jordan drysdale

[jordan drysdale @Rev10D]

@haydnjohnson everyone is doing better at getting around plugin based blockers. uBlock and ghostery still doing a pretty good job for chrome and FF

[jordan drysdale @Rev10D]

@davidprowe for those unaware, this tool is amazing!

[David Rowe @davidprowe]

Update list for Badblood:
1. Parameters for easier creation of Objects
2. Parameters to skip LAPS and OU creation.

[Black Hills Information Security @BHinfoSecurity]

BHIS | Tester's Blog

A Sysmon Event ID Breakdown
by: @Rev10D
Published: 1/8/2021

Learn more: https://t.co/tG1kk3LlgO

[Blake Regan @crash0ver1d3]

@cillic Sysmon, 25 event IDs, better visibility vs. traditional Windows Logging. Great blog on Sysmon Logging and EventIds, with the new Event Id 25, Process Tampering, written by @Rev10D https://t.co/KxacayLejN

[jordan drysdale @Rev10D]

@mlgualtieri @blueteamblog SIGNING IS HUGE!!!

[blueteamblog @blueteamblog]

Red teams / pen testers etc.

What one thing can blue teams do to make your life more difficult? What do you come across and think “Damn, they did that”?

[𝘚𝘢𝘭𝘷𝘢𝘵𝘰𝘳𝘦 𝘊𝘢𝘮𝘱𝘰𝘭𝘰 ֎ @Totocellux]

#ThreatHunting: A #Sysmon Event ID Breakdown
https://t.co/fF3ntsfQS2
@olafhartong @Rev10D @BHinfoSecurity
𝞝
#Enterprises #Organizations
#ThreatHunting #Hacking
#InfoSec #CyberAttacks
#LateralMovements
#CyberSecurity #WMIC
#ClipBoard #Passwords
#MitreAttack #MSDefender

[jordan drysdale @Rev10D]

@rhettn #Verdad

[Defensive Origins @DefensiveOGs]

Applied Purple Teaming will be offered only once this year, so unless you plan on waiting until 2022 to join us for APT, you'll want to register ASAP. Registration closes this Wednesday (1/27): https://t.co/vrm96qC9Bm

#infosec #purpleteam #blueteam #redteam #cybersecurity

[InfoSecSherpa 🏔️ @InfoSecSherpa]

Remember the Squirrel Nut Zippers?

[jordan drysdale @Rev10D]

@blake_r38 @DefensiveOGs @Krelkci Thanks Blake, we truly appreciate your kind words.

[Blake Regan @crash0ver1d3]

Thank you for the cool swag @grimmcyber. #GrimCon 0x3 was a blast!

[Olaf Hartong @olafhartong]

Sysmon 13 has just been released. I’ve just published a detailed look at the new ProcessTampering feature in a blog.

https://t.co/QtWyBqm2rq

#DFIR #Infosec #Sysmon

[Defensive Origins @DefensiveOGs]

Fresh on the blog today: "A Sysmon Event ID Breakdown"

https://t.co/GxVXFRKW0m

@Rev10D #infosec #sysmon #sysinternals #logging #threatoptics #cybersecurity

[jordan drysdale @Rev10D]

@ChrisHanlonCA @AlyssaM_InfoSec @NoLogsNoCrime @shehackspurple @beardedcyberguy @BSidesVI @BSidesVancouver @Defcon604 @VanCitySec @strandjs @Krelkci @chetwisniewski @OWASPVictoria @OWASPVancouver @InfosecVandana Thanks Chris! Appreciate you sir :D

[Roberto Rodriguez 🇵🇪 @Cyb3rWard0g]

💥😱 @tiraniddo added "named pipe RPC client transport" to NtObjectManager 🔥 Thank you very much James for all your work 👏!

I'll create PS scripts to cover a few scenarios 🍻 (Img 4)

If anyone would like to help me, let me know 😉 @OTR_Community

https://t.co/8paKivsLy9

[Michael ⛰️🌲 @infosec_mike]

Great year in webcasts. @BHinfoSecurity @WWHackinFest

[jordan drysdale @Rev10D]

@IanColdwater @egyp7 @hacks4pancakes I just wannacry :/