ORION @ORION_Hunts

I don't always have opinions, but when I do I express views that are mine alone and not necessarily those of my employer. Joined August 2016

Tweets

27
Followers

39
Following

837
Likes

331

Red Canary, a Zscaler company @redcanary

2 years ago

The 2024 Threat Detection Report is out! Featuring actionable insights for the most prevalent cyber threats and ATT&CK techniques your security team is likely to encounter. Read the full report now: redcanary.com/threat-detecti…

4 37 108 13K 25

Download Image

ORION @ORION_Hunts

2 years ago

1995: MGM releases Hackers 2023: Hackers ransom MGM 2051: ??? 🍿

0 0 1 191 0

Harrison Van Riper @pseudohvr

2 years ago

I started a company! 🥳 With the advancements in AI and the need for fresh solutions to cybersecurity challenges, I've started Apollo AI (@goapolloai). 🧵 Our goal is to make users more effective and efficient without learning new complex systems and processes.

3 9 30 8K 3

Red Canary, a Zscaler company @redcanary

2 years ago

Make threat research and testing on Macs easier with Red Canary Mac Monitor. Now everyone can have a research test-bed that provides EDR-like monitoring and system event analysis for free. redcanary.com/blog/mac-monit…

1 22 42 13K 7

Red Canary, a Zscaler company @redcanary

3 years ago

The 2023 Threat Detection Report is out! Here are the top 10 threats we observed across our customer environments last year. How does this compare with what you observed? redcanary.com/resources/guid…

1 60 170 64K 38

Download Image

Red Canary, a Zscaler company @redcanary

5 years ago

The Red Canary 2021 Threat Detection Report is now available. Use this in-depth look at the most prevalent ATT&CK® techniques to help you and your team focus on what matters most. bit.ly/3m825JW

7 99 369 0 29

Red Canary, a Zscaler company @redcanary

5 years ago

Red Canary's @likethecoins and @ForensicITGuy will be discussing our recent Silver Sparrow research, including what we've learned since publishing. Tune in at 2pm EST today!

5 24 63 0 3

Download Image

Red Canary, a Zscaler company @redcanary

5 years ago

Seeing some interesting #Gootkit activity of late, with new tradecraft deviating slightly from historical observations. This thread includes descriptions of behavioral analytics that might offer security teams opportunities for detection. #RCintel

1 5 11 0 0

Download Image

Red Canary, a Zscaler company @redcanary

5 years ago

Considering the spate of recent ransomware incidents affecting hospitals, we decided to share the ten detection analytics that helped us stop one earlier this month. redcanary.com/blog/how-one-h… #Ryuk

8 67 199 0 19

Red Canary, a Zscaler company @redcanary

5 years ago

We're monitoring a threat we've dubbed "Blue Mockingbird" that is deploying Monero cryptocurrency-mining payloads on Windows machines at multiple organizations. bit.ly/2WyXJz3

1 15 32 0 1

Download Image

ORION @ORION_Hunts

6 years ago

#linuxhunting

Red Canary, a Zscaler company @redcanary

6 years ago

#linuxhunting

1 25 51 0 6

Download Image

0 0 0 0 0

Red Canary, a Zscaler company @redcanary

6 years ago

We detected an adversary deleting VSS files on a handful of endpoints as part of a recent #ransomware scheme. This detection kept a bad situation from getting worse and scored our customer a win from the midst of a losing situation. hubs.ly/H0knxKb0

1 5 10 0 1

Download Image

Red Canary, a Zscaler company @redcanary

6 years ago

Researchers @SubTee and @rw_access demonstrated how to threat hunt for the unknown—and disclosed a new attack technique in the process—at #BHUSA this afternoon. hubs.ly/H0k9XDD0

0 15 43 0 3

Download Image

Red Canary, a Zscaler company @redcanary

6 years ago

Adversaries commonly host attack infrastructure on Pastebin. Most of it's mundane, but sometimes—if you’re willing to examine a long and convoluted sequence of scripts—you can find a persistent Linux backdoor concealing itself with steganography. hubs.ly/H0h-_1r0

0 9 15 0 0

Download Image

Conor Richard @xenosCR

6 years ago

Just published a tool that I hope will be useful for Red/Blue/Purple teams that are interested in automating MITRE ATT&CK methods. The script will convert @redcanaryco Atomic Red Team YAML files to @MITREcorp Caldera Stockpile ability YML files. Enjoy! github.com/xenoscr/Atomic…

3 86 197 0 21

Red Canary, a Zscaler company @redcanary

7 years ago

Any security team that's working to adopt @MITREattack should consider these four free and compatible tools: hubs.ly/H0hvPwS0

2 54 138 0 17

Download Image

Olaf Hartong @olafhartong

7 years ago

I've posted a small blog post titled Keeping an eye out for detection content here medium.com/@olafhartong/k… #DFIR #ThreatHunting #BlueTeam #SIEM accompanied by a git repo github.com/olafhartong/de…

3 67 130 0 15

Download Image

ORION @ORION_Hunts

7 years ago

This is awesome.

ATT&CK @MITREattack

7 years ago

This is awesome.

7 298 412 0 25

Download Image

0 0 0 0 0

ORION @ORION_Hunts

7 years ago

Awesomeness! If you work in a SOC, map all of your use cases to ATT&CK, run the Atomic Tests to validate existing logic and reveal gaps in coverage where you don't have detection. Wash, rinse, repeat.