[email protected]

Reverse Engineer && Digital Investigator; Opinions are my own.

[[email protected] @Xtemporality]

Taking off to Mastodon, find me there or in the discords!

[[email protected] @Xtemporality]

@corg_e The Zenmap slander will NOT be stomached

[SentinelOne @SentinelOne]

👇Here are the top #macOS malware we saw in 2022, a thread 🧵👇

[ANY.RUN @anyrun_app]

I guess we have jumped the gun to fire those guys
#ChatGPT #FormBook #OpenAI

[bluecapesec @bluecapesec]

What do you want to know about investigating ransomware cases?

We have a webinar on this topic coming up next week on Wednesday, Dec 14th @ 2pm EST!

Let us know and we'll talk about it next week! Stay tuned for more!

#dfir #ransomware #forensics

[[email protected] @Xtemporality]

very good

[Danny Richman @DannyRichman]

I mentor a young lad with poor literacy skills who is starting a landscaping business. He struggles to communicate with clients in a professional manner.

I created a GPT3-powered Gmail account to which he sends a message. It responds with the text to send to the client.

[bluecapesec @bluecapesec]

We just dropped a few more Practical Windows Forensics preview videos on Youtube!

We demonstrate the data collection process, starting with:
- An overview of the forensic process
- Evidence preservation
- Memory acquisition
- Disk acquisition

https://t.co/EQHFzKmL2Z

#dfir

[Thomas H. Ptacek @tqbf]

I’m sorry, I simply cannot be cynical about a technology that can accomplish this.

[SentinelOne @SentinelOne]

📚Here’s our list: Must-read books for every #infoSec practitioner, a thread 🧵👇

[ET Labs @ET_Labs]

217 new OPEN, 218 new PRO (217 + 1) More DYNAMIC_DNS, XWORM, Bitter APT, JS/Batloader and AppleJeus.

Thanks @souiten, @AuCyble, @James_inthe_box, @[email protected], @SquiblydooBlog, @Xtemporality, @ReversingLabs, @Junior_Baines

https://t.co/WkEaKFmQUM

[[email protected] @Xtemporality]

New blog out! What made this research interesting was that the trojanized software required interaction to detonate👀

[ReversingLabs @ReversingLabs]

@ReversingLabs #MalwareResearcher Joseph Edwards (@Xtemporality) takes a deep dive into #ZetaNile, a set of #opensource software trojans being used by #Lazarus/#ZINC. https://t.co/9oJJC1mj5K

[[email protected] @Xtemporality]

@passthehashbrwn 💀

[Squiblydoo @SquiblydooBlog]

#BATLOADER changed from using MSI files to using JS files.
C2: installationupgrade6[.]com

Execution looks like this:
Wscript.exe InstallerV71.0.js
cmd.exe b1.bat, b2.bat, b4.ps1, c1.exe, c2.exe, c3.exe

MB: https://t.co/lOENK85y3G
VT: https://t.co/hfANb4gW6T
@JAMESWT_MHT

[devtooligan @devtooligan]

omg. seriously mind-blown 🤯

we're all gonna be out of a job 🤖

[Marc-André Moreau @awakecoding]

Do you need to create a local user account on a Windows 11 test VM? Try using "[email protected]" with password "nope", let it fail, and then the installer will let you create a local user account 👇

[Rob Fuller @mubix]

Name 3 women in #infosec that you admire and aspire to be like that aren’t family or, and this is the hard one in such a small community, but no friends either.

[[email protected] @Xtemporality]

@mubix And @Fox0x01 gets her own tweet because how did I leave her off

[[email protected] @Xtemporality]

@mubix @hexplates @yarden_shafir @hasherezade @maddiestone @c3rb3ru5d3d53c @malwareunicorn @RebelbotJen because 3 is never enough

[cts🌸 @gf_256]

OpenAI: We have the most sophisticated content filtering system in the world

OpenAI's content filtering system:

[[email protected] @Xtemporality]

@struppigel extremely relatable content, I was just trying to determine which I want to use for a new VM

[Flipper Devices @flipper_net]

PayPal has released 74% of our money ($980,000) but still holds $350,000 to "mitigate possible claims" despite the fact that we delivered 100% of orders paid with this money.

Thanks to the team of Buzko Krasnov lawyers https://t.co/PTFLhOIdxo for legal support in resolving this.