Picture

I break Windows.... @DFIRdeferred

Spec Ops Army Vet, Ham Extra (satellites, sdr, dmr), Team Purple, Wireless Wizard, Creator of Identity Security Village trimarcsecurity.com United States Joined May 2020
  • Tweets
    433
  • Followers
    512
  • Following
    452
  • Likes
    1K
DFIRdeferred Profile Picture

I break Windows.... @DFIRdeferred

7 months ago

Super stoked to share that @JimSycurity and I will be leading an Active Directory Security course at BSides Charm 2025! We will cover Active Directory infrastructure, common misconfigurations, vulnerabilities and mitigations, and hands-on labs!

I break Windows.... retweeted
DrAzureAD Profile Picture

Dr. Nestori Syynimaa @DrAzureAD

9 months ago

New #AADInternals version is finally out now: ▪ Moved endpoint related stuff to new module: AADInternals-Endpoints ▪ Added blue team stuff: Get app consent info, find backdoors, convert SID<>Entra ID Object ID, find abusable dynamic groups ▪ Added red team stuff: Get ESTSAUTH…

DFIRdeferred Profile Picture

I break Windows.... @DFIRdeferred

10 months ago

Make sure you stop by the @TrimarcSecurity ISV (Active Directory Hacking) today at @hthackers Hackers Teaching Hackers. There might even be a second CTF flag there if you know where to look.....

I break Windows.... retweeted
fabian_bader Profile Picture

Fabian Bader @fabian_bader

11 months ago

Do you allow your high privileged users in Entra ID (e.g. Global Admin) to register authentication methods themselves after initial setup? Do you, to detect malicious actions, monitor the addition of e.g. passkeys and follow up with the user?

I break Windows.... retweeted
TrimarcSecurity Profile Picture

Trimarc @TrimarcSecurity

11 months ago

When it comes to Active Directory Security Descriptors, ignorance is NOT bliss... it can be a full-on SLASHER FLICK of misconfigurations 🔪 This Thursday, @JimSycurity shares insights we've learned across thousands of AD & Entra ID security assessments -- Tips that can arm you…

DFIRdeferred Profile Picture

I break Windows.... @DFIRdeferred

11 months ago

New project: FlameScale OS. An operating system aimed at Active Directory/Windows security research. I will be adding more functionality weekly on Sundays. Get your hands dirty with it at the @TrimarcISV (AD Hacking Village) at @hthackers Nov 13th-15th. github.com/dfirdeferred/F…

DFIRdeferred Profile Picture

I break Windows.... @DFIRdeferred

11 months ago

I created a wrapper/menu to make downloading and opening all of the @TrimarcSecurity tools on github easier and in one place. Just run the script and select which tool you want to download/open. github.com/dfirdeferred/T… #trimarc #activedirectory

DFIRdeferred Profile Picture

I break Windows.... @DFIRdeferred

11 months ago

Need a quick set of useful red/purple team Active Directory tools .....and happen to be running a Debian based distro......? Well look no further! Here are 2 scripts to save you 3 seconds. #activedirectory github.com/dfirdeferred/R…

DFIRdeferred Profile Picture

I break Windows.... @DFIRdeferred

11 months ago

Im stoked to be presenting my new tool! See you all this week!

TrimarcSecurity Profile Picture

Trimarc @TrimarcSecurity

12 months ago

Im stoked to be presenting my new tool! See you all this week!

DFIRdeferred Profile Picture

I break Windows.... @DFIRdeferred

11 months ago

Wild Wild West Hackin Fest is right around the corner! Im so ready for some good ol' "Break and Make!"

TrimarcSecurity Profile Picture

Trimarc @TrimarcSecurity

11 months ago

Wild Wild West Hackin Fest is right around the corner! Im so ready for some good ol' "Break and Make!"

DFIRdeferred Profile Picture

I break Windows.... @DFIRdeferred

12 months ago

Make sure you stop by the @TrimarcSecurity table at @GrrCON to start getting directly active with your Active Directory security! #grrcon

DFIRdeferred Profile Picture

I break Windows.... @DFIRdeferred

12 months ago

GrrCON is right around the corner! See you there!

TrimarcSecurity Profile Picture

Trimarc @TrimarcSecurity

12 months ago

GrrCON is right around the corner! See you there!

DFIRdeferred Profile Picture

I break Windows.... @DFIRdeferred

12 months ago

I had a blast speaking at @BSidesCT last weekend. What an awesome conference! I cant wait to see whats in store for next year.

I break Windows.... retweeted
PyroTek3 Profile Picture

Sean Metcalf @PyroTek3

12 months ago

Slides from my @MCTTP_Con talk "A Decade of Active Directory Attacks - What We've Learned & What's Next" are now posted: trimarc.co/SeanTalkMCTTP2…

DFIRdeferred Profile Picture

I break Windows.... @DFIRdeferred

12 months ago

I can't wait!

TrimarcSecurity Profile Picture

Trimarc @TrimarcSecurity

12 months ago

I can't wait!

DFIRdeferred Profile Picture

I break Windows.... @DFIRdeferred

a year ago

See you @BlueTeamCon in T-2 days!

I break Windows.... retweeted
PyroTek3 Profile Picture

Sean Metcalf @PyroTek3

a year ago

If you have VMware ESXi and Active Directory in your environment, take 5 minutes now & create a group in each AD domain called "ESX Admins". Make sure that the "ESX Admins" group is in a top-level administrative OU that only your AD admins manage. #QuickFix

PyroTek3 Profile Picture

Sean Metcalf @PyroTek3

a year ago

If you have VMware ESXi and Active Directory in your environment, take 5 minutes now & create a group in each AD domain called "ESX Admins". Make sure that the "ESX Admins" group is in a top-level administrative OU that only your AD admins manage. #QuickFix

I break Windows.... retweeted
PyroTek3 Profile Picture

Sean Metcalf @PyroTek3

a year ago

Hacker Summer Camp is just a couple weeks away & the Trimarc crew will be there! Trimarc Activities: * Office Hours (me) * Lightning Talks (@TechBrandon & me) * Microsoft Identity security Meet-up Want to join us? Signup here: trimarcsecurity.com/vegas-show *limited availability

I break Windows.... retweeted
PyroTek3 Profile Picture

Sean Metcalf @PyroTek3

a year ago

One thing we highlight with customers during assessments are agents installed on DCs. I’ve seen a poorly configured Tanium query hang every DC - effectively a DoS since AD doesn’t work if you can’t talk to a DC. It’s time to talk about what agents are on DCs & the risks

UK_Daniel_Card Profile Picture

mRr3b00t @UK_Daniel_Card

a year ago

One thing we highlight with customers during assessments are agents installed on DCs. I’ve seen a poorly configured Tanium query hang every DC - effectively a DoS since AD doesn’t work if you can’t talk to a DC. It’s time to talk about what agents are on DCs & the risks

I break Windows.... retweeted
DrAzureAD Profile Picture

Dr. Nestori Syynimaa @DrAzureAD

a year ago

ADCS attack paths with #BloodHound by @_wald0 and @Jonas_B_K

Trends for United States

Bears
147 B posts
Caleb
84,1 B posts
JJ McCarthy
44,1 B posts
#Skol
17 B posts
Ben Johnson
21,2 B posts
MMTFinance
13 B posts
Tanner Scott
2.412 posts
DJ Moore
5.752 posts
#WWERaw
87,9 B posts
#MINvsCHI
4.761 posts
Justin Jefferson
10,8 B posts
Kevin O'Connell
2.806 posts
yunho
12,5 B posts
With Giverep
12,6 B posts
Bagent
1.645 posts
Through Giverep
2.072 posts
Cairo Santos
1.534 posts
Glasnow
2.623 posts
Cyrene
78,5 B posts
Marlon
10,9 B posts

You might like

Blue Team Con is an annual cybersecurity conference built for defenders, inclusive of anyone interested in safeguarding organizations. | 4-7 September 2025
Blue Team Con
@BlueTeamCon
11K Followers
rebel scum, nerfherder, dogged and relentless. H/P/V/A/C Directory - https://t.co/qn0D9H7IIi
nyxgeek
@nyxgeek
7K Followers
CyberNinjaCat Herder. VP of product strategy for the Microsoft Sentinel and Defender suite. Opinions r my own
Nıŋʝąƈąɬ 🐈 ...
@RavivTamir
4K Followers
Trying to hack the way we hack things 🏴‍☠️
Charlie Bromberg « ...
@_nwodtuhs
15K Followers
Recovering sysadmin that now chases adversaries instead of uptime. Sr Malware Analyst @redcanary
Tony Lambert
@ForensicITGuy
6K Followers
Antisyphon Training is here to disrupt the traditional training industry by providing high-quality and affordable education to everyone.
Antisyphon Training
@Antisy_Training
6K Followers
Microsoft Threat Intelligence Center - Former Incident Responder & Chief Security Architect @Mandiant
Christopher Glyer
@cglyer
24K Followers
Hacking the planet at https://t.co/ifUgKQtEYV. Buy me a vinyl at https://t.co/SO41y55HJL
spotheplanet
@spotheplanet
11K Followers
Hacker at @OutsiderSec. Researches AD and Azure (AD) security. Likes to play around with Python and write tools that make work easier.
Dirk-jan
@_dirkjan
28K Followers
CEO and Co-Founder of Octopwn
SkelSec
@SkelSec
12K Followers
Director of Kindness and Generosity @BHInfoSecurity ~ lover of Jesus ~ wife of a mountain man ~ mom of 4 wiglets ~ friend of many ~ fan of humans & adventure
Deb Wigley 🥰🇺�...
@debthedeb
2K Followers
Director @BlueTeamVillage & Mentoring Lead; Cloud Security Eng/Arch/R&I; MS, Computer Science; #StarTrek; she/her 🏳️‍🌈 mastodon: @muteki@infosec.exchange
muteki ☁️ muteki@...
@muteki_rtw
2K Followers
VP of Research - @netspi Co-author of “Penetration Testing Azure for Ethical Hackers” (https://t.co/R8AjWWbSyj). @kfosaaen on most other platforms
Karl
@kfosaaen
5K Followers
Managed Security Operations #MSO provider serving gov't, enterprise and critical infrastructure
Recon InfoSec
@Recon_InfoSec
10K Followers
Hunt & Response Senior Manager @HuntressLabs ||
Dray Agha
@Purp1eW0lf
6K Followers