Professor Frank

cybersecurity something, gun enthusiast and educator. World’s Okayest hacker. my thoughts have been written down, sealed in a mason jar and shaken vigorously

[Professor Frank @prof_frank256]

The Denver OWASP group is happy to announce the annual SnowFROC conference has been resurrected. Our last in-person conference was right before the pandemic and we have been working hard to bring it back. https://t.co/GLx9Co90gD for tickets and more info

[Professor Frank @prof_frank256]

@sec_hub93028 I fully agree with this.

That is why at BSides Las Vegas I have a talk “Four Realities of getting hired into cybersecurity “. I have a slide that addresses what you have above

[Professor Frank @prof_frank256]

@0sm0s1z I met you, I do not believe you are real in any case

[Professor Frank @prof_frank256]

@sec_hub93028 You are there to support the business

[Professor Frank @prof_frank256]

@sec_hub93028 @gabriel1 1) I know what I want and cannot find the person
2) I cannot afford the right person
3) I shift people around because I cannot find the right person

[Professor Frank @prof_frank256]

@sec_hub93028 Disagree with @gabriel1 statement. I am a hiring manager and I know what to ask in an interview. Some questions are about knowledge, others disguised to find out about behavior. I give up and settle because

[Professor Frank @prof_frank256]

In this video, I break down how a phishing email attack works. By clicking a malicious link, malware can establish a reverse shell, giving an attacker remote control of your machine. I also demonstrate persistence techniques that allow the attacker to maintain long-term access.

[Professor Frank @prof_frank256]

DFIR 8 1 Memory Forensics Memory wcry https://t.co/ulKs3rihi7 via @YouTube

As I wrap up this teaching chapter, I’ve been reflecting on what makes a great analyst. It’s never about mastering a tool; it’s about mastering the entire cycle. 🔄

I have just released a new video

[Professor Frank @prof_frank256]

@fidexcode 6

For my home setup

[Professor Frank @prof_frank256]

@vxunderground But are they your real passwords? Or a honey token? 😆

[Professor Frank @prof_frank256]

@sec_hub93028 Yes, but to observe, not participate

[Professor Frank @prof_frank256]

@sec_hub93028 Fully agree. This is a bit more art than science, but use the science to drive the art

[Professor Frank @prof_frank256]

@0sm0s1z

[Professor Frank @prof_frank256]

@sec_hub93028 Effective ID is who I am logged in as now.
Real ID is used when I start a process.
Saved set ID is if some reason I want to drop my elevated process?

[Professor Frank @prof_frank256]

@sec_hub93028 It is not that simple. Where is the server? Is it exposed to the public internet, or behind several layers of security? What type of data? Same with employee? Type of data? Is the employee know they have the access?

[Professor Frank @prof_frank256]

@c_yatteau I had to do a double take on what the shirt said

[Professor Frank @prof_frank256]

@sec_hub93028 @SJFriedl As an auditor, I am pushing a risk and APT based approach using Mitre @sec_hub93028

[Professor Frank @prof_frank256]

@SJFriedl @sec_hub93028 Agreed! I am an auditor @SJFriedl

[Professor Frank @prof_frank256]

@0sm0s1z

[Professor Frank @prof_frank256]

@0sm0s1z It means “read this blog” and “buy this product “ and by implementing the solution,our network is 10% secure

[Professor Frank @prof_frank256]

@sec_hub93028 I am working on a three hour adversary workshop for the https://t.co/7MHecQhgay conference in May