Caroline

Incident Response & Threat Hunting at TrustedSec. Striving cloud nerd. Recovering scene kid. Opinions are my own.

[Caroline @kirbytypes]

Check out my first blog contribution here where we discuss a recent intrusion my team investigated, from an initial access Gootloader infection, 2nd stage payloads, and lateral movement to credential access. Super proud of this! https://t.co/aIcctOQpW3

[Caroline @kirbytypes]

Hey that's me y'all! Open to anyone :)

[TrustedSec @TrustedSec]

Business Email Compromise (BEC) attacks are becoming increasingly common. Register for our next #webinar where we will cover:
📥Microsoft 365 License levels
📈Log sources and accompanying data
🔎Common evidence locations https://t.co/CP8tQE0ze2
@kirbytypes @StevenErwin

[TrustedSec @TrustedSec]

Business Email Compromise (BEC) can threaten an organization's security at any level. During our next webinar, our experts will cover how pinpoint critical logs and artifacts essential for detecting suspicious BEC activities. Register now! https://t.co/PHRebKxLUW

[Caroline @kirbytypes]

Realized I never posted this here - woot woot

[Caroline @kirbytypes]

Surely nothing bad can come from publicly posting a monetary reward email pertaining to one of the biggest IT outages in history, right?

[Sheel Mohnot @pitdesi]

lol Crowdstrike crashed millions of computers with a glitch and then sent an apology to partners in the form of a $10 Uber Eats gift card

[Caroline @kirbytypes]

@ostrich_sec @TrustedSec Thanks man! :D

[Caroline @kirbytypes]

I don't post on here much, but figured since this is my "professional" account, I would share that I'm thrilled to have joined the @TrustedSec DFIR & Threat Hunting team back in May! It's been a great couple months so far, with lots of learning ahead of me. Truly thankful!

[TrustedSec @TrustedSec]

A massive data breach at AT&T exposed the data of "nearly all" of its customers. Incident Response Practice Lead Tyler Hudak spoke with Scripps News about what type of data could have been compromised and steps you can take to protect yourself. Watch now! https://t.co/R44YaB1Ann

[The DFIR Report @TheDFIRReport]

🚀DFIR Labs CTF🚀

Our next CTF will be July 6, 16:00 – 20:00 UTC.

➡️Only $9.99 to join!
➡️Choose Elastic or Splunk as your SIEM
➡️Join our DFIR Labs CTF Discord Server
➡️Top 3 players win free swag!

Register: https://t.co/K7h3FX3KKf

More info: https://t.co/r0aat9qDjQ

[Caroline @kirbytypes]

@TipsyBacchus Full agree with both your statements. Gonna be an interesting few years in this space for sure lol.

[Caroline @kirbytypes]

@ostrich_sec Someone had to hit a publishing quota lol

[Caroline @kirbytypes]

Brute force attacks against VPNs? Groundbreaking.

[BleepingComputer @BleepinComputer]

Cisco warns of large-scale brute-force attacks against VPN services - @billtoulas
https://t.co/uBttO9f8oY

https://t.co/uBttO9f8oY

[Caroline @kirbytypes]

!!!!!

[rootsecdev @rootsecdev]

This is why I do cloud. Its the new wild west of hacking.

[Caroline @kirbytypes]

Was offline for 3 days for personal stuff, wtf is "Xmail", why is LE cosplaying as a TA, why does Optum seemingly touch everything, and what in god's name is going on with U.S. mobile carriers????

[Matt Zorich @reprise_99]

🎉Happy International Enable Sysmon and 4688 Auditing Day🎉grab yourself a slice of cake, chat to a colleague about it, bring it up at your all hands company meeting, talk to your kids about the most exciting day in the cyber calendar - https://t.co/0IZpURUmy7

[Caroline @kirbytypes]

@ostrich_sec @HackingLZ HELP this is precious lol

[Caroline @kirbytypes]

@ngochuynguyen @Kostastsale Ok yeah, but these vulnerabilities (for the most part) aren't being discovered by TAs first - many of these have been internal disclosures on review. Also its pretty crazy to equate all of these together when there are clear top runners for continuously vulnerable code.

[Caroline @kirbytypes]

@TipsyBacchus @defcon Same here, the scene is in desperate need of girl coded stickers and I am taking responsibility.

[Caroline @kirbytypes]

@h313n_0f_t0r Moms who get it, get it. Mine made me a quilt of all my old band tees lol.

[Caroline @kirbytypes]

Enough