JoshuaOnSecurity

Bsc Hons Cyber Security.
United Kingdom, Bristol.
SOC Manager @boeing.

[JoshuaOnSecurity @JoshOnSecurity]

@dnlklr Might be worth checking mine out, I'm attempting to build my own that uses data, rather than just display it and overwhelms the user. https://t.co/Ikf0nUAiN8

[JoshuaOnSecurity @JoshOnSecurity]

@TonySeruga Check out https://t.co/Ikf0nUAiN8 too - its more simplistic designed to give you information you actually want to see rather than filling your screen with useless information!

[JoshuaOnSecurity @JoshOnSecurity]

@casusbellii Given it ago myself with only relievent data, trusted sources and dedicated pages to break down events, rather than being flooded with info. Still keeping the situational awareness theme, feedback would be appreciated
https://t.co/Ikf0nUAiN8

[JoshuaOnSecurity @JoshOnSecurity]

@GuarEmperor Take a look at https://t.co/TuNlnQar6g

[JoshuaOnSecurity @JoshOnSecurity]

New AI driven intelligence briefings on https://t.co/SxlukmTVaa
Plenty of new features for monitoring the situation! Check it out!

[JoshuaOnSecurity @JoshOnSecurity]

@houshuang @benfromdallas @heynavtoor Haha! For sure some issues with my model - working on fixes to improve categorisation

[JoshuaOnSecurity @JoshOnSecurity]

@EastLessWaterD @benfromdallas @heynavtoor For sure!

[JoshuaOnSecurity @JoshOnSecurity]

@Onepamopa @benfromdallas @heynavtoor Yeah a known issue! Data aggregation problem. Working on it :)

[JoshuaOnSecurity @JoshOnSecurity]

@UK_Daniel_Card Good stuff - will you host externally?

[JoshuaOnSecurity @JoshOnSecurity]

@secmxx Good point - do you know of any data sources I could utilise?

[JoshuaOnSecurity @JoshOnSecurity]

Monitoring the situation? Check out https://t.co/TuNlnQar6g
A news, social media and OSINT aggregation platform.

New features include;
- Flight tracking filtering, media mentions and alerts
- Vessel tracking and filtering
- Live news sources and webcams
- NOTAMs
- Global Chat

[JoshuaOnSecurity @JoshOnSecurity]

@UK_Daniel_Card Hey Dan, check out https://t.co/TuNlnQar6g, might give you some pointers of features to add!

[spencer @techspence]

FYI sites like this can be spun up instantly with tools like google ai studio. The phishing infrastructure game had radically changed...

[JoshuaOnSecurity @JoshOnSecurity]

A new way to monitor any situation! More features coming soon! https://t.co/SxlukmTVaa

[spencer @techspence]

Let’s make Active Directory security education available to all!

List your favorite Active Directory security resources.

Plz share for reach!

[Steven Lim @0x534c]

🧵 Red teams are shifting to stealthier AD enumeration via Active Directory Web Services (ADWS) over port 9389. Tools like SOAPHound, SoaPy & ShadowHound wrap LDAP queries in SOAP, bypassing traditional detections.

https://t.co/Rv3sMVmfXg

A KQL to detect this type of AD enumeration:

https://t.co/Vx9S5eD4v6

#Cybersecurity #ADEnumeration #ADWS

[Sean Metcalf @PyroTek3]

Do you know what's running on your Domain Controllers?

During about 15% of assessments, we find a scheduled task that runs a script that's located on a share.

We also find software that shouldn't be on a DC like VNC, Opera, Google Chrome, etc.

Review your DCs to ensure they aren't running things they shouldn't.

#ActiveDirectorySecurityTip

[Dwyer @_Dwyer_]

Dudes... please enable Detailed File Share auditing in your environment. All these attackers who switched over to the Impacket suite still run the default configs and it takes like 2 seconds to find them.

[Costin Raiu @craiu]

Have you been getting phone calls from long and seemingly random numbers like the ones below? Amnesty believes they could be signs of a zero-click attack targeting Android devices through Voice-over-Wifi or Voice-Over-LTE (VoLTE).