Adam G. @writingadam

what does a scanner see? New York City Joined September 2012

Tweets

182
Followers

968
Following

179
Likes

10

Nick @kulinacs

a year ago

Excited to share the (now patched) AKS Privilege Escalation we found! cloud.google.com/blog/topics/th…

2 11 25 4K 4

🚨📝 New #FIN7 threat research blog, "Power Hour", published today by @Mandiant. Please enjoy 🌶🌶 mandiant.com/resources/evol… Blog includes: - FIN7 archaeology & evolution ⛏ - #POWERPLANT deep dive - BIRDWATCH (~#JssLoader) - Supply chain (😱) neat stuff in thread 🧵⤵️

4 62 122 0 18

b33f | 🇺🇦✊ @FuzzySec

7 years ago

SilkETW is now available ✍️🧐💡! Check out my short introduction post here => fireeye.com/blog/threat-re…, you can find the code on the @FireEye GitHub => github.com/fireeye/SilkETW

10 230 412 0 38

Download Image

Kimberly @tiskimber

7 years ago

Well covered that Ryuk ❌ NK in blogs by @kryptoslogic @McAfee_Labs @Malwarebytes @CrowdStrike. Here we share an example of an initial infection vector, more details on how Ryuk has been deployed, and some info on the observed TrickBot gtags fireeye.com/blog/threat-re…

0 8 21 0 1

Matthew Dunwoody @matthewdunwoody

7 years ago

New post is up! We pick apart the latest probable #APT29 phishing campaign and the nuance involved in dealing with, and attributing to, deceptive attackers. Written with @QW5kcmV3, @ItsReallyNick, @matonis, @jonleathery. Credit to @BarryV for the title. fireeye.com/blog/threat-re…

8 118 196 0 15

Download Image

Nathan Brubaker @NathanBrubaker

7 years ago

HOT OFF THE PRESS: Read our @FireEye_Intel #TRITON attribution blogpost tying TRITON actors to CNIIHM, a Russian Government-Owned research institute. fireeye.com/blog/threat-re…

1 6 8 0 1

Nathan Brubaker @NathanBrubaker

7 years ago

In our new @FireEye blog post we analyze some of the most frequent ICS security risks observed in the field during @Mandiant ICS Healthcheck assessments. It is good to have some on-the-ground data to test commonly cited areas of ICS risk. fireeye.com/blog/threat-re…

0 8 15 0 2

Willi Ballenthin @williballenthin

7 years ago

Stymied by my own #flareon5 challenge, so I developed idawasm: An IDA Pro loader and processor for WebAssembly. details: fireeye.com/blog/threat-re…

4 97 185 0 4

Michael Sikorski @mikesiko

7 years ago

Get ready for the 5th Annual FLARE On Challenge!!! #flareon5 fireeye.com/blog/threat-re…

8 157 211 0 3

Steve YARA Synapse Miller @stvemillertime

7 years ago

The TRITON origin story is a still mystery with lots of missing pieces. @reesespcres and I did some poking and found some overlaps with legit Triconex DLLs. Nothing mind blowing, but still cool: fireeye.com/blog/threat-re… #tristation #triton #tubular

1 47 58 0 2

Doug Bienstock @doughsec

7 years ago

Check out my blog post and tool release on OAuth Abuse! OAuth abuse is a social engineering technique that's managed to stay relatively under the radar until now. fireeye.com/blog/threat-re…

1 20 45 0 0

RANDI @_idnar

8 years ago

#Blockchain domains as malicious infrastructure. fireeye.com/blog/threat-re…

1 18 19 0 1

Daniel Bohannon @danielhbohannon

8 years ago

After 9 months Invoke-DOSfuscation is finally released!! There is a lot of information for detection in the white paper, and the Invoke-DosTestHarness function is exactly what I used for detection dev & tuning. Code: github.com/danielbohannon… White paper: fireeye.com/blog/threat-re…

27 453 733 0 30

Christopher Glyer @cglyer

8 years ago

Breaking: @Mandiant releases details on malware targeting critical infrastructure fireeye.com/blog/threat-re… TLDR: -Unknown nation state threat actor -Attacker caused shutdown of operations -First (public) incident targeting safety systems (that prevent further physical damage)