#DFIR employed. Avid threat hunter. All tweets are my own and not expressive of my employer. Boston sports fan.
Syracuse, NY
Joined October 2014
- Tweets1.2K
- Following476
- Followers201
- Likes2.9K
Dennis Labossiere retweeted
Waiting to see our schedule before getting tickets? The time has come! Our full schedule is now up at bit.ly/4kp0wVz ! Time to get your tickets and start planning your day!
#BSides #BSidesRoc
Dennis Labossiere retweeted
Today is the day! Join @dlabos and @TekDefense today at 1pm ET for an in-depth threat briefing on #ScatteredSpider.
hero.permiso.io/lucr-3-scatt…
Dennis Labossiere retweeted
We're teaming up with KPMG for a threat briefing on LUCR-3(#ScatteredSpider). Join @dlabos and @TekDefense as they walk through the TTPs of this threat actor group in both cloud and on-prem environments and get tips on how to defend against their attacks
hero.permiso.io/lucr-3-scatt…
Dennis Labossiere retweeted
just found out Linux has a feature that’s basically WSL without Windows called the terminal? sounds promising, excited to try it out
Dennis Labossiere retweeted
Batch 2 of #ResponderCon videos are up. They include:
* A #ransomware case study by @dlabos
* Law enforcement panel with FBI, USSS, and @OSINTlabworks
* A ISO/LNK talk by Joseph Edwards at @ReversingLabs.
Lots of good info in these talks!
cybertriage.com/blog/respond…
Dennis Labossiere retweeted
Here’s my quick an dirty lab workout for Detection Engineers. I do this work out 2 to 3 times a week for about 2 hours. #CyberSecurity #infosec #BlackTechTwitter
Dennis Labossiere retweeted
ResponderCon: Listen to @dlabos at @KPMG about responding to a #Ransomware attack at a school. Learn about using EDR, some tricks, and compare to your responses.
Sept 13. Herndon, VA. respondercon.io/register/
Dennis Labossiere retweeted
You're not alone if you're worried about a #ransomware attack. Here's how to approach a ransomware investigation and use all available telemetry to paint a picture.
bit.ly/3OxAmyJ #respondercon
Dennis Labossiere retweeted
Calling all red teamers - how easily do you get by EDR tools? We want to know! Take our 5 minute survey here (for research!): forrester.co1.qualtrics.com/…
Dennis Labossiere retweeted
"Cocaine trafficking in 1992 and ransomware in 2021 share similar profitability metrics; both activities carry +90% profit margins per unit. The major difference lies in the risk taken by the actors."
Check out the new Q3 Ransomware report by @coveware
coveware.com/blog/2021/10/20…
Dennis Labossiere retweeted
Alright, enough #Qbot (#Qakbot) for now. If you're doing an IR right now and Qbot is in the environment make sure you sweep the entire environment for Qbot TTPs.
See the full chain of events⬇️
Dennis Labossiere retweeted
"Svchost.exe" Mind Map covering its cmdline options, logs and "normal" behavior.
Link: github.com/nasbench/MindMaps…
#Detection #BlueTeam #Windows
Dennis Labossiere retweeted
Initial recon steps from Conti CS manual. Literally the first commands in the manual. This should bring comfort to any org that has prioritized pentesting/detection engineering to any degree.
Dennis Labossiere retweeted
Join us at #DFIRSummit when @brianjmoran & @Kev365 will review aspects of Microsoft's User Access Logs (UAL) found on Windows Servers and explore how these logs can be used.
Register now for FREE: sans.org/u/1c8M
#DFIR #IR
Dennis Labossiere retweeted
6/17/21 watch the team that solved the solarwinds breach talk about what happened and how it was done. rsaconference.com/library/we…
Dennis Labossiere retweeted
Your Microsoft Teams chats aren’t as private as you think.. infinitelogins.com/2021/06/0…
Dennis Labossiere retweeted
New blogpost from @_wald0 on BloodHound vs. Ransomware.
Andy explains how #BloodHound can identify how big your attack path problem is, and ways to eliminate some of the most critical attack paths.
posts.specterops.io/bloodhou…