American. Infosec. Earn your place. Not your ally. infoseclogger@infosec.exchange
Here
- Tweets 1,732
- Following 169
- Followers 319
- Likes 17,251
Going to log out of Twitter and see if I lost anything relevant by being on the Toots rather than being here. Cheers.
3
Eddie @infoseclogger@infosec.exchange retweeted
Yes. I’m already on Mastodon and I like this social networking service.
7
2
35
Eddie @infoseclogger@infosec.exchange retweeted
This is me: infosec.exchange/@mubix over there.
1
1
14
No one is coming to save you.
This is as true in life as it is in #infosec
1
This is backbreaking. He is the last truly impartial newsman calling balls and strikes. The only takeaway I have is people don't want news anymore. They want propaganda.
CNBC cancels 'The News with Shepard Smith' to refocus on business news cnb.cx/3WuXaEM
1
Eddie @infoseclogger@infosec.exchange retweeted
For those asking, I'm bet-hedging myself while I wait to see what happens. So you'll find me now on:
Mastodon: mastodon.social/@garius
CounterSocial: counter.social/@garius
CoHost: cohost.org/garius
(Although Mastodon is the only one I'm cross-posting to right now).
36
114
2,573
Eddie @infoseclogger@infosec.exchange retweeted
The truth hurts. But the other option is worse.
brettshavers.com/brett-s-blo… #DFIR #digitalforensics
7
14
This is why they’ve dramatically pared down their Belt and Road initiatives. They didn’t get the ROI in the third world they expected. It’s as if they have to go all in on Taiwan for the semiconductors.
I've long thought that China is far less a long term threat than most people realize. My college years were focused on international financial economics and I looked at the Chinese financial system in depth...it *basically* limits them to pouring concrete. They've long ago..
1
1
Eddie @infoseclogger@infosec.exchange retweeted
🧵Summary
1. Write naturally
2. Be direct and concise
3. Alternate short and long sentences
4. Being interested = being interesting
If you’re into this kind of stuff, you should get the newsletter on Mondays.
danielmiessler.com/newslette…
3
13
Here's a very unique TTP for an adversary who would definitely target you.
And we're using this TTP all over the map ourselves.
Eddie @infoseclogger@infosec.exchange retweeted
if you have some detections using some forms of user SID filters to limit activity to users (e.g. process where user.id : "S-1-5-21-*") don't forget to include those starting with "S-1-12-1-*" (Azure AD SIDs)
16
48
Let go of the angry.
I remember working at multiple orgs where users would delete phishes, report spam as phishing, and legit internal e-mails as spam.
Used to make me angry.
Now I think 'at least they're not clicking on things.'
1
This is why making your defense bespoke is such a strong play.
1. You create more hurdles (run faster than you, not the bear).
2. You can design weak points to funnel your adversaries to learn about them.
3. You can demonstrate value to the org with your results.
"Attacks are staged largely against the default" is a great point, and as you walk up the sophistication ladder threat actors will have increasing capability to stage against non-default configurations. State-nexus actors will *prefer* to op against the default... (1/2)
1