Mark Garton

[BSides Springfield @bsidesspfd]

Best tweet each session gets a @splunk shirt! Tag @bsidesspfd and #bsidesspfd2018. #swag

[Huntress @HuntressLabs]

GravityRAT continues to add new features including a cute anti-VM feature based on querying the hardware temperature (unsupported on VMs). Monitors for targeted file types on USB drives. Uses Scheduled Task for #persistence. https://t.co/ukf04usKXW #malware

[SANS.edu Internet Storm Center @sans_isc]

Windows Commands Reference - An InfoSec Must Have https://t.co/CrMpR1Fp5A

[Richard Bejtlich 💾 🇺🇦 @taosecurity]

This House IT incident is at least horribly criminal, and probably a national security breach involving espionage by Pakistani agents. How is this not being reported elsewhere?! https://t.co/yWMt0fKIM7

[Richard Bejtlich 💾 🇺🇦 @taosecurity]

"High-performing teams exhibit fewer team interactions because they function as purposive social systems, defined as people who are readily identifiable to each other by role and position and who work interdependently to accomplish one or more collective objectives." So cool! https://t.co/vpDJCr61ra

[Hakin9 @Hakin9]

Browser Exploits: PasteJacking And XSSJacking https://t.co/zsBhTOOTIf #exploits #XSS #pastejacking #vulnerability

[briankrebs @briankrebs]

Equifax or Equiphish? How the company continues to fail on security. Also, the fascinating history of TrustedID: https://t.co/8CXnqQLgdb

[ISACA Springfield @isaca_sgf]

ISACA Capture The Flag event at AITP TechItOut https://t.co/3Wqzlmzsna

[briankrebs @briankrebs]

So Apache Struts vulnerability patched 3/8/17, and Equifax applied the patch 4.5 months later (7/30/17), only after learning it was hacked.

[Christopher Crowley @CCrowMontance]

Credit Freezes

https://t.co/MoC7lw7YlM
https://t.co/JeifaRZmCc
https://t.co/ivvDLHtcIn
https://t.co/1j8TlKOglD

[Eric Capuano - Bsky: @eric.zip @eric_capuano]

#SANSNetworkSecurity
while True:
if (location == "security conference") and (network == "wifi"):
usevpn()
else:
usevpn()

[SANS.edu Internet Storm Center @sans_isc]

Windows Auditing with WINspect https://t.co/mlwoYLOYAI

[Dark Reading @DarkReading]

How Effective Boards Drive Security Mandates https://t.co/wRcrGPx006

[SANS.edu Internet Storm Center @sans_isc]

Selecting domains with random names https://t.co/aNDXEAkeHZ

[ISACA Springfield @isaca_sgf]

2 Day Training event: CSX Cybersecurity Fundamentals https://t.co/sWsoTRFWhB

[SANS.edu Internet Storm Center @sans_isc]

Using nmap to scan MS17-010 https://t.co/9JM1iPr9Ct

[Alex Teixeira @ateixei]

If you do #splunk, no excuses for not tracking obvious beaconing traffic anymore #threathunting https://t.co/bE4CylqcRp

[Christopher Crowley @CCrowMontance]

My #TODO list from the #SOCSummit -

https://t.co/TGSlxhWLzT

I'm looking forward to see other folks' take-away items.

[Christopher Crowley @CCrowMontance]

#Playbook spec for #Investigation from #McAfee at the #SOCSummit @aboutsecurity

[SANS Institute @SANSInstitute]

Check out the amazing #SOCSummit agenda @ccrowmontance @eric_conrad and @sethmisenar have put together! | DC | https://t.co/GbZDk2ObU3