Johnny Walker

[Johnny Walker @iosonogio]

An awesome list of awesome lists on #cybersecurity

https://t.co/FQ1Pj27Zev

[reverseame @reverseame]

Malware development part 1 - basics https://t.co/PYVVpuhY8I

[John Lambert @JohnLaTwC]

If you work with event logs, here are 2 GREAT utilities:

Parse an EVTX file into JSO: https://t.co/QkIzsJJIx7

Query a JSON stream: https://t.co/IRTOOTIe61

Combined with Sysmon and some built-in logs, there is a lot of power at your fingertips 💪

[TRÄW🤟 @thatstraw]

Here's a fantastic mind map for Active Directory pentesting.

https://t.co/JpqGVXw6ra

[Johnny Walker @iosonogio]

Month of #PowerShell - The Curious Case of AD User Properties, by @joswr1ght
#DFIR

https://t.co/Y99s72lkRm

[Johnny Walker @iosonogio]

Month of #PowerShell: Process Threat Hunting, Part 1, by @joswr1ght
#DFIR

https://t.co/czrr0yFYER

[Johnny Walker @iosonogio]

This video by @vinopaljiri shows how using @hasherezade tiny tracer tool to analyze an APT29 malware sample
https://t.co/8cjxRDaOr9

[Mike Cohen @scudette]

Last week at the DFRWS US Conference I gave a 4 hour workshop titled "Velociraptor – Digging deeper", where I cover examples of forensic analysis and hunting with Velociraptor.

#dfir #veociraptor

https://t.co/cq2qKnEhEi

[Philip Tsukerman @PhilipTsukerman]

Just finished my first conference talk in more than two years at @BsidesTLV, and while the slides and recording will come later.

For now, I'm back to writing technical blogs as well.
Take a look at how we catch Process DoppelDerpaGhost bamboozles!
https://t.co/0bsAsY5gYB

[Cas van Cooten @chvancooten]

Kicked off my "MalDev for Dummies" workshop successfully yesterday, which means the repo is now public! Slides, exercises, example code and resources to get you started on your malware development journey. C# and Nim supported for now. Enjoy!!
https://t.co/Z8aQ41QvHQ

[The DFIR Report @TheDFIRReport]

Here is the companion report to our SANS Ransomware Summit 2022 talk:

Can You Detect This?
https://t.co/7oZKEnCT6S

Great job @_pete_0 & @yatinwad!!🥳

Slides: https://t.co/01J2KOCc6b

Recording: Coming soon

#RansomwareSummit

[Johnny Walker @iosonogio]

YARAify by @abuse_ch is a central hub for scanning and hunting files using #YARA

https://t.co/MZCfPFYVRp

[Johnny Walker @iosonogio]

https://t.co/eS9ditGyiq

[Johnny Walker @iosonogio]

#Sysmon event simulation utility which can be used for testing detections and correlation rules by Blue teams. (by @ScarredMonk)

https://t.co/RNv3NxOn1Z

[☠️ Brandon @__mez0__]

This talk on DLLs is pretty sick: https://t.co/m7hgKg1WJE

[hasherezade @hasherezade]

New release: #mal_unpack (0.9.4): https://t.co/OCcdgd5AiO + the (experimental) companion driver (0.1.1.17): https://t.co/CDbx7iLXiq - check it out & share your opinions!

[Johnny Walker @iosonogio]

The art of Golden Ticket #Kerberos Keys

https://t.co/i8p1EFcppr

[Mr. Rc @rcx86]

Beginner Reverse Engineering Tutorials: https://t.co/bURpRCOhZy

[Lares @Lares_]

New on the Lares blog - The Lowdown on Lateral Movement: https://t.co/l3BMAo0eTr