Dave Bell

Partner at Blackthorne Consulting; Former Red Team Director at GE and US Navy; Advisory Board member; Navy veteran Opinions are my own @[email protected]

[Dave Bell @operant]

Red Team isn’t all shells and champagne. It’s long hours of analysis looking for that *one* flaw that gives you the access you need to move toward your objective. You’ll even obsess in your sleep, and the answer will hit you in the shower. Then, repeat!

[Dave Bell @operant]

@brysonbort @ICS_Village I will! looking forward to it

[Dave Bell @operant]

Hard to believe it's that time of year again! If you will be in town during #blackhat or #defcon and would like to (re)connect, feel free to DM me. Hope to see you there!

[Volexity @Volexity]

.@Volexity shares #threatintel on how #StormBamboo compromised an ISP to conduct DNS poisoning attacks on targeted organizations & abuse insecure HTTP software updates, delivering custom malware on both macOS + Windows.

Read the full analysis: https://t.co/iqAH1PgVVz

#dfir

[Dave Bell @operant]

I was reminded of this today for no particular reason ;)

James Mickens’ “Mossad/not-Mossad Duality” in threat models

[Dave Bell @operant]

If you're planning to be in Las Vegas next week and want to reconnect, let me know! Hope to see you there.

[Dave Bell @operant]

@ImposeCost I’ve heard this referred to as “malicious compliance”

[Dave Bell @operant]

@4n6ir Back on the day I actually had a campaign get caught using that technique lol

[visi stark @invisig0th]

Our friends over at @redcanary are hiring! Their Intel Analyst role is a full-time #synapse enterprise user!
https://t.co/ArrYJ9fvaW

[Anthony. @AnthonySecurity]

Praetorian is hiring for another 3 red teamers at the lead+ level of experience.

Have to be lead or above for this hiring round, no junior or senior for the red team until next quarter, but there are other open positions on our website. We filled 29 reqs in Q1 and are scaling quickly but sensibly.

Our clients have mature environments, you won’t have an easy life; but if you like to be challenged, this is a good place for you.

**I am slow in DMs, best apply via our website but drop me a note

[Dave Bell @operant]

@gdead Had that happen while boarding a plane. I’m surprised they let me stay on the flight lol

[Dave Bell @operant]

@jfslowik Still Counting by Volbeat ;)

[Dave Bell @operant]

Honeypots, right?

[Andrew Morris (afk) @Andrew___Morris]

Very cool job opportunity at @GreyNoiseIO for technical people who love to lie- especially to attackers

https://t.co/VSiCSX6mvA

[Dave Bell @operant]

@andrewshumate

[Dave Bell @operant]

Whose idea was this

[Dave Bell @operant]

@andrewshumate Besides me? lol yeah a few other folks definitely looked like the walking dead

[Mick Douglas 🇺🇦🌻 @bettersafetynet]

Which sounds more realistic?

“If we do a few strategic things we kneecap the attackers”

“We can do all the things everywhere all at once, 365x24 forever.”

It seems like focusing our limited resources where it matters would be better.

3

[Steve Ragan ⚠️ @SteveD3]

My friend Krypt3ia is still searching for a remote CTI role after being caught in the layoff cycle. He's got years of solid experience and technical chops - including LLM training.

If you've got leads, ping me and I can pass them along or share his resume. RT for reach pls.

[Dave Bell @operant]

I always love paying the bill for search and rescue insurance…makes me feel like I’m planning an antarctic expedition or something

[Dave Bell @operant]

@brysonbort

[Dave Bell @operant]

It’s crazy how amazing you feel crossing the finish line…and then completely fall apart 30 seconds later