mikecybersec @mikecybersec

Tweets

188
Followers

67
Following

119
Likes

2K

spencer @techspence

5 months ago

If you're not getting the answers you're looking for, change the questions you're asking... "Is PingCastle detected?" is the wrong question... "Is Active Directory enumeration detected?" is better... "Is high volume enumeration of the Domain Administrators group from a…

11 13 175 18K 73

mikecybersec @mikecybersec

6 months ago

tokesi.cloud/blogs/25_04_17…

0 0 0 69 0

Jack Rhysider 🏴‍☠️ @JackRhysider

8 months ago

Everyone gangsta until the SIEM starts alerting at 4:59 PM on Friday

73 192 2K 64K 79

mikecybersec @mikecybersec

9 months ago

Bring back @5pmIncident

0 0 0 88 0

mikecybersec @mikecybersec

10 months ago

Good advice but to add context... Legitimate apps and tools use Axios, we're seeing commercial/sales teams who use PipeDrive will also produce Axios UAs in AAD Audit. Be careful before locking out your clients sales directors 👀

Bert-Jan 🛡️ @BertJanCyber

10 months ago

0 22 106 9K 76

0 0 2 174 0

Cerbersec @cerbersec

11 months ago

nc -lvnp 4444 python -c 'import pty; pty.spawn("/bin/bash")'

30 219 2K 145K 531

Download Image

mikecybersec @mikecybersec

11 months ago

A (slightly) fraudulent win considering I've taken the course before, however, a coin is a coin, right 🤣🤌🏼

0 0 0 50 0

Download Image

rekdt @rekdt

11 months ago

*Unmutes* …..”Thanks, everyone.” *leaves meeting*

14 726 12K 392K 407

Download Image

Ash @_bin_Ash

a year ago

As I've aged into offensive work, the value of certs has diminished for me compared to a solid methodology Delivering a quality assessment is so different from cert material. Maybe there's room for a course that guides you through an assessment start to finish? (Reporting too?)

4 3 42 4K 9

vx-underground @vxunderground

a year ago

Logging into Xitter and seeing thousands upon thousands of people, who have never written a single line of code their entire life and can barely use a computer, giving their expert input into kernel-mode programming

134 585 7K 284K 243

Download Image

mikecybersec @mikecybersec

a year ago

The amount of misinformation about the CS outage is wild 🤡

1 0 1 111 0

vx-underground @vxunderground

a year ago

"We need you to come info the office and help us find all the BitLocker keys"

50 1K 10K 304K 681

Download Video

mikecybersec @mikecybersec

a year ago

I made a container version of @SecurityYamato #Hayabusa, enjoy 🤟🏼 hub.docker.com/repository/doc…

0 0 2 54 0

ᴉpᴉǝH 🐐💕 @summer__heidi

a year ago

5 27 205 21K 13

Download Image

mikecybersec @mikecybersec

a year ago

Yeee boi, sponsoring @bsidesncl, stoked to be at an org that supports and gets involved as much as we do!

BSidesNCL (Newcastle upon Tyne, UK) @bsidesncl

a year ago

Yeee boi, sponsoring @bsidesncl, stoked to be at an org that supports and gets involved as much as we do!

1 0 5 258 0

0 0 2 156 0

mikecybersec @mikecybersec

a year ago

Had fun at BSides Leeds! Shared some tips on how to catch cyber crims.

0 0 4 202 0

Download Image

mikecybersec @mikecybersec

a year ago

One for the SOC/MDR peeps. When you detect a burst of activity in a customer environment and reach a verdict that it's benign, but the detections were accurate. Do you still notify your customers?