@BlueTeamHB

*Actual Unicorn*. Blue Team, Detection Engineering. and SecOps Use Cases are my Jam.

 United States (!Art Bell)
blueteamhandbook.com
Joined July 2014
  • Tweets1K
  • Following229
  • Followers676
123Media
Next SEC 530 - September in Raleigh NC retweeted
SANS Cyber Defense 🧢@SANSDefense5 Dec 2022
📣NEW VIDEO ON YOUTUBE📣 🗣 Featured speaker: Don Murdoch (@BlueTeamHB) IR Prep and Detection Engineering When the Cloud is Your Data Center Watch now ▶️ youtu.be/odDpHxnB6Kw #BlueTeamSummit
1
3
1
7
Next SEC 530 - September in Raleigh NC retweeted
Mick Douglas 🇺🇦🌻@bettersafetynet30 Aug 2022
Instead, consider more effective tactical response actions: - Disable the accounts they're using - Patch the vuln - Isolate that system - Use QoS to throttle attacker's speed - Grab mem and power system off - Increase detection 2/?
5
18
2
281
Next SEC 530 - September in Raleigh NC retweeted
Ushi
@ush1c4 Aug 2022
Old IT guys be like “back in my day we only had IPv1.2”
41
8
5
143
Next SEC 530 - September in Raleigh NC retweeted
Andy Robbins@_wald08 Jul 2022
Today is Friday, which means it's #BloodHoundBasics day. Create your own free, defensive #BloodHound dashboards with PowerBI. See how in these two-part blog series: Part 1: posts.specterops.io/ba8ea490… Part 2: posts.specterops.io/3e1c521f…
2
59
1
196
Next SEC 530 - September in Raleigh NC retweeted
Nicole Beckwith
@NicoleBeckwith2 Feb 2022
Friend: So what do we do when we are stressed and reaching burnout? Me: Buy everything in my save for later list on Amazon? Friend: hmmmm, that depends, did you buy me anything? Me: What do you want? #stress #burnout #dontdothis
10
1
52
Next SEC 530 - September in Raleigh NC retweeted
Jorge Orchilles@jorgeorchilles17 Mar 2021
I can't believe the industry is accepting the "Continuous Automated Red Teaming (CART)" term. You CANNOT AUTOMATE A RED TEAM We are people, we are humans, your tool can't replace us. Same goes for blue team BTW! #redteam #infosec @scythe_io has/will never be marketed like that
33
96
17
453
Next SEC 530 - September in Raleigh NC retweeted
Mick Douglas 🇺🇦🌻@bettersafetynet9 Mar 2021
I'm getting flat out embarrassed for the folks in infosec biz who are claiming that the ongoing exchange attack campaign shouldn't be considered an international attack. I'm embarrassed because clearly your accounts were hijacked by Chinese bots. 1/?
2
2
1
6
Next SEC 530 - September in Raleigh NC retweeted
SANS Cyber Defense 🧢@SANSDefense6 Feb 2021
Don Murdoch (@BlueTeamHB) goes over the components of a playbook, their creation & maintenance, how playbooks are used in IR Simulation, and a host of supporting tools that improve playbook usage. #CyberDefenseForum youtu.be/jDftIimcT-c
1
3
Next SEC 530 - September in Raleigh NC retweeted
Chris Sanders 🔎 🧠
@chrissanders881 Sep 2020
I gotta tell y'all... book release day is an emotional one. This book has been in pieces in my head for over a decade. Seeing so many people excited for its release really brings me a lot of joy. Thank you all. 🍯
Chris Sanders 🔎 🧠
@chrissanders881 Sep 2020
My newest book, Intrusion Detection Honeypots: Detection through Deception, is out today. 🍯 You can read about it here: chrissanders.org/2020/09/idh… You can buy it here: smile.amazon.com/dp/17351883… #idhbook
7
19
1
127
Next SEC 530 - September in Raleigh NC retweeted
SANS DFIR@sansforensics11 Sep 2019
Congratulations to @_s14 Peter Szczepankiewicz on his promotion to @SANSInstitute Principal Instructor!
6
3
37
Next SEC 530 - September in Raleigh NC retweeted
SANS Institute
@SANSInstitute6 Aug 2019
[Webcast] August 13th at 1 PM ET: sans.org/u/TRX | Visibility for #IncidentResponse: A Review of @Forescout 8.1, reviewed by SANS @BlueTeamHB
1
2
Load more