Picture

Andy Rector @DetectorRector

Detection Lead @ Mandiant Managed Defense / Former IR Consultant @mandiant. Tier 3 Hipster; I came in like a #WrectorBall San Francisco, CA Joined July 2012
  • Tweets
    319
  • Followers
    1K
  • Following
    400
  • Likes
    1K
DetectorRector Profile Picture

Andy Rector @DetectorRector

2 years ago

Great cross team collaboration across Google Cloud to get this service off the ground. Let's find some evil!

heferyzan Profile Picture

Ryan Tomcik @heferyzan

2 years ago

Great cross team collaboration across Google Cloud to get this service off the ground. Let's find some evil!

Andy Rector retweeted
dillon_franke Profile Picture

Dillon Franke @dillon_franke

2 years ago

I’m proud to present ProtoBurp, a new Burp Suite extension to help encode and fuzz Protobuf messages based on pain points with existing tooling. Check out my latest blog post about it! dillonfrankesecurity.com/posts/protobur… #pentesting #burpsuite #protobuf #offsec

DetectorRector Profile Picture

Andy Rector @DetectorRector

3 years ago

I don't feel like this is the right question. Threat hunting is a function of detection engineering, where detections are being tested and matched against customer telemetry. If not matches, no additional work. The question we should be asking is what is the service hunting for?

MalwareJake Profile Picture

Jake Williams @MalwareJake

3 years ago

I don't feel like this is the right question. Threat hunting is a function of detection engineering, where detections are being tested and matched against customer telemetry. If not matches, no additional work. The question we should be asking is what is the service hunting for?

DetectorRector Profile Picture

Andy Rector @DetectorRector

3 years ago

Question for Threat Intelligence Analysts, and SOC alike... would you consider Detection Rules Threat Intel? Curious on the perspective of consumers of DE content whether or not Detection Rules should be considered Threat Intelligence or not.

DetectorRector Profile Picture

Andy Rector @DetectorRector

3 years ago

Strong agreement here. Detection Engineering is an exercise in labeling and classifying security relevant data. FP reduction is critically important in reducing alert fatigue, but the opportunity to tune comes directly from SOC dispositions. It's the best feedback loop you have

DetectorRector Profile Picture

Andy Rector @DetectorRector

3 years ago

If you're in the Detection Engineering space, come watch @FryGuy2600 and I geek out on all things DE. We have the following planned: 1️⃣ Establish what DE is and isn't 2️⃣ Details on the DE process from a practitioners perspective 3️⃣ DE Maturity model 4️⃣ Measuring success 🎯🎯🎯

snapattackHQ Profile Picture

SnapAttack is now part of Cisco @snapattackHQ

3 years ago

If you're in the Detection Engineering space, come watch @FryGuy2600 and I geek out on all things DE. We have the following planned: 1️⃣ Establish what DE is and isn't 2️⃣ Details on the DE process from a practitioners perspective 3️⃣ DE Maturity model 4️⃣ Measuring success 🎯🎯🎯

DetectorRector Profile Picture

Andy Rector @DetectorRector

3 years ago

Detection Engineers, is DE Ops only for Vendors/MSSPs/MDRs or should it be something that corporations should pursue too? Curious on your thoughts!

Trends for United States

Chiefs
197 B posts
Rachel
72,6 B posts
Herbert
55,7 B posts
Karen
77,8 B posts
AJ Lee
236 B posts
Mahomes
67,1 B posts
#SmackDown
190 B posts
Kelce
41,2 B posts
Worthy
55,8 B posts
Big Brother
24,8 B posts
#KCvsLAC
7.963 posts
Ken Dryden
3.306 posts
Rich Eisen
5.535 posts
#BoltUp
7.104 posts
Keenan Allen
5.444 posts
Chris Jones
5.223 posts
#TheLastDriveIn
4.290 posts
Madison Beer
4.154 posts
Brazil
125 B posts
Bader
12,2 B posts

You might like

threat intelligence @google writing & sharing on adversary tradecraft, malware, threat detection, AI-nexus intel and all things #yara
Steve YARA Synapse Mi...
@stvemillertime
17K Followers
Research & Discovery Lead @Mandiant @googlecloud Specialties: researching adversary tradecraft, hardstuck masters TFT, and losing sneaker raffles.
Van
@Wanna_VanTa
4K Followers
🇨🇳Mission TL @Google | #Malware Naming Wizard | #Attribution Connoisseur | All tweets are my own. #ThreatIntel #APT
Dan Perez
@MrDanPerez
4K Followers
🐗 🦅 🎯 Research & Discovery @ Google/Mandiant
Bryce
@bryceabdo
7K Followers
By Stimson's postulate, I'm no gentleman. ⩜ 🐇 https://t.co/J8RfUt2yuq
nick
@3dRailForensics
2K Followers
@Mandiant / @GoogleCloud | Advanced Practices 🦅| @GeorgiaTech | opinions are my own
Rufus
@rufusmbrown
1K Followers
Frontline Intel Ops 🦅 Advanced Practices @Mandiant | AU Military DCO | My views are my own
Mathew
@mittypk
1K Followers
@sentinelone | Fmr. @Mandiant, @IBM, @rubrik, USG | TV/VCR repair, views are my own. Also steve3000@infosec.exchange/stonepwn3000.bsky
Steve Stone
@stonepwn3000
1K Followers
Intrusion aficionado. @Google/@Mandiant Advanced Practices
Tyler McLellan
@tylabs
3K Followers
williballenthin@mastodon.social
Willi Ballenthin
@williballenthin
7K Followers
Malware research and threat intel ex #DFIR responder at @Mandiant
Adrien B
@Int2e_
2K Followers
Mandiant Research and Discovery, Father, Husband, Trail Runner, Co-Founder CyberFriendsCircle
Jared Wilson
@JWilsonSecurity
2K Followers
Partner Director of Threat Intelligence at @Microsoft Threat Intelligence Center (MSTIC).
bk (Ben Koehl)
@bkMSFT
3K Followers
Aaron Stephens
@x04steve
3K Followers
Technical attribution of cyber threats | Frontline Intrusion Intelligence 🦅 @Mandiant
⚛️ Marcin Siedlar...
@siedlmar
2K Followers