techy

Detection Engineering Field Manual #1 - What is a Detection Engineer? Why does Detection Engineering matter to a security org?

I'm starting a new series on Detection Engineering called the Detection Field Manual. I wanted to publish < 10 minute reads on threat detection topics I've built in the field, at conferences and our interviews for candidates at Datadog.
Here's issue 1!
www.detectionengineering.net/p/detection-...

Datadog Detect: Scale your Security Operations with Detection Engineering | Datadog See metrics from all of your apps, tools & services in one place with Datadog's cloud monitoring as a service solution. Try it for free.

I'm so excited to announce that Datadog Security Research is launching a FREE, fully-online, Detection Engineering focused conference called Datadog Detect!

bit.ly/datadog-detect

Our lineup is incredible with experts in the field of detection, response and threat intelligence.

Found just outside Moscone North for RSA. Now I'm pumped for my talk tomorrow. #hacktheplanet

Det. Eng. Weekly #109 - I’m making a Hinge for detection engineers Your profile is a rule, an alert is a match, and a false positive is a shitty date

Detection Engineering Weekly Issue 109 is live! www.detectionengineering.net/p/det-eng-we...

Det. Eng. Weekly #108 - Can any1 in the IC add me to their Signal group? Just tryna forward some reels and feelin left out rn

Detection Engineering Weekly issue 108 is live! www.detectionengineering.net/p/det-eng-we...

@sekoia.io FYI your TLS cert is showing invalid due to date expiration for *.sekoia.io

I love it when you guys go deep into a topic. The deepseek episode was a great example.

Weekly: 1 hour
Deep dives: 2-3 hours

Browns coming in last yet again

2024 macOS Malware Review | Infostealers, Backdoors, and APT Campaigns Targeting the Enterprise Learn about the key macOS malware families from 2024, including tactics, IoCs, opportunities for detection, and links to further reading.

🍎👿 The key macOS malware families of 2024: This past year saw a sharp rise in sophisticated campaigns targeting macOS users in the enterprise and the increasing adoption of cross-platform development frameworks.

Tracking Threat Actors with Validin | Validin Quickly identify threat actors and discover malicious infrastructure using Validin by viewing detailed descriptions on thousands of threat actors that Validin has cataloged

I’m biased, but wow—it’s so refreshing to get updates that genuinely help me better track threat actors. 🔥

www.validin.com/blog/threat_...

Bout to go wheels up!

Did a security researcher at Snyk really just publish malicious packages to NPM targeting Cursor.com?

There has been for years! Just starting to see it be more impactful

🎉 link and docs and details: nims-template.notion.site

Logo for Notion Incident Management System (NIMS)

🚀 Excited to announce the alpha release of NIMS - a Notion-based Incident Management System!

Designed for SOC/IR teams, NIMS helps streamline incident management and collaboration using Notion's powerful database features.

#InfoSec #DFIR #IncidentResponse #SecOps #Notion

"North Korea-nexus Golang Backdoor/Stealer from Contagious Interview campaign" published by dmpdump. #ContagiousInterview, #DPRK, #CTI https://dmpdump.github.io/posts/NorthKorea_Backdoor_Stealer/

Hi wanna “make plans”?

A SKLEATON WHO DOSENT HAVE THAT MUCH SPARE TIME FLICKEN OFF THERE COMPUTER YET AGAIN, BECUASE THE SOLUTION TO THERE PROBLEM IS TO DOCKER SOME KIND OF SHIT FROM OPEN SOURCE OR WHAT EVER, BIG NO THANK'S TO THAT , AND DA TEXT SAYS "THE ONLY DOCKER MY ASS IS EVER GONGA INSTALL IS STAIN RESISTENE BROWN WORK PANTS" - DASHARE.ZONE ADMIN - I WILL NEVER USE "GO" I WILL NEVER APT-GET DA ONLY PACKAGE IM INTRESTED IN HAS A BOW ON TOP AND IT S FROM SANTA MOTHER FUCKER - DASHARE.ZONE ADMIN

IF IT AINT EXECUTTABLE IT AINT FOR ME - dashare.zone ADMIN

Read the book twice and watched the series several times. Captain Winters is one of the top 3 leaders I try to emulate

We still have a “purity” problem in infosec. People want super technical resources but don’t want them to advertise anything to survive or grow their brand. They want a mold that looks like DEFCON 2005 and hate anything that looks different. Doesn’t seem very hacker to me 🤷

Even with the OPs main text, those are all great resources. There’s some actual charlatans like jonathandata1, but 95% of the people posted come from posters who seem just upset that they are not technical enough to their standards

From the cybersecurity community on Reddit Explore this post and more from the cybersecurity community

The cybersecurity subreddit has a thread on influencers and “who to avoid because of xyz”. These threads irk me because there’s no clear measurement and lots of gate keeping around who is allowed to post stuff and who isn’t. www.reddit.com/r/cybersecur...

I’ve been pretty sick for the last 2 weeks, but Christmas holiday has been a much needed break for rest and recovery.

Take care of yourselves people; I think stress contributed a ton to this, and being mindful and in the present has helped me out a lot.

And lots of Christmas food.

telling chatgpt my editor in a very blunt and snarky way, as all vim users do

The TLS Protocol Version 1.0 RFC, January 1999, in ugly meme form. Top text: I am not a toy I am not a Christmas present I am a 30+ years commitment Bottom text: Please think hard before you give someone an Internet standard this Christmas

Today is not a good day. Our dog needed a vet visit because he was weak and not eating. Turns out he had blood and fluid throughout his abdomen due to cancer. He was an amazing friend and family member, and tomorrow’s issue will be somber but commemorative with lots of pupper pics. Hug your dogs!

Farris's Three Laws of Auto Remediation - Chris Farris In this post, I present three laws of Cloud Security Robotics with homage to a SciFi great.

You've got to be a total wanker to name a law after yourself, and guess what!
www.chrisfarris.com/post/three-l...

A man wears a taupe glen check Shetland tweed sport coat with a light blue dress shirt and mid-gray worsted trousers. he has a black belt, black loafers, and black watch strap carrying a silver dress watch. He also has a bit of silver jewelry in the form of necklaces and rings.

A man wears a olive herringbone tweed sport coat with white jeans and a dark green button-up shirt. He's also wearing a bit of gold jewelry in the form of rings and bracelets, as well as a black watch strap carrying a dress watch

A man wears a brown tweed sport coat with flapped patch pockets. It's paired with an ecru button-up shirt, tan chinos, brown belt, white ribbed tank, and silver necklaces

A man wears a gray Shetland sweater with black jeans. He also has some rings, bracelets, and a small silver dress watch on a black leather watch strap.

love these looks from Proper Cloth's new lookbook titled "New Ivy." even the grey shetland knit with black jeans and small dress watch looks great.