I'm looking for Tier 1 and Tier 2 SOC analysts to join my team in Boston! Can be remote (if remote, West Coast preferred). Spanish speaking candidates, a plus. Please reach out with questions! https://t.co/K7ZNoY19zD
The best part of being in leadership is seeing your former analysts do cool things. International Women's Day and Niamh's out here!
https://t.co/VsmLvSnaOJ
I tell every junior person I mentor that they are 2 years of hard work from being a global expert in a new technology. Don't let greybeards scare you with 20+ years of experience. My expert token ring knowledge is much less useful than intro kubernetes.
So #Icedid droppers have been changed from exe to dll files, interestingly unlike previous campaigns where the Icedid second stage decoded the embedded encrypted config using RC4, the decryption of the config routine is nowhere to be found in the new campaigns second stage.
Any L1 folks out there looking for SOC work? @cybereason we're always looking for trainable folks with positive, team oriented attitudes who value diversity, and have a passion for digging into ugly things! Share with your pals, please.
"It's not necessary that you do everything on your own. By allowing others to help you or lend you a hand increases your chances for success, and for your plans to move ahead. Lighten your load, you will feel better."
What can we do about unwanted location tracking? What might this look like when done by a nation state? By someone close to you? I wrote about some of these threats @RSAConference this week #spyware#stalkerware
https://t.co/lccLtnFXjm
#SOCclass with @CCrowMontance was extremely informative. Provided an architecture for establishment, growth, and maturity of a SOC. Biggest takeaway, aside from extensive knowledge on building out a global training structure, was the human ego is the plague of analysis. #egodeath
@CircuitSwan Out in Boston @cybereason, I'm looking for good trainable folks with positive, team oriented attitudes who value diversity, and who have a passion for digging into ugly things!
"the quick brown fox jumps over the lazy dog":
-overdone
-juvenile
-has no impact or weight to it
"sphinx of black quartz, judge my vow"
-holy shit
-literally the most metal way to test out your font
-raw as hell
New from Team Nocturnus: a worm variant called Adobe Worm Faker. It actively uses LOLBins and dynamically changes to exploit based on the environment it is in. https://t.co/bjH7xhaWr0