Pinned Tweet
My talk @BSidesSATX about building a NextGen Home Lab is out on YouTube. Go watch it now!
Thanks again to @BSidesSATX for having me and for all your efforts to provide these recordings to the community. Most of this year's talks are on their channel.
youtube.com/watch?v=ex0esbYN…
Useful Queries for many EDR products in this thread
To the "do it all" IT folks or new #SOC analysts that need a little help - a thread for you.
Cheat sheets and example queries for Endgame, CS Falcon, ATP, and CbR using a recent incident as the starting point.
cc: thanks to @AshwinRamesh94 for the query work
1
If you're in the job market, Jason can show you a trick or 10 😉
Job hunting? Or know someone who is?
Join @Jacque_InTheBox and I tonight for a job hunting livestream.
25+ viewers have found new jobs so far.
No vendor pitch. Not selling anything. Just helping.
twitch.tv/banjocrashland
Cell phone forensics CTF with 4 devices' images to investigate
It's been less than 24 hours and people are scoring major points in the #cellebriteCTF There is still time to play! We will review the answers too. Challenge yourself. Even if it's just for fun! You can even hide from the scoreboard. cellebrite.com/en/blog/join-… @Cellebrite_UFED #DFIR
1
Great tips if you're interviewing for a new job
"Do you have any questions for us?"
An effective interview includes 🕘 for the applicant to ask questions.
A few to consider if you're interviewing:
1. What are the big problems you're solving this year?
2. One year from now this person has been successful. What did they do?
1
Blue Team FTW
I can’t recommend the HackTheBox battle grounds enough. It’s an amazing resource for both blue and red teams. If you want more BT vids on this platform, be sure to like, comment, and share! youtube.com/watch?v=o42dgCOB…
If it’s a hit I may show be able to show more of the blue side
Wanna know what the 20 CIS Critical Security Controls and Free and Open Source Tools have in common?Don't miss my talk tomorrow!
Chatting during the conference will only be available via Discord as the chat functionality on Twitch will be disabled. Join us here: discord.gg/bpP9w5D
This why you should have alerts setup when an endpoint stops sending logs.
My blog post on Pwning Windows Event Logging with YARA rules is now up. If you have the permissions and the right yara rule, you can completely hide yourself from event logging. blog.dylan.codes/pwning-wind…
1
3
Don't miss out. It's free this year.
I’m super excited to share @splunk’s blog on #BossoftheSOC 5.0 @Splunkconf. Its going to be bigger & better than ever. Unlimited-ish participation, all virtual, almost every country in the world (sorry Al Quolanudar). Signup starting soon. Learn more here: splunk.com/en_us/blog/conf-s…
DMs are open. I can give perspective on: #HomeLab, #BlueTeam #ThreatHunting, Getting into InfoSec and everything between!
#cybermentoringmonday
Raspberry Pi and run some of the following based on the specs: Pi-Hole, Suricata, Zeek, Kali. File share and learn how to secure it. Web server and learn how to protect it. Hobeypot. Firewall and learn ACLs.
You have £100 to spend on anything to improve your #infosec / #cybersecurity career, what do you buy?