DFIR, skiing, & aviation nerd. Co-author of Learning Python for Forensics & Python Forensics Cookbook.
Joined July 2011
- Tweets570
- Following822
- Followers547
- Likes1.3K
The compromise of axios is another reminder to configure your package manager to use a minimum release age.
Not a perfect solution but provides folks a few days to catch and respond to a supply chain attack.
stepsecurity.io/blog/axios-c…
From postalcoder in news.ycombinator.com/item?id…:
~/.config/uv/uv.toml
exclude-newer = "7 days"
~/.npmrc
min-release-age=7
ignore-scripts=true
~/Library/Preferences/pnpm/rc
minimum-release-age=10080
~/.bunfig.toml
[install]
minimumReleaseAge = 604800
Excited to present Luminaut.org at #BSidesLV & #BlackHat Arsenal 2025! Our open-source tool helps incident responders quickly identify exposed cloud resources and scope shadow IT environments. From #AWS to #GCloud, get critical context in minutes
Announcing Luminaut! An open-source utility for triaging exposed cloud resources from the inside-out.
Check it out at: luminaut.org
Big thanks to everyone who joined our Shmoocon talk this year!
Thrilled to speak at Shmoocon this year with @brittneylynae! We’ll be presenting Luminaut, our open-source tool for detecting exposure of cloud resources from the inside-out to uncover PoC and shadow IT environments.
shmoocon.org/speakers/#shado…
Check out our talk, in person at the Build It track at 2:30p on Saturday, or online through the stream!
More details here: shmoocon.org/speakers/#shado…
This Post is from an account that no longer exists. Learn more
Thrilled to speak at Shmoocon this year with @brittneylynae! We’ll be presenting Luminaut, our open-source tool for detecting exposure of cloud resources from the inside-out to uncover PoC and shadow IT environments.
shmoocon.org/speakers/#shado…
If you pick up the Python Digital Forensics Cookbook at the #shmoocon book swap today, find me in the floopy disk repair co shirt and I will sign the copy for you
Chapin Bryce retweeted
Intriguing conclusion from this study of micromobility users in Barcelona:
"Shared bikes have a higher potential [than privately owned e-scooters] to keep users away from cars."
doi.org/10.1016/j.tranpol.20… – at Sylva, NC
Anyone tried out sccache yet? Curious about leveraging the remote storage option to speed up CI tasks github.com/mozilla/sccache
This novel web shell “hijacks the underlying Apache Tomcat webserver and silently inserts itself between Confluence and Tomcat–making itself available on every webpage ...”
Interesting CVE-2023-22515 post-exploit behavior discovered by @StrozDFIR
aon.com/cyber-solutions/aon_… #dfir
“… patching Confluence to address CVE-2023-22515 and CVE-2023-22518 will not remediate the web shell if it has been deployed.”
See the blog post for insights on identification of this web shell on your #Confluence server.
BSidesCT is Sept 30th at Quinnipiac - tickets on sale now! #dfir #infosec #CyberSecurity. #CFP open until Sept 6!
Tickets are now live! Get yours here: bsidesct.org/#Tickets
#BSidesCT #infosec #cybersecurity #hacking #conference #connecticut #SecurityBSides
Chapin Bryce retweeted
Reminder that bsidesct.org/#CallForPapers is open , get your papers in! #bsides #cybersecurity #Hacking #infosec #CFP. Also looking for people interested in submitting CTF challenges.
Chapin Bryce retweeted
CALL FOR PAPERS NOW OPEN!!!!!
bsidesct.org/#CallForPapers
