Alek Rollyson @_forkbomb

Cloud Security | Former @Mandiant, @DeptofDefense, @Rapid7, @ascend_innovate ~/ Joined April 2013

Tweets

48
Followers

73
Following

1K
Likes

58

christina @cszhu

4 years ago

oh you have a weighted blanket? haha that's cute, I sleep with the crushing weight of all the shitty code I wrote years ago still running in production

105 889 10K 0 185

Genie: You have 3 wishes Me: I wish the status page was updated more often. Genie: Granted. There will be more outages. What else? Me: 😱 ... I wish AWS support was more helpful. Genie: Granted. They have read access to all your data now. Me: 😱 I'm not doing this anymore. 😭

8 88 493 0 7

Sera Brocious @daeken

4 years ago

Why am I not selling hacked info/software on minidiscs I store in a hollowed-out book? I'm disappointing 12 year old me so bad.

15 72 745 0 9

Kate ¯\_(ツ)_/¯ @bundtkate4

4 years ago

If a tree falls in the forest but everyone is running Linux does it still make a sound?

53 99 799 0 11

Kelly Villanueva @kellthenoise

4 years ago

Here are some Kerberos visuals to describe authentication/authorization and their offensive scenarios Here are some of the acronyms I used: - Ticket-Granting-Ticket (TGT) - domain controller (DC) - ticket-granting service ticket (TGST) - krbtgt (Kerberos ticket-granting service)

11 262 864 0 258

Download Image

HAMZA @Cyb3rSn0rlax

4 years ago

As promised, a mind map of Cobalt Strike's lateral movement default capabilities artifacts is now available in the #DFIRMindMaps GitHub project maintained by @bunsofwrath12 (Thanks for the merge Andrew) : ▶️github.com/AndrewRathbun/…

HAMZA @Cyb3rSn0rlax

4 years ago

6 136 398 0 72

Download Image

7 245 658 0 161

Download Image

Scott Piper @0xdabbad00

4 years ago

"AWS’ temporary event account solution, but the 72 hour expiration policy..." Hold up, AWS provides a mechanism for temporary accounts, but you can only get access to it by hosting remote controlled car competitions?!?

What's New on AWS (Unofficial) @awswhatsnew

4 years ago

0 0 6 0 1

1 3 34 0 1

DevOps Borat @DEVOPS_BORAT

15 years ago

To make error is human. To propagate error to all server in automatic way is #devops.

39 4K 4K 0 114

Chris Sanders 🔎 🧠 @chrissanders88

4 years ago

Hey Folks -- We (@RuralTechFund) are trying to help a teacher in Montana fund a project that would bring tech, coding, and engineering classes to their school for the first time. We're about $3K short, and could use some help fundraising. If you want to help...

4 51 61 0 1

ɯɹoʇsuoı @ionstorm

4 years ago

Who is ready for a high performance Sysmon EDR based on Powershell? ✅MITRE ATT&CK ✅Yara Scanning ✅Kill Parent and all Child Processes ✅Kill Network Connections ✅Firewall Processes ✅Kill Parent/Child Processes ✅Notifications github.com/ion-storm/sysm… .\install_edr.ps1

8 175 375 0 77

Download Gif

Open Threat Research @OTR_Community

4 years ago

Sharing @Mordor_Project datasets for "Getting AD FS Database Config Remotely" (Security, Sysmon & PCAP) @Cyb3rWard0g 🍻🙏 mordordatasets.com/notebooks/smal… 1⃣ A few tool-based comments at the host level 2⃣ Group hosts & processes connecting to AD FS server over port 80 (Usually 443)

Dr. Nestori Syynimaa @DrAzureAD

4 years ago

6 133 273 0 29

Download Image

3 41 73 0 17

Download Image

Red Canary, a Zscaler company @redcanary

5 years ago

Introducing VSCode-ATT&CK, a new open source plug-in that lets you query the @MITREattack framework without clicking out of your code editor. bit.ly/3g9epIU

8 154 509 0 44

Chris Sanders 🔎 🧠 @chrissanders88

5 years ago

And here's the breakdown of donations: RTF - $13615 Give Directly - $4440 Food Banks (16 countries) - $28050 $46105 total All that x2 with my match, which will be completed over the course of the next few days. Grant Total: $92210

4 2 20 0 0

Chris Sanders 🔎 🧠 @chrissanders88

5 years ago

Make a donation of at least $20 to @RuralTechFund here: ruraltechfund.org/donate/ OR @GiveDirectly here: givedirectly.org OR Your local food bank. Every $20 you donate is another chance to find the golden ticket.

1 4 15 0 0

Alek Rollyson @_forkbomb

5 years ago

Thanks for the merge @blubbfiction. Looking forward to that SigmaString class you mentioned

Florian Roth ⚡️ @cyb3rops

5 years ago

Thanks for the merge @blubbfiction. Looking forward to that SigmaString class you mentioned

0 10 34 0 3

0 1 1 0 0

Chris Sanders 🔎 🧠 @chrissanders88

6 years ago

I'm doing research for my next book and I'd love to talk to you if: - You've used honeypots/tokens to successfully catch bad guys - You've been caught by honeypots/tokens as a pen tester - You've used a non-typical type of deception tech to do cool things RTs appreciated

24 176 164 0 3

Chris Sanders 🔎 🧠 @chrissanders88

6 years ago

I'm excited to share a new research paper that @techieStef and I spent the past several months working on. We explored the relationship between analyst's use of divergent/convergent thought, intuition, and creative problem solving. Get the paper here: bit.ly/AnalystCreativ…