Tyler Wrightson

Author, Speaker, Infosec & Offsec lover. Founder of Leet CyberSecurity @leetsys. @anyconsec Organizer.

[Dr. Erdal OZKAYA @drerdalozkaya]

I would like to thank all the experts who has contributed in my latest book ,"Incident Response in the Age of the Cloud" ask the expert section.
@orinthomas @MarkSimos @tbwrightson @0gtweet @EmreTinaztepe @saricaraif @hex2dec @ITCalls_ANabil @gokhanyuceler @cyberdal @ylmzdgrmnc

[Tyler Wrightson @tbwrightson]

@sum_b0dy @2600 Holy cow, I remember that exact issue! I think I still have it in a box somewhere. Good memories!

[Tyler Wrightson @tbwrightson]

Do I have any friends that have experience writing a Windows Credential Provider? I know a cool authentication startup looking for help hacking together a quick proof of concept. They have a little budget. Please share for reach, thank you! DM me and I'll connect you with them.

[Tyler Wrightson @tbwrightson]

I frequently get asked for advice on starting a career in Cyber Security. I decided to turn a recent request into a blog post. Always open to feedback
https://t.co/autXn7yDGf
#careeradvice

[Tyler Wrightson @tbwrightson]

Anyone else remember that global pandemic in 2020!? Oh man that was nuts.

[Tyler Wrightson @tbwrightson]

@kim_crawley I'm down.

[ANYCon @anyconsec]

CyBeer is a great way to keep in touch with the community in between conferences! This month on top of the awesome guest speakers, we'll have a lot of great news about the next #ANYCon
Don't miss it!

[Tyler Wrightson @tbwrightson]

@AlyssaM_InfoSec You're literally describing a normal day in our office.

[Tyler Wrightson @tbwrightson]

@thedawgyg Not sure what you're asking. Can you add a little more context?

[Tyler Wrightson @tbwrightson]

@sum_b0dy Oh there is data there for sure. You want another fun test, creat an html login form and log everything.

[Tyler Wrightson @tbwrightson]

@akolsuoicauqol Because ita the equivalent of wired, duh! :D

[Huntress @HuntressLabs]

Cybercriminals selling access to an MSP for $600? It’s real. Check out how we worked with @datto and @ConnectWise to discover, social engineer, and expose an attacker on the dark web. #MSPs #cybersecurity #hackersgonnahack https://t.co/4YdbERT0p2

[Tyler Wrightson @tbwrightson]

@AlbBizLiz @AlbanyBizReview @NYBizJournal Congrats Liz, that's huge!

[Tyler Wrightson @tbwrightson]

@KSKrug Hahaha, that's great! Kahnfuscius - I think you have a new handle!

[Tyler Wrightson @tbwrightson]

After discussing with the team, I've decided to start writing Cyber Security Haikus. My first one:

A Password Chosen,
The Changing Season in Mind,
CSO Sheds a Tear.

[ANYCon @anyconsec]

#ANYCon 2020 - September 19/20 at the Albany Capital Center.
Check our latest news posting for more info - https://t.co/JkI4kPR6H0
What are you looking forward to the most about this year's con?

[Tyler Wrightson @tbwrightson]

@Supernaut29A @UK_Daniel_Card @nemesis09 @TimMedin @Supernaut29A DM me, I'd love to discuss this.

[Tyler Wrightson @tbwrightson]

@nemesis09 @Supernaut29A @DebugPrivilege This is great context that I didn't have. I think you can/should definitely have different password policies for service accounts. That being said they are super sensitive and additional controls should definitely be put in place, but age can typically be extended.

[Tyler Wrightson @tbwrightson]

@nemesis09 And again, to clarify. Password reuse is just one issue of many that are greatly exacerbated by a password that truly never expires.

[Tyler Wrightson @tbwrightson]

@nemesis09 Agreed, different issue. However, I dare you to convince a user that they've chosen a good strong password and then be assured that they don't reuse it, or even start using it as a system -we've cracked passes and 'guessed' other passwords based on systems during red teams before