DFIR_Murph

DFIR | Threat Hunter | Purple Team | Blue Team | Lifelong Cyber Guy

[DFIR_Murph @MalwareMurph]

Merry Christmas!

[Pittsburgh Riverhounds SC @RiverhoundsSC]

YOUR HOUNDS HAVE WON THE @USLChampionship TITLE!

We're bringing the trophy back to Pittsburgh! 🏆

#TULvPIT #Grittsburgh #USLPlayoffs

[Pittsburgh Steelers @steelers]

Who wants this signed @AaronRodgers12 jersey⁉️

RP for your chance to win!

[MorphineDreams @MorphineDreamsx]

$SPY 551 Calls 25/4 $0.35 Entry. Stop under $549.50

[DFIR_Murph @MalwareMurph]

Happy Thanksgiving! There is a lot to be thankful for.

[DFIR_Murph @MalwareMurph]

@Brandonshipp1 DM me and I’ll provide it

[DFIR_Murph @MalwareMurph]

@Brandonshipp1 Absolutely!

[DFIR_Murph @MalwareMurph]

@WeatherNation You are welcome to use it. We took this on 376 west right before the Moon exit in Pittsburgh.

[DFIR_Murph @MalwareMurph]

Hilarious

[MalwareHunterTeam @malwrhunterteam]

BlackCat ransomware gang says that they just reported one of their victim companies, MeridianLink, to the SEC (@SECGov).
😂

[Nathan McNulty @NathanMcNulty]

Looks like a good time for a thread on token theft :)

Not all MFA is of the same quality, and anything using OTP (SMS, hardware/software tokens) or Push (MS Authenticator, Duo, etc.) is susceptible to AITM attacks

That doesn't mean it's useless, but it's becoming less useful

[DFIR_Murph @MalwareMurph]

@chereese Nice work!

[DFIR_Murph @MalwareMurph]

Do you remember when you joined X? I do! #MyXAnniversary

[jarrod coulter @jarrodcoulter]

The amount of times I've gotten DA from throwing an exploit: 10

Amount of times from finding creds on a file share: 436

[Schneider Downs @Schneider_Downs]

If you're graduating no later than 2025 and are in search of a Cybersecurity Internship, click the link below! We are looking for 2024 Cybersecurity Summer Interns in our Columbus, Ohio office.
https://t.co/rd3b3wQsD2

[DFIR_Murph @MalwareMurph]

This is a #CVE we need to worry about!

[CVE @CVEnew]

CVE-2023-24059 Grand Theft Auto V for PC allows attackers to achieve partial remote code execution or modify files on a PC, as exploited in the wild in January 2023. https://t.co/xNNqxxuUSJ

[Bryce @bryceabdo]

this how ransomware works

[DFIR_Murph @MalwareMurph]

This is amazing!

[NASA @NASA]

It's here–the deepest, sharpest infrared view of the universe to date: Webb's First Deep Field.

Previewed by @POTUS on July 11, it shows galaxies once invisible to us. The full set of @NASAWebb's first full-color images & data will be revealed July 12: https://t.co/63zxpNDi4I

[DFIR_Murph @MalwareMurph]

Really good stuff!

[Charlie Bromberg « Shutdown » @_nwodtuhs]

Active Directory "WriteOwner" DACL abuse, now in Python 🐍

https://t.co/waU2eWdfPW

And icymi, "WriteDACL" abuse, also in Python now 🐍

https://t.co/nQGZy1dnbR

One DACL abuse is left implementing, "Logon script"

[Schneider Downs @Schneider_Downs]

The warnings that Russian hackers could go after US businesses have gained new urgency. SD's David Murphy provides his insight to @CNN on the role of #cyberinsurance as businesses begin to evaluate their cyber defenses to prepare for potential attacks. https://t.co/2DiHBhQB3C