Fez

Nomadic bad packet crusader 🪐

[Fez @sudo_fez]

@UK_Daniel_Card Yes and that's the difficult point to communicate and negotiate. Being IT Ops' best friend is a great way to improve delivering closing out risks which then boosts the investment incentive

[Fez @sudo_fez]

What is the rationale in having a proprietary certificate store instead of just using the system store? #openssl #urllib3

[Fez @sudo_fez]

@_wald0 Having spent a year using bloodhound for defense and now in an AD free environment, I am jealous and still excited. Thank you!

[Fez @sudo_fez]

The @Google authenticator timer wheel is my daily source of anxiety

[Fez @sudo_fez]

@InsecureNature & @matter_of_cat, really great talk! Do you have any docs you can recommend on building detections into GCP for detecting the priv esc activity?

[Fez @sudo_fez]

@_wald0 If this release includes GCP/AWS/Azure attack path mapping I'm going to lose my shit Andrew

[Steve Syfuhs @SteveSyfuhs]

Have you ever wondered what happens behind the scenes when you type your password into the Windows logon screen and hit enter? I'm waiting for a build to complete, so I'm gonna tell you.

[Fez @sudo_fez]

Wireshark filters

[Fez @sudo_fez]

Assigning multiple return values to multiple variables in one line #Python3

[Fez @sudo_fez]

@monzo Travel insurance as part of Monzo plus 😭

[Fez @sudo_fez]

@SwiftOnSecurity What are your *must have* tools in an enterprise environment?

[Fez @sudo_fez]

@j_opdenakker Removing daily user accounts from domain admin

[Fez @sudo_fez]

@_Freakyclown_ In South African cinemas you used to be able to get plain and add your own shaker spices. Fruit chutney gang checking in

[Fez @sudo_fez]

Using task manager to fight malware

[Fez @sudo_fez]

You'll be blown away by how much of your business critical applications are run by .bat and .vbs files when you start script control

[Fez @sudo_fez]

@SwiftOnSecurity Is it true that you have to address Bill Gates as "Daddy" in the office?

[Fez @sudo_fez]

@varcharr Caused mass panic at a site & blew up inboxes with AV alerts during VA scanning. Someone had unticked inheritance to retrieve whitelist for that site only. Never assume all implementations are done correctly just because someone signed it off.

[Fez @sudo_fez]

@TurvSec Is there any reason or use case for someone to disable Kerberos pre-auth?

[Fez @sudo_fez]

I put isolation to good use by rooting my first @hackthebox_eu machine 🔧 #Remote