RFI @rfinterference1

I'm sure you have a good reason for giving everyone local admin rights. pewpew.click U.S.A. Joined July 2010

Tweets

235
Followers

34
Following

223
Likes

354

NVIDIA GeForce @NVIDIAGeForce

6 years ago

_ERROR_: Last chance. ⚠ Only a few Cyberpunk2077 Edition RTX 2080 Tis are still available! Want one? 1. RT this photo. 2. Tag a gamer you talk about Cyberpunk 2077 with (use #RTXOn!) in the replies. 3. If selected, you BOTH win the ultimate GPU for playing the game.

22K 19K 19K 0 65

Download Image

Snort 🐷 @snort

6 years ago

Happy Halloween! Snort wants to show off his many costumes, so we are going to give away FIVE of our new Rubik's Cubes! You have 24 hours to retweet this post, and you'll be entered into a drawing to receive one — shipping's on us.

7 281 110 0 1

Download Image

VMware vExpert @vExpert

6 years ago

Those are cool! I want a pair for VMworld. ~Corey

Dan Barr @vDanBarr

6 years ago

Those are cool! I want a pair for VMworld. ~Corey

5 5 58 0 0

Download Image

3 1 33 0 0

RFI @rfinterference1

6 years ago

blogs.technet.microsoft.com/teamdhcp/2015/…

0 0 0 0 0

Jake Williams @MalwareJake

6 years ago

Done: PERHAPS THE SINGLE MOST IMPORTANT THING YOU CAN DO TO PREPARE FOR AN INCIDENT IS TO INCREASE WINDOWS EVENT LOGGING. TURN ON PROCESS AUDITING, POWERSHELL LOGGING, AND DRAMATICALLY INCREASE THE SIZE OF THE EVENT LOGS. DISK SPACE IS CHEAP, USE IT.

Chester Le Bron @123Le_Bron

6 years ago

1 2 34 0 0

23 250 818 0 39

RFI @rfinterference1

6 years ago

This entire thread is great.

0 0 0 0 0

RFI @rfinterference1

7 years ago

Cred harvesters hosted at forms.office.com are all the rage today. #msftsecurity

0 0 1 0 0

Florian Roth ⚡️ @cyb3rops

7 years ago

Difficult: Detection based on content Easy: Detection based on behaviour Is there a legitimate use case in which WINWORD.EXE spawns a cmd.exe ?

8 25 65 0 2

Download Image

RFI @rfinterference1

7 years ago

Advance fee scam using US Military and Iraqi oil. Good times. app.any.run/tasks/91ecf38c…

0 0 0 0 0

Cryptolaemus @Cryptolaemus1

7 years ago

Today's #emotet IoC's/Notes for 11/27/18 - Orange/White template is back. Total of ~130 doc URLs for both epochs with little overlap with yesterday. 4 new payload quintets for each, all hashes and the latest C2s. Final Update. pastebin.com/m98JgpmB paste.cryptolaemus.com/emotet/2018/11…

2 13 23 0 0

Download Image

Keren Elazari @k3r3n3

7 years ago

@joshcorman @Infosecjen @spacerog i wish HNN was back on! Loved it

0 3 7 0 0

Eva Infeld (find me on better networks already) @evainfeld

8 years ago

As soon as you give people a metric they're judged by, they optimize for that metric rather than do quality work. This one sentence sums up much of toxicity in corporations, academia, even education. So simple.

86 2K 5K 0 107

🌴Sardonic Tart🌴 @SardonicTart

10 years ago

If your lawyer has an AOL e-mail address, you're going to jail.

9 481 807 0 1

RFI @rfinterference1

8 years ago

Thanks Jake for a great presentation.

BreachQuest @BreachQuest

8 years ago

Thanks Jake for a great presentation.

0 2 6 0 0

0 0 0 0 0

Jake Williams @MalwareJake

8 years ago

Have you done forensics on Office365? Obviously the people in the Air Force making this decision have not...

8 16 65 0 4

Jake Williams @MalwareJake

8 years ago

Analyst goes form false positive to false negative and back to false positive all in a span of 15 seconds. This is what working in a SOC is like.

4 127 296 0 4

Download Video

RFI @rfinterference1

8 years ago

Why has no one made a decent USB-c USB 3 desktop hub? Something with usable spacing between ports that doesn't flip upside down if you plug a cable in. Go ahead and put headphone and mic ports on it too.