Stephen Tate

Day Job: Cyber Security/SOC. Outside the day job: STEM Ambassador. Outside that: Sport and other nonsense.

[Stephen Tate @sj_tate]

Just blogged: Use of Bespoke Branding in O365 Phishing Campaigns https://t.co/gV2yx9oMjx

#phishing #BlueTeam #dfir #o365 #soc #infosec #cyber #CyberSecurity #CyberSec

[TCM Security @TCMSecurity]

Looking to get started in Pentesting? Our Practical Ethical Hacking course is THE foundational course to take. We're currently offering the course for FREE!

People over profits. We believe in affordable education.

The sale ends 4/19/2023 at 11:59pm EST

https://t.co/niyLa0QWUc

[Stephen Tate @sj_tate]

@DunelmUK I haven’t received my online order and it seems impossible to talk to someone. Would you be able to help please?

[Stephen Tate @sj_tate]

@meliahart 😂👀

[Stephen Tate @sj_tate]

Hi @LondonMarathon - I still haven’t received my ballot email. Would you be able to help please?

[Stephen Tate @sj_tate]

@LondonMarathon hi team, I still haven’t received my email to say whether I was successful in the ballot?

[Stephen Tate @sj_tate]

@star_girlsophie 😂😂😂

[John Hubbard @SecHubb]

📢It’s finally here!! Season 3 of the Blueprint podcast has officially dropped and we have 3 awesome episodes for you to download right out of the gate on machine learning, insider threat, and OT/ICS security! #infosec https://t.co/acCZ49J45S

[Stephen Tate @sj_tate]

@georgiakikix Good luck Georgia, not that you’ll need it! Enjoy!

[Stephen Tate @sj_tate]

@star_girlsophie Congrats Soph!

[Stephen Tate @sj_tate]

@meliahart Oiii, actually… what a throwback that’d be!

[Stephen Tate @sj_tate]

@meliahart I actually do, bloody thing. 🤦🏻‍♂️

[Christopher Peacock @SecurePeacock]

Threat Informed Defense isn't piping IOCs into your SIEM.

[Stephen Tate @sj_tate]

@SecHubb Congrats @SecHubb!

[Stephen Tate @sj_tate]

@rachaelcleary @meliahart @lauh89 Yellow / orange are the best… this pack is a nightmare.

[Stephen Tate @sj_tate]

@CisoDisabled And vice-versa; just because the metric is green, doesn’t mean the risk is low!

[TinyInfoSec @TinyInfoSec]

High severity alert: Ransomware behavior detected in the file system
But looks like a barrage of false positives

[Stephen Tate @sj_tate]

@msftsecresponse have also observed this behaviour, not on a newly built machine. Have reviewed the timeline and confident this is a false+. Has an issue been identified in the detection logic?

[W. David Winslow @wdwinslow]

@rasmusjhave @neumarke @drb0n3z @msftsecresponse @msftsecurity I'm seeing the sched task "\Microsoft\Windows\SystemRestore\SR" - which seems to call "%windir%\system32\srtasks.exe ExecuteScheduledSPPCreation" on a clean system, as the cause of the alert in our case. We are checking to confirm the task is unmodified on the impacted machine.

[Stephen Tate @sj_tate]

Great thread 👇

[John Lambert @JohnLaTwC]

I am preparing for an internal talk on career advice learned from working security crises. My notes 🧵

[Stephen Tate @sj_tate]

@georgiakikix Keep your pecker up, Georgia. You know where I am if you wanna chat.

[Stephen Tate @sj_tate]

@Gwjanes But also good, I guess 😂

[Stephen Tate @sj_tate]

@Gwjanes Shame. We could have recreated that iconic photo in a couple of weeks