Jason ODell

[National CCDC @NationalCCDC]

Our second day of the #nccdc breakfast is kicking off with our Platinum Sponsor @Walmarttech sharing insights into several of the environments that they work diligently to protect.

[Emsisoft @emsisoft]

We've released a decryptor for #Diavol #ransomware, which is believed to be associated with the Russia-based #Trickbot Group. Big thanks to @sysopfb and the threat intel team @walmart. #NoMoreRansom 1/3

https://t.co/WszUzKw53o

[Kirk Sayre @bigmacjpg]

12 recent Office maldocs were uploaded to VT that appear to be part of the #GlowSpark campaign used against #Ukraine (maybe by #Actinium). Word doc drops VBScript file and persists. VBScript file pulls down EXE. Urls, Domains, hashes, + other IOCS are at https://t.co/hL3Ca3hFxM

[Jason ODell @hitechminds]

A behind the scenes look and commentary regarding bot attacks during the holidays.

[Jason ODell @hitechminds]

Check out my latest article: Listening to and Empathizing with Others https://t.co/KMx5rN22Yd via @LinkedIn

[Jason ODell @hitechminds]

Check out my latest article: Vulnerability, a Leaders Call to Courage https://t.co/AnhYlsra5R via @LinkedIn

[Jason ODell @hitechminds]

Check out my latest article: The Vital Importance of Questions https://t.co/PQaHuv34gT via @LinkedIn

[Jason ODell @hitechminds]

More Than Words: Everyday Actions to Foster Inclusion https://t.co/nMpkYadfvJ via @LinkedIn

[Jason ODell @hitechminds]

@bigmacjpg This is amazing work Kirk.

[Kirk Sayre @bigmacjpg]

I've been working on an Excel 97/2007+ XLM macro emulator (https://t.co/kugVqt6q9P). It lists actions performed like ViperMonkey. Work in progress is using a constraint solver to solve for CHAR() decode keys and integrating XLMulator into ViperMonkey.

[Harold @haroldogden]

@bigmacjpg and I have started documenting the gating, anti-emulation and other evasion techniques we come across analyzing maldoc campaigns. If there are other resources on this subject, please let us know! https://t.co/23uQdUcr0T

[Jason ODell @hitechminds]

@eroxors Your tweet cracked me up. Well-played sir.

[Andy LoPresto @yolopey]

Just saw an excellent talk on ML + threat hunting at Walmart by @huntingnomad and Pramod Prakash at @Ai4Conferences. Interesting topic with concrete examples. Bonus for so many open source tools. Felt like @apachenifi would fit perfectly for data ingest and enrichment.

[Sean Kerner @TechJournalist]

How Walmart Uses a Purple Team to Improve Cyber-Resilience
—>my coverage of @hitechminds @RSAConference
#rsac
https://t.co/DaOucij5oo

[Kirk Sayre @bigmacjpg]

Emotet and Gozi have finished their winter vacation and are now back at work. It looks like they have made some tweaks to the DOSFuscation used on commands run by their maldocs but otherwise are still using the same general maldoc builder.

[Dave Kennedy @HackingDave]

A sad day for all of us but one that we all spent a lot of time reflecting.

Please read the full message. Hopefully we all come together someday.

This year will be our last #DerbyCon

Thank you all for the amazing years. It’s been incredible.

[Harold @haroldogden]

We're hiring! Come do security research and help detect badness at enterprise scale with @import_au, @bigmacjpg, and more awesome people on the Walmart Dynamic Defense team. https://t.co/p5LIDcveJn