@secshoggoth.bsky.social
Incident Response, Forensics, Malware Analysis, Reverse Engineering, Cyber Security, RPG, Geek, Nerd, #DFIR Opinions are my own and not those of my employer.
Did you know there are ๐ญ๐ฐ๐จ ๐ฏ๐๐ซ๐ฌ๐ข๐จ๐ง๐ฌ ๐จ๐ ๐๐ข๐๐ซ๐จ๐ฌ๐จ๐๐ญ ๐๐ฎ๐ข๐๐ค ๐๐ฌ๐ฌ๐ข๐ฌ๐ญ, one of which doesn't log anything?
On ๐๐๐ด ๐ญ๐ฏ ๐ฎ๐ ๐ญ๐ฎ ๐ฃ๐ ๐๐ฆ๐ง, I am presenting on MSQA, how we're seeing it used in attacks. More importantly, how to perform investigations into MSQA.
๐
๐ซ๐๐ ๐ญ๐จ ๐๐ญ๐ญ๐๐ง๐ - register here:
ow.ly/TvlR50WxW5A
A friend of mine - @openheartgames.bsky.social - is running a D&D game all day for Extra Life. Drop by their stream and donate to a good cause!
www.extra-life.org/index.cfm?fu...
#dnd #rpg #charity #extralife
This past weekend I had the opportunity and speak at B-Sides Rochester (NY).
My talk was on forensically analyzing Microsoft Quick Assist and the issues associated with attempting to do so. If anyone is interested:
- Slides: github.com/secshoggoth/...
- Video: www.youtube.com/watch?v=l9Kq...
I've had to analyze several MS Quick Assist compromises and found challenges during each one. Threat Hunting for malicious activity thru QA is not easy either.
So I wrote a blog post on what to look for: inversion6.com/resources/bl...
#dfir #forensics #incidentresponse #threathunting
Today marks the official launch of the Inversion6 Incident Response (IR) team, and I couldn't be more excited! Ready to tackle challenges, protect, and respond like never before. Letโs go!
#IncidentResponse #CyberSecurity #DFIR
inversion6.com/resources/ne...
My fallback plan is being a cranberry farmer or running a tiki bar in the Caribbean.
10.01.2025 17:30 โ ๐ 0 ๐ 0 ๐ฌ 0 ๐ 0Now there is so much to learn and understand. Granted, there is also more training, free content, technology, and education. But in a way that may make it more overwhelming.
To anyone jumping into the depths of this ocean now, you have my sympathies but I also share your excitement. (2/2)
I do not envy those coming into Information Security now.
When I started, there were no formal programs, no degrees, and little training. It was the wild west and we were making a lot of it up as we went. In a way, it was easier. (1/2)
Feels like an appropriate response to me.
10.01.2025 14:44 โ ๐ 0 ๐ 0 ๐ฌ 0 ๐ 0What is everyone's favorite place for a starting sysmon config template?
10.12.2024 18:08 โ ๐ 0 ๐ 0 ๐ฌ 1 ๐ 0
@volexity.comโs latest blog post describes in detail how a Russian APT used a new attack technique, the โNearest Neighbor Attackโ, to leverage Wi-Fi networks in close proximity to the intended target while the attacker was halfway around the world.ย
ย
Read more here: www.volexity.com/blog/2024/11...
Here are some more resources. If anyone knows of any more, please comment them.
www.fbi.gov/how-we-can-h...
ojjdp.ojp.gov/publications...
www.thorn.org/blog/identif...
Save or ๐ฑ๐ผ๐ฐ๐๐บ๐ฒ๐ป๐ ๐๐ต๐ฒ๐ถ๐ฟ ๐บ๐ฒ๐๐๐ฎ๐ด๐ฒ๐ (screenshots, etc.) to help law enforcement if they are brought in.
๐๐ฒ๐ ๐ต๐ฒ๐น๐ฝ from someone you trust. Contact law enforcement. They can help stop this.
I know this may be embarrassing, but they have the resources to help you out.
๐๐น๐ผ๐ฐ๐ธ ๐ฎ๐ป๐ฑ ๐ฟ๐ฒ๐ฝ๐ผ๐ฟ๐ ๐๐ต๐ฒ๐ถ๐ฟ ๐ฎ๐ฐ๐ฐ๐ผ๐๐ป๐๐.
They will try to message you on every platform they can find using different accounts.
Blocking and reporting them means its more likely their accounts will be taken down.
Don't send them anything and ๐ฑ๐ผ๐ป'๐ ๐ฝ๐ฎ๐ ๐๐ต๐ฒ๐บ ๐ฎ๐ป๐ ๐บ๐ผ๐ป๐ฒ๐.
If you pay them, it won't go away. They will just ask for more.
If you did pay them money, try to ๐ฟ๐ฒ๐๐ฒ๐ฟ๐๐ฒ ๐๐ต๐ฒ ๐๐ฟ๐ฎ๐ป๐๐ฎ๐ฐ๐๐ถ๐ผ๐ป. You may have to call your bank, but the faster you do it the more likely the reversal can happen.
Yesterday I received a call from a friend who was a victim of sextortion. This is all too common but fortunately there are things you can do if you fall victim to this.
Remember ๐๐ผ๐ ๐ฎ๐ฟ๐ฒ ๐ป๐ผ๐ ๐ฎ๐ ๐ณ๐ฎ๐๐น๐. The person doing this is truly one of the worst types of criminals. You are a victim.
๐งต
What's one more social media site to check out?
13.11.2024 13:49 โ ๐ 1 ๐ 0 ๐ฌ 1 ๐ 0
