frank

I spend a lot of time looking at screens saying “oh for f@$!’s sake” under my breath. #blueteam with a hint of dfir and a pinch of security engineering

[frank @jtsec0]

I use twitter to vent. Nothing here in this profile should be taken seriously.

[frank @jtsec0]

It’s like the product manager of MS Teams wanted to say fuck you to each user in a personal way. It’s very unique to see everyone complaining about a different UX issue but no 2 complaints are the same.

[frank @jtsec0]

opendns just got mangled it’s always dns #infosec #blueteam #dns

[frank @jtsec0]

a new form of recruiter emerged. added me on linkedin, figured out the company email, then sent a job opportunity to the COMPANY EMAIL with shit ton of typos, then had the audacity to follow up… to company email!!! #infosec

[inversecos @inversecos]

1\ #DFIR: Chrome Forensics - How to Recover CLEARED History

If a user just cleared their browser history, you can still recover everything they were just looking at from the session files:

%appdata%\Local\Google\Chrome\User Data\Default\Sessions

https://t.co/FaDbeJwhQC

[frank @jtsec0]

what could possibly go wrong if you are pushing to migrate to cloud with fte cloud engineers/architects/admins?

[frank @jtsec0]

starting, once again, to exercise, definitely will continue more than 2 weeks this time #blueteamfit

[frank @jtsec0]

@lpha3ch0 @_rybaz tried to “harden” DCs once with no dedicated admin and my fuck-all AD knowledge. You can imagine how that worked out lol so it’s much easier to exploit rather than fix

[frank @jtsec0]

@lpha3ch0 @_rybaz Yup, especially smaller-ish companies. Never seen a person responsible for one system. I have seen security peeps sysadmining on top of their ops, or sysadmins being responsible for 9-10 different systems with maintenance every damn weekend. but never the other way around

[frank @jtsec0]

@_rybaz do you… do you have a dedicated admin for AD? like, full time? please tell me that’s not a common thing or I might need to go find a dark corner to start sobbing for next 4 hrs

[frank @jtsec0]

vettel was driving like he stole it on those last few corners! actually, did anybody check where is that car now? what a fucking legend #vettel #Formula1

[frank @jtsec0]

hamilton and mercedes team watching verstappen now

[frank @jtsec0]

oh sweet lord of tire nuts what have vettel done to offend you? I have aged 3 years in during that pit stop #Formula1

[frank @jtsec0]

@intenseCA good to know! thank you!

[frank @jtsec0]

does anybody happen to know companies who can help delete personal data/addresses etc from internet? #infosec #blueteam #privacy

[frank @jtsec0]

@DeweyRitten or, last resort, call the user… but that would be really painful

[frank @jtsec0]

@DeweyRitten or, do i have tools tracking messages? if not, maybe exchange admin has a powershell query to see who got the email if we are using exchange

[frank @jtsec0]

might have been better if i was actually able to spell #blueteam ffs

[frank @jtsec0]

we are trying to save someone from possibly getting to harm and prevent any misconducts so any help is much appreciated #cybersecurity #infosec #informationsecurity #bluetem

[frank @jtsec0]

it’s so fucked up that a person trying to their best for the underserved/unappreciated communities have to go thru such bad experiences

[frank @jtsec0]

@pseudo_security amazing! I’ll check them out. Thank you very much!!