal presentation today, which had 3 parts:
1) Why CTI is needed and Defense-in-Depth is not enough
2) Common pitfalls people fall into where CTI could help, in this case Ocean-11-ing and Chasing Headlines
3) How CTI practices can be useful in your own job.

[U.S. Department of Justice @TheJusticeDept]

Watch Live at 3:15 pm ET: Justice Department Press Conference Regarding Ransomware Attack on Colonial Pipeline
https://t.co/LM1Xsufnzf

[Nick Carr @ItsReallyNick]

If a few of these people get together and jam https://t.co/dKP1VyNBud
...are they Blood, Sweat, & Tears?
Welcome to clustering cyber crime activity. 😩

[Helms @halfcafcat]

@mattyb1512 Jokes on you pal, I get my ransomware news from USA Today

[Helms @halfcafcat]

This is in just over an hour, you still have time to sign up and watch live!

[Women in CyberSecurity (WiCyS) @WiCySorg]

Sign-up for tomorrow's webinar and earn more about @Target's Cyber Fusion Center (CFC) teams’ capabilities and what happens when they activate the war room as they walk through a high severity event. https://t.co/BUQ8kLUuuQ
#humanintel #analytics #cyberthreats

[Helms @halfcafcat]

Our talk is up! Watch @NathanIcart and I walk through our new framework

[SANS DFIR @sansforensics]

NEW VIDEO ON YOUTUBE!
Learn about the birth of the WAVE Matrix, how Target increased its active ransomware coverage by 700%, and how to implement this process in your organization to create massive cross-team security wins.
https://t.co/q6JKtCPL84

[Helms @halfcafcat]

Very proud to have the WAVE framework covered by @CyberSecDive. I'm so glad with how useful my work has been to others and it's been awesome to see how it's resonated with other intel teams. We're hoping to have more info out in the next month to continue to help teams mature!

[Cybersecurity Dive @CyberSecDive]

How @Target got around a pesky issue in cybersecurity https://t.co/eYtlcR2byu

[Ryan K @meansec]

The @sansforensics #CTISummit talks have been published! Login to SANS to find them but if you need a guide to when/what: https://t.co/tjZRbtKdnv I got you

[V Costa Gazcon 🇦🇷 @fierytermite]

😱I'm letting the cat out of the bag!!!😱

This 2020, I've been pouring my heart and soul into my first book: "Practical Threat Intelligence and Data-Driven Threat Hunting"

Thanks @PacktPub, @33root and @wumpwoast for putting up with my stressed self 😅

https://t.co/8OuZOFnpgS

[Helms @halfcafcat]

@whoami_exe @NathanIcart So glad you enjoyed it! We're planning out our steps for further public information on WAVE, but we're hoping to release more soon and I'll be sure to tweet about it!

[Dr. Ch33r10 @Ch33r10]

Great resources for TIPs (threat intelligence platforms) by @asfakian #CTISummit @sansforensics
https://t.co/w5DrVPqCY8

[SANS DFIR @sansforensics]

#CTISummit #GraphicRecordings

Day 1 Wrap up panel
#CTI #DFIR

[Helms @halfcafcat]

Lots of great details for any #ransomware researchers. I enjoyed the October talk, this is a great followup.

[SANS DFIR @sansforensics]

#CTISummit Track 1:
Spooky RYUKy: Chapter 2
@Wanna_VanTa , Aaron Stephens @x04steve provide updates @Mandiant has on the group's operation, and expand on the tradecraft previously presented to highlight important concepts when dealing with interactive ransomware operators.

[Katie Nickels @likethecoins]

Yessssssss. Remember your stakeholders, as we've been talking about all day at the #CTISummit! @selenalarson

[Helms @halfcafcat]

@Ch33r10 @gertjanbruggink @sansforensics I'm really enjoying the slides, they are great!

[SANS DFIR @sansforensics]

#CTISummit #GraphicRecordings:

Talk: Riding the WAVE to Better Collaboration and Security
Kelsey Helms @halfcafcat & Nate Icart @NathanIcart @Target