Tommy Dacanay

Threat hunting, automations, tooling | Mandiant Managed Defense | Operationalizing intelligence | Structural engineer turned APT ejector

[Tommy Dacanay @tommysec]

I'm a lurker 99% of the time, but find me over at Bluesky, same username tommysec! ✌️

[Ryan Tomcik @heferyzan]

Curious how threat actors use digital analytics and advertising tools to increase the effectiveness and duration of their campaigns?

Check out our latest, trade-craft focused blog where we mint the sizzlin' new term: malnalytics!

🔥🔥

https://t.co/Uvcu4xZXXp

#malvertising

[Ryan Tomcik @heferyzan]

MITRE Kalikimaka, everyone! Just in time for the holidays, here's a yule blog covering UNC2975 malvertising activity that led to DANABOT and DARKGATE malware. (1/7)

https://t.co/dUTzUTnq98

@rufusmbrown @_gackerman_

[Tommy Dacanay @tommysec]

@burritosec Gotta go with +44 because of my love for "No, It Isn't"

[Tommy Dacanay @tommysec]

@burritosec Bro it's comfy

[Tommy Dacanay @tommysec]

@nicastronaut Agreed. Honestly the Pepes pizza I had today was probably the best pizza of my life

[Tommy Dacanay @tommysec]

New Haven pizza pilgrimage, stop No. 1: Modern Apizza. Great flavor, a little on the greasy side. Sprinkling parmesan helped. Nice amount of char, my fingertips were happily char-coated.

[Tommy Dacanay @tommysec]

@nicastronaut Stop No. 3: Sally's. Great way to end the pilgrimage. Delicious crust, and the pepperoni had some excellent #CuppingAction going on. My craving is satisfied..... For now 🍕🍕🍕🍕🍕🍕🍕🍕🍕

[Tommy Dacanay @tommysec]

@nicastronaut Based on this trip, New Haven Pepes is a little better than Alexandria Pepes. Either way, I'm proud to be a Frank Pepes member. I told the waitress that and I'm pretty sure she was impressed.

[Rufus @rufusmbrown]

https://t.co/oexsMQWFYY

[Tommy Dacanay @tommysec]

@burritosec @nicastronaut What this man said

[Myrtus @Myrtus0x0]

Christmas is here baby 😍 adios qakbot https://t.co/e0XexT6ppz

[Ryan Tomcik @heferyzan]

Just announced in preview: Mandiant Hunt for Chronicle Security Operations! This new service is tailored to organizations with existing security programs who want a threat hunting capability to discover new threats that may be missed by product detection.
https://t.co/jwXQWZi6JC

[Ryan Tomcik @heferyzan]

@Sa1jak, Dan, and I had the honor to be invited onto The Defender's Advantage podcast to chat about our recent blog on UNC961 and how @Mandiant Managed Defense approaches threat hunting as an MDR service.

Pod: https://t.co/rBal9GqhWW
Blog: https://t.co/RtOzmAWPMv

[Ryan Tomcik @heferyzan]

Happy to provide Managed Defense contributions with @tommysec to the Campaigns section of M-Trends. Lots of APT-over-USB this past year.

[Tommy Dacanay @tommysec]

@nicastronaut WEAH SEEING SOMETHING WE AIN'T NEVAH SEEN BEFOWAH KEHD

[Gigs @ Shmoo @Gigs_Security]

🚨 @Mandiant’s M-Trends is here!! 🚨

Stories include 👀
1️⃣ Mandiant’s insights on attacker operations from the frontlines
2️⃣ Ukraine holds the line against 🇷🇺’s cyber operations
3️⃣ Uncommon techniques, successful hacks
4️⃣ DRPK getting 🔐coin
5️⃣ Red Team vs the ☁️
6️⃣ 🎓 APT 42

[Tommy Dacanay @tommysec]

@burritosec You know I'm on board