An online platform that makes it easy to break into and upskill in cyber security, all through your browser.
- Tweets 5,260
- Following 85
- Followers 311,526
- Likes 7,834
🧠 Investigating hosts one by one during an active breach isn't a strategy. It's a delay. Learn how fleet-wide live triage changes the pace of incident response 👉 tryhackme.com/room/kansalive…
4
4
67
9,843
🧵 In a large-scale compromise, the attacker isn't on one host. They're everywhere.
Investigating machines individually while the breach is active isn't incident response. It's hoping you get lucky.
Stacking results across a fleet doesn't just speed up triage it changes what you can see. Anomalies that disappear in a single host's noise become obvious patterns across twenty.
Sweep the fleet. Surface what stands out. 🌐
1
2
1,156
🧵 Here's what you'll practice in Kansa Live Triage 👇
📡 Run Kansa modules against remote hosts over WinRM to collect live system state
🔎 Use analysis scripts to stack results across hosts and surface what does not belong
🛠️ Write your own custom Kansa module and analysis script to collect evidence built-in modules miss
🌐 Scale a triage from a single host to a full environment using target lists and fleet sweep capabilities
1
1,011
⚡ Free lightning lesson: Addressing Tech Sprawl 🛡️
Jess Huber (Microsoft DaRT co-founder, ex-Deloitte Global Head of Cyber IR) on killing tech sprawl and rebuilding SecOps for the AI era.
🗓️ 6 October, Register 👉
luma.com/tryhackme-q9op?utm_…
2
3
67
7,957
Happy Cyber Awareness Month! 🥳🔐 Be honest… how many of these did you believe? 👀
Cyber myths spread fast. Luckily, so does learning. 🫡
Test what you actually know in our Cyber Awareness room 👇
👉 tryhackme.com/room/securitya…
#CyberAwarenessMonth #TryHackMe
4
15
94
8,929
Happy Cyber Awareness Month 🚀 Here are some cyber crime by the numbers 👀🔐 Some of these stats are wild. See the thread 🧵👇
3
28
176
10,369
4/5 🔗 48% of breaches involve a third party. Your security isn’t just about your systems anymore.Vendors. Suppliers. Platforms. Partners. They’re all part of your attack surface too. 🌐⚠️
1
1
11
981
What kind of cyber menace are you? 👀
🔴 Break everything
🔵 Investigate everything
🟢 Trust nothing
🟣 Connect EVERYTHING
Still having a cyber career identity crisis? Take the quiz on our Careers page. 😭 tryhackme.com/cyber-security…
7
7
81
9,932
Whoever is studying cyber security after work today: we see you 🫡 and rooting for you 🚀
22
35
497
15,835
🧠 The best DFIR responders don't collect everything. They collect the right things fast. Learn how targeted artifact collection with KAPE changes the pace of an investigation 👉 tryhackme.com/room/kapedatat…
1
3
39
8,901
🧵 A full disk image is thorough. It's also slow, storage-heavy, and often impractical when a dozen hosts are compromised and the attacker may still be active.
Targeted artifact collection isn't cutting corners. It's knowing which artifacts answer the most critical questions, execution, persistence, file system activity and getting to them fast.
Speed matters in incident response. KAPE gives you both precision and pace.
Collect smarter. Investigate faster. 🗂️
1
1
1,147
🧵 Here's what you'll practice in KAPE Data Triage 👇
📡 Acquire forensic artifacts from a remote Windows host over WinRM without logging in directly
🗂️ Use KAPE through both its graphical user interface and command line interface to collect and parse artifacts in a single pass
🛠️ Build and run custom KAPE targets and modules against specific evidence locations
🔎 Investigate parsed artifact output to reconstruct attacker activity across execution, persistence, and file system evidence
2
906
Built a home lab” probably isn’t selling your skills as well as you think. 👀 Your cyber projects should show what you found, solved and achieved not just which tools you used.
Build the hands-on skills and projects worth putting on your CV 🚀 tryhackme.com?utm_source=twi…
1
11
150
10,349
