Craig Chamberlain

Posts written by hand, not AI. Six startups, four exits. Former PR2 @ Elastic. Working on using AI / ML at scale, agent packs, threat hunting, prediction.

[Craig Chamberlain @randomuserid]

[blog] we just published this b/c I think it may be one of the best examples so far. This is the first real post about this project now that we can open up more;

Hunting and Detecting the Copy Fail Exploit With PROTOSTAR Detection Lattices: https://t.co/eW3uG1LtEf

[Craig Chamberlain @randomuserid]

[blog] Detection Lattices For Emerging Threats: “Dirty Frag”
https://t.co/lnlxQTbSKy

[Craig Chamberlain @randomuserid]

Stand back, I am about to determine the maximum ingest rate on a Jupiter farm with 128 cores and a terabyte of RAM

[Craig Chamberlain @randomuserid]

@JakeKing Thanks! This is what I am using to find detection resistant threat activity. I’m finding things none of the major products find. Will have an announcement next month

[Craig Chamberlain @randomuserid]

[blog] we just published this b/c I think it may be one of the best examples so far. This is the first real post about this project now that we can open up more;

Hunting and Detecting the Copy Fail Exploit With PROTOSTAR Detection Lattices: https://t.co/eW3uG1LtEf

[Craig Chamberlain @randomuserid]

@MalwareJake I have a feeling you’re right about their capabilities having been degraded and if so that is good news and I will take it. I’m not super concerned about external DDoS attacks in general, I think crews persisting inside networks would be my main problem. If they still have some.

[Craig Chamberlain @randomuserid]

@stephanpastis I give my name as Rock (my name apparently means a rocky outcropping in old English) I gave up a long time ago trying to make my first or last name spelled or pronounced

[Craig Chamberlain @randomuserid]

@_dirkjan

[Craig Chamberlain @randomuserid]

@HackingDave Advance team for the annexation of Canada? Or maybe Panama

[Craig Chamberlain @randomuserid]

@cyb3rops What data types are available for writing detection on? Network data I suppose but is there any host data that can be instrumented and used?

[Craig Chamberlain @randomuserid]

@HackingDave @amrittsering If you bought one of those, made to look like a clown, and brought it home, it might eventually cure your clown phobia. Might take a few months

[Craig Chamberlain @randomuserid]

@gabsmashh

[Craig Chamberlain @randomuserid]

@BBarronn @dtoxmilenko @evilsocket Next up: a client side RCE in Linux sound card drivers

[Craig Chamberlain @randomuserid]

@csoandy @securityweekly Firewall bypass..their firewall change was rejected and they realized they could get a network cabling change approved / done

[Craig Chamberlain @randomuserid]

Anyone else notice something in these numbers that is not being talked about? Ignore the candidate numbers for a moment and look again
https://t.co/WGZHfsn4qC

[Craig Chamberlain @randomuserid]

@gunsnrosesgirl3 99% of reported alien sightings now explained?

[Craig Chamberlain @randomuserid]

@HackingDave Maybe they have you on some kind of VIP list of persons needing special or extraordinary fraud protection. Can you make contact with their security team or CSO

[Craig Chamberlain @randomuserid]

@suno_ai_ Soundproof booth for joining meetings

[Craig Chamberlain @randomuserid]

@HackingDave @Combobulate Maybe someone just wanted to start a program to study the topic and writing something as interesting as this sounds was the way to get it funded and / or construct the apparatus to look inside the SAPs and see what’s there. Maybe someone just wanted to go look because they could

[Craig Chamberlain @randomuserid]

@HackingDave @Combobulate IDK is this real? If it were real, why would they declassify something that acknowledges unacknowledged programs so secret, and so sensitive, involving something so advanced that they worry about "irreversible damage" to natsec if it leaked..