Luke Paine

Dad | Director of Training @SpecterOps

[Luke Paine @v3r5ace]

@JustHimansh_ @SpecterOps Hey! I reached out with a few questions via DM!

[Hope Walker @Icemoonhsv]

If you've taken my Azure course with @SpecterOps we are inviting alumni back for a new module on Agents and Identity. Join me on Sept 1 to learn about agents and experience our new material before it goes live at SpecterBash. Spots are limited.
https://t.co/bKgkaxYmPY

[Luke Paine @v3r5ace]

@ConManNate @ptrschmdtnlsn The key difference is not just different circuit breakers. It’s different “legs” or phases of 120v on your panel. North American panels typically are fed with 240v via dual 120v opposite phase legs. Every other breaker vertically in the panel typically hits a different leg.

[Luke Paine @v3r5ace]

@specialboy51965 @theronron90 @dukesdoctrine_ @BoeingB52BUFF I’d imagine the upward have a chance of 0-0 survival but aren’t built for it, and the downward can’t be 0-0, I’m with you there

[Luke Paine @v3r5ace]

@theronron90 @dukesdoctrine_ @BoeingB52BUFF It has 6 ejection seats. 4 up and 2 down. Definitely can eject.

[Luke Paine @v3r5ace]

@ZBelair711 @nicksortor There are 6 ejection seats on a B-52... 4 on the upper deck eject upwards, and the two on the lower deck eject downwards. Just need sufficient altitude to make it survivable.

[Luke Paine @v3r5ace]

@dez_ @_xpn_ @cryps1s @SpecterOps Yes! We have a library of other scenarios and testing ranges available as well. I'm happy to talk through what we offer whenever you'd like. Linking our 2-pager on that service below: https://t.co/gGAlhUk6Ur

[Luke Paine @v3r5ace]

@ShaneConnor @thenewarea51 @LadyAstroJet Tankers

[Luke Paine @v3r5ace]

@BrettKollmann There was no call on the play, why is everyone using this as an example

[Luke Paine @v3r5ace]

@jsecurity101 @HuntressLabs 🔥

[SpecterOps @SpecterOps]

Don't miss out on our Adversary Tactics: Detection training at #BHUSA! Boost your defensive capabilities & learn a methodology to engineer detections based on attacker TTPs, analyze host info, & build threat hunting hypotheses.

Register ➡️ https://t.co/cRqnxVvKgC

[Luke Paine @v3r5ace]

@jsecurity101 Python is named after a snake because it’s a poisonous language

[Luke Paine @v3r5ace]

@jsecurity101 I stand with you

[Jared Atkinson @jaredcatkinson]

There's been lots of reporting on the campaign against
Snowflake DB, so I thought it'd be useful to look at it from an Attack Path PoV. This post shows how you can create an graph for your SNOW deployment & what that tells us about the campaign.

https://t.co/1crZ5n0rL0

[Jared Atkinson @jaredcatkinson]

My On Detection series continues. In part 14 I look at a “special” subset of operations that require a bit more detail to facilitate accurate detection. While this topic is more focused on the model, I finish the post by analyzing one of the variants of PoolParty Injection!

https://t.co/NNalge2TFh

[Luke Paine @v3r5ace]

If you liked my post yesterday, this one from Jared builds on it in a big way!

[Jared Atkinson @jaredcatkinson]

I've released another post in my On Detection series. This edition builds on the previous post where I introduced "execution modalities." Here we look at how modalities, like behavior, can impact detection efficacy and how we can deal with that fact.

https://t.co/CysEu2u5ht

[Luke Paine @v3r5ace]

I'm excited to get my latest blog post about purple team efficacy out into the wild! You may feel like the point I'm making is obvious, but I'd argue that a lot of concepts seem obvious only when you're faced with an argument on it's behalf.

https://t.co/JvH82OW6Kj

[Luke Paine @v3r5ace]

@jsecurity101

[Luke Paine @v3r5ace]

@jsecurity101