Picture

Josh Lemon @joshlemon

Chief DIFR at @SoteriaSec_io | @SANSInstitute Principal Instructor & Author | Digital Forensics & Incident Response geek joshlemon.com.au Australia Joined September 2009
  • Tweets
    3K
  • Followers
    2K
  • Following
    1K
  • Likes
    3K
Josh Lemon retweeted
SoteriaSec_io Profile Picture

SoteriaSec @SoteriaSec_io

2 months ago

It's time to update your detections if you haven't been looking for WebShells on your #SharePoint server. 🕵‍ Make sure you're detecting w3wp.exe > cmd.exe > PowerShell.exe Although really, cmd.exe being spawned by your SharePoint server really needs a thorough review.

Josh Lemon retweeted
msftsecresponse Profile Picture

Microsoft Security Response Center @msftsecresponse

2 months ago

Microsoft has released security updates that fully protect customers using all supported versions of SharePoint affected by CVE-2025-53770 and CVE-2025-53771. These vulnerabilities apply to on-premises SharePoint Servers only. Customers should apply these updates immediately to…

Josh Lemon retweeted
ACEResponder Profile Picture

ACE Responder @ACEResponder

3 months ago

How DCOM lateral movement works. #ThreatHunting #DFIR

Josh Lemon retweeted
ACEResponder Profile Picture

ACE Responder @ACEResponder

4 months ago

Windows Logon Types #ThreatHunting #DFIR

joshlemon Profile Picture

Josh Lemon @joshlemon

5 months ago

Here's an update on the data breach of court documents from the NSW JusticeLink website. tl;dr - it was an individual that was able to download +9k documents over two months, it doesn't appear they were leaked anywhere publicly. theguardian.com/australia-news…

Trends for United States

Jane Goodall
49 B posts
Xbox
81,9 B posts
Rashford
28,4 B posts
Nuno Mendes
23 B posts
Santana
17,4 B posts
Halloween
188 B posts
Ferran
17,8 B posts
Martinelli
11,7 B posts
#Overwatch2Sweepstakes
1.845 posts
Pope
59,7 B posts
Yom Kippur
33,9 B posts
Tim Herrin
McKinstry
Demercado
1.572 posts
Microsoft
45,1 B posts
Olmo
8.221 posts
Bibee
2.631 posts
Ubisoft
9.415 posts
Odegaard
5.416 posts
Michael Carter

You might like

KAPE, EZTools, forensics, X-Ways. Certified SANS instructor. FFL Please consider supporting me: https://t.co/pIjxED3CMx
Eric Zimmerman
@EricRZimmerman
19K Followers
DFIR & malware analyst. @sansforensics FOR528 Author & FOR610 Instructor. @CactusCon crew. Husband & father. Comments = own.
Ryan "Chaps" Chapman
@rj_chap
8K Followers
The official Twitter account for 13Cubed. Follow @davisrichardg for my personal account.
13Cubed
@13CubedDFIR
7K Followers
The Digital Forensics Research Conference is dedicated to the sharing of knowledge and ideas about digital forensics research.
DFRWS
@DFRWS
5K Followers
@FalconForceTeam | researcher with a camera | Microsoft MVP | Snow man role model
Olaf Hartong
@olafhartong
17K Followers
An Aussie who does cyber things | Sr. Threat Hunting Manager @HuntressLabs | Former Principal @CrowdStrike and HuntressLabs
Jai Minton
@CyberRaiju
8K Followers
This Week in 4n6 // ThinkDFIR // SANS // CyberCX (DFIR) https://t.co/vLyL2sxTuy I might not know much, but I do know how to Google Tweets are mine
Phill Moore
@phillmoore
9K Followers
Digital Forensics and Incident Response Professional, SANS Instructor, Maker and VR Gamer
Mari Degrazia
@maridegrazia
8K Followers
Co-Founder @recon_infosec | SANS DFIR Instructor | IANS Faculty | https://t.co/yUXCSu2Yso | ⬡ ❤ @shortxstack
Eric Capuano - Bsky: ...
@eric_capuano
11K Followers
#DFIR & #DFIRFit geek, SANS Author/Instructor #FOR308, Instructor #FOR500. All opinions mine.
Kathryn Hedley
@4enzikat0r
3K Followers
Something with IR and Intelligence @InfoGuardAG, Certified Instructor and author @SANSInstitute (@SANSEMEA), Former Principal IR Consultant @Mandiant
Mathias Fuchs
@mathias_fuchs
3K Followers
Husband, Father, #DFIR @ Unit 42, Digital Forensics Discord Admin, AboutDFIR Contributor, Author, #USMC Veteran, Former LE, NHL Fan, Dark Mode, Animals, Music
Andrew Rathbun
@bunsofwrath12
3K Followers
williballenthin@mastodon.social
Willi Ballenthin
@williballenthin
7K Followers
Course Author SEC573/SEC673, SANS Faculty Fellow, GSE #15, Founding @AugustaISSA President, @BSidesAugusta, Redeemed,CISO,developer,net/sys admin,soldier
Mark Baggett
@MarkBaggett
10K Followers
Threat Researcher | Co-Host of Atomics on a Friday | LOLDrivers & Atomic Red Team Maintainer | I'm Everywhere and Nowhere - BSG.
The Haag™
@M_haggis
9K Followers