Picture

James D @FranticTyping

Threat Hunting | Detection Engineering | Defensive Automation (ex @Countercept, @mwrlabs) blog.securehat.co.uk Joined April 2008
  • Tweets
    389
  • Followers
    836
  • Following
    448
  • Likes
    273
FranticTyping Profile Picture

James D @FranticTyping

2 years ago

Slides from this talk are now available here: github.com/FranticTyping/…

FranticTyping Profile Picture

James D @FranticTyping

2 years ago

Slides from this talk are now available here: github.com/FranticTyping/…

FranticTyping Profile Picture

James D @FranticTyping

2 years ago

My talk "Scaling Detection and Response Teams - Enabling Efficient Investigations" is at 3:45pm today at #BSidesLDN2023 on track 2! Come down and say hi if you're around 😀 pretalx.com/bsides-london-…

FranticTyping Profile Picture

James D @FranticTyping

2 years ago

Scaling detection and response operations at Coinbase part 2 & 3: 🔍 Driving context into detection logic with machine and user profiles 🔧 Codifying automatic remediation for high-risk detections 📫 Automating alert triage with employees via Slackbot coinbase.com/blog/scaling-d…

FranticTyping Profile Picture

James D @FranticTyping

2 years ago

The first part of my blog series on how we’ve been scaling detection and response operations at Coinbase is live! Interested in speeding up your investigations, increasing the visibility of key data sources, and improving quality of life for analysts? coinbase.com/blog/scaling-d…

FranticTyping Profile Picture

James D @FranticTyping

2 years ago

Awesome to see this new feature being added to chainsaw! Great work @AlexKornitzer @56616C6F72 💪

lehtior2 Profile Picture

Artturi Lehtiö @lehtior2

2 years ago

Awesome to see this new feature being added to chainsaw! Great work @AlexKornitzer @56616C6F72 💪

James D retweeted
VirtualAllocEx Profile Picture

Daniel @VirtualAllocEx

2 years ago

With "Meterpreter vs. Modern EDR(s)" I want to show, that the shellcode of well-known C2 frameworks like Metasploit is not always a limiting factor. No new insights, but I want to share them with the #infosec community. redops.at/en/blog/meterp… #redteam #itsec #itsecurity

James D retweeted
magerbomb Profile Picture

mark @magerbomb

3 years ago

Our team at @elastic has been developing this feature for almost six years and we are excited to share our work with the security research community. Thanks to @GabrielLandau @joehowwolf and many others who have contributed to this effort over the years!

elastic Profile Picture

Elastic @elastic

3 years ago

Our team at @elastic has been developing this feature for almost six years and we are excited to share our work with the security research community. Thanks to @GabrielLandau @joehowwolf and many others who have contributed to this effort over the years!

James D retweeted
Purp1eW0lf Profile Picture

Dray Agha @Purp1eW0lf

3 years ago

Dude, you can wipe whatever WEVTXs you want 🪠 @HuntressLabs gon' find the user accounts, session times, machines, and method for your lateral movement 🕵️‍♀️ You'd be surprised what #RDP-related event logs can reveal ponderthebits.com/2018/02/window…

James D retweeted
jpgoldberg Profile Picture

Jeffrey Goldberg 🌻 @jpgoldberg

3 years ago

I have never before criticized a competitor by name on the @1Password blog. This is an exception. blog.1password.com/not-in-a-milli…

James D retweeted
holisticinfosec Profile Picture

Russ McRee @holisticinfosec

3 years ago

Hunt, search, and extract Windows event log records with Chainsaw, now in #toolsmith 148. Experiments with an old #DFIR malware case, as well as APT Simulator. The saw is the law! ⁦@AlexKornitzer⁩ ⁦@FranticTyping @sigma_hq ⁦@cyb3rops⁩ ⁩ holisticinfosec.io/post/chainsaw/

FranticTyping Profile Picture

James D @FranticTyping

3 years ago

Really cool to see this tool finally public! If you’re still viewing alert data in a jira ticket, I’d recommend checking out the approach DetectTree takes to visualise detections, it makes a massive difference.

WithSecure Profile Picture

WithSecure™ @WithSecure

3 years ago

Really cool to see this tool finally public! If you’re still viewing alert data in a jira ticket, I’d recommend checking out the approach DetectTree takes to visualise detections, it makes a massive difference.

James D retweeted
jaredcatkinson Profile Picture

Jared Atkinson @jaredcatkinson

3 years ago

Check out the first post in my new blog series "On Detection: From Tactical to Functional". The first post explores how we can leverage source code to discover which API Functions an attack tool is using which serves as a base for further investigation. posts.specterops.io/on-detection-t…

James D retweeted
patrickwardle Profile Picture

Patrick Wardle @patrickwardle

3 years ago

macOS malware often (ab)uses APIs such as NSCreateObjectFileImageFromMemory, NSLinkModule etc) to execute in-memory payloads. Apple has recently updated dyld3 (+these APIs), such that the in-memory payload is now first/always written out to disk 💾 See: github.com/apple-oss-dist…

James D retweeted
JimmyVo Profile Picture

Jimmy Vo @JimmyVo

3 years ago

I may be very late on this but I stumbled on @gitlab's handbook for transparency and I really enjoy reading through the reporting on their Security team's KPIs: about.gitlab.com/handbook/engin…

James D retweeted
Kostastsale Profile Picture

Kostas @Kostastsale

4 years ago

I usually make short-form satirical videos for fun, but never share them with the world. This time tho, I thought I'd make one for the infosec community. Some might even find it educational 😅 If you're in #infosec and you feel a little down this week, this video is for you💙

James D retweeted
RndmAccssMsngs Profile Picture

RandomAccessMusings @RndmAccssMsngs

4 years ago

F-Secure is hiring my replacement, a new Head of Threat Intelligence, based in Europe. This is a genuinely exciting opportunity to grow a CTI capability from its infancy in to a mature function. The role has a lot of freedom to pursue as desired and.. emp.jobylon.com/jobs/120443-f-…

James D retweeted
below0day Profile Picture

belowØday @below0day

4 years ago

#ContiLeak Tools and Techniques h/t: @vxunderground & @Cyberknow20 below0day.com/2022/03/02/con…

Trends for United States

#HardRockBet
2.977 posts
McLaren
62,9 B posts
Lando
46,5 B posts
NFL Sunday
19,2 B posts
#AskFFT
Oscar
72,7 B posts
#ItalianGP
172 B posts
#sundayvibes
5.554 posts
WHO DEY
9.267 posts
Football Sunday
7.747 posts
Good Sunday
60,7 B posts
Go Bills
14,8 B posts
#HereWeGo
3.450 posts
Piastri
31,9 B posts
Rand Paul
33,6 B posts
Verstappen
143 B posts
POUNDING
12,3 B posts
GiveRep V1
Go Browns
1.630 posts
Ridley
2.049 posts

You might like

Agentless Linux security. No endpoint agents and no drama. Linux malware, forensics, intrusion detection, and hacking. Founder @SandflySecurity.
Craig Rowland - Agent...
@CraigHRowland
11K Followers
AI Security Researcher @nvidia | Prev: @Microsoft | Founder of the @OTR_Community
Roberto Rodriguez �...
@Cyb3rWard0g
26K Followers
Generic Detection Rules for Log Data
sigma
@sigma_hq
5K Followers
An Aussie who does cyber things | Threat Hunting Manager @HuntressLabs | Former Principal @CrowdStrike and HuntressLabs
Jai Minton
@CyberRaiju
8K Followers
Principal Windows Security Researcher @HuntressLabs | Windows Internals & Telemetry Research
Jonny Johnson
@JonnyJohnson_
8K Followers
RE and More by Alexey Kleymenov (https://t.co/s1pWjL46AW). Private classes and group workshops in malware analysis and reverse engineering. #infosec #malware
Reverse Engineering a...
@re_and_more
15K Followers
CEO and Co-Founder of Octopwn
SkelSec
@SkelSec
12K Followers
Sr. Director of SOC at Huntress. Ex-Mandiant/FireEye. Bringing security to the Fortune 5,000,000.
Max Rogers
@MaxRogers5
3K Followers
Ex-theoretical physicist, currently terrible hacker and wannabe security researcher. Views are, regrettably, my own. Likes = bookmarks
William Burgess
@joehowwolf
2K Followers
Mythic Developer (https://t.co/Uz4fOxIUbe) | @SpecterOps @its_a_feature_@infosec.exchange | @its-a-feature.bsky.social
Cody Thomas
@its_a_feature_
7K Followers
DFIR, Detection Engineering, Threat Hunting and Malware Analysis | Opinions are my own | Analyst @TheDFIRReport
v3t0_
@v3t0_
774 Followers
Threat Research @proofpoint | Author of
Kyle Cucci
@d4rksystem
6K Followers
I speak BloodHound. Husband, Father, IT-Guy, Security-Noob Blog: https://t.co/PXB35KEqs6 GitHub: https://t.co/Unp9jZOpBn
LuemmelSec
@theluemmel
8K Followers
Building the next generation decompiler. Binary analysis is a dish best served static.
rev.ng
@_revng
5K Followers
Reverse engineering, malware
Johann Aydinbas
@jaydinbas
2K Followers