🇬🇧 #CyberSecurity - Incident Response, with a bit of honeypotting on the side - Views are my own
United Kingdom
Joined July 2021
- Tweets148
- Following198
- Followers24
- Likes317
Coboid retweeted
We are currently hiring a senior threat intelligence analyst on my team within @RecordedFuture’s Insikt Group, which focuses on malicious infrastructure detection. Feel free to reach out if you have questions: boards.greenhouse.io/recorde…
Coboid retweeted
This is SICK
Working on an ultimate natural language to IP context tool powered by @GreyNoiseIO's Enterprise API and @OpenAI's GPT-4 Turbo X Function Calling. If anyone if up for testing this, DM me.
Coboid retweeted
The value of high signal canaries to support detection is evident to those that have benefited from them.
Be they end user orgs, managed service providers or managed security service providers.
Active Directory canaries are 💪 (as are others) at imposing asymmetrical cost.
Happy to release the deployment powershell script for AD Canaries - sorry for the huge latency.
github.com/AirbusProtect/AD-…
Added some new default canary objects such as CertificateTemplate - but you can customize the JSON with any AD object class upon before deployment.
Cheers
Coboid retweeted
1. Swap Variables:
2. Find Maximum Element in a List:
3. Find Minimum Element in a List:
4. List Comprehension:
5. Filter List Elements:
Coboid retweeted
I finally wrote my first blog post. Carving up an #icedid PCAP from @malware_traffic Diving into tshark, pivoting and enriching my way through, hope you enjoy. blog.techevo.uk/analysis/pca…
Coboid retweeted
JA4X on driftnet.io is now public!
All the Qakbot C2s:
driftnet.io/project/new?inpu…
Sliver C2s:
driftnet.io/project/new?inpu…
SoftEther VPNs:
driftnet.io/project/new?inpu…
(click Visible Services for the list)
Let me know if you find something new and interesting!
Coboid retweeted
Microsoft has observed nation-state threat actor Storm-0062 exploiting CVE-2023-22515 in the wild since September 14, 2023. CVE-2023-22515 was disclosed on October 4, 2023. Storm-0062 is tracked by others as DarkShadow or Oro0lxy.
Coboid retweeted
Earlier I was reminded about one of the worst vendor responses I have encountered in my career and it wasn't the typical failed response
So today I wanna share behind the scenes about the time that Yahoo dropped 0day on itself as a response to CVE-2007-3147 & 3148
A long🧵
Coboid retweeted
6 months ago, I started working on a way to better map the #ransomware ecosystem and its evolution, including rebrands.🔎
I am really happy to share this handmade cartography, which is based on @orangecyberdef resources, #OSINT and reverse engineering.
➡️ github.com/cert-orangecyberd…
Coboid retweeted
What does it tell us when real TAs start using the tools we built to emulate them instead of their own tooling?
Coboid retweeted
Our malware database will be moving into beta soon. It will be free and publicly available. We will also open source it.
It is bare bones, but it will allow you to search for malware samples by hash
We did this on a budget of $0. We rely on your donations to survive.
Thank you
Inspired by @troyhunt's power usage heat map, and @OctopusEnergy's really cool API's - I've been hunting for patterns in our energy usage using Python
Coboid retweeted
ANOTHER DAY, ANOTHER PLUG FOR @GreyNoiseIO VIP ACCESS!
Student, hobbyist, home lab-er interested in using GreyNoise? Let the Community team hook you up with full, enterprise level access
[email protected]
Coboid retweeted
Say "Hello" 👋 to the IPinfo ✨FREE✨ IP Data Downloads!
🔹 IP to Country + ASN data
🔹 Updated every 24 hours
🔹 Various formats
🔹 Best accuracy
🔹 Unlimited access
Download the dataset 👉 ipinfo.io/products/free-ip-d…
How this changes the IP game🧵👇
