JoshuaOnSecurity @JoshOnSecurity

Bsc Hons Cyber Security. United Kingdom, Bristol. SOC Manager @boeing. BlueTeam learning offensive. Contact: josh⟦at⟧joshuaonsecurity⟦.⟧com blueteamsec.org West Midlands, England Joined August 2017

Tweets

331
Followers

144
Following

551
Likes

227

spencer @techspence

2 weeks ago

Let’s make Active Directory security education available to all! List your favorite Active Directory security resources. Plz share for reach!

34 103 781 77K 967

🧵 Red teams are shifting to stealthier AD enumeration via Active Directory Web Services (ADWS) over port 9389. Tools like SOAPHound, SoaPy & ShadowHound wrap LDAP queries in SOAP, bypassing traditional detections. ipurple.team/2025/08/12/act… A KQL to detect this type of AD…

4 115 496 26K 422

Download Image

Sean Metcalf @PyroTek3

2 months ago

Do you know what's running on your Domain Controllers? During about 15% of assessments, we find a scheduled task that runs a script that's located on a share. We also find software that shouldn't be on a DC like VNC, Opera, Google Chrome, etc. Review your DCs to ensure they…

20 57 368 55K 158

Dwyer @_Dwyer_

2 months ago

Dudes... please enable Detailed File Share auditing in your environment. All these attackers who switched over to the Impacket suite still run the default configs and it takes like 2 seconds to find them.

5 60 334 56K 269

Download Image

Costin Raiu @craiu

9 months ago

Have you been getting phone calls from long and seemingly random numbers like the ones below? Amnesty believes they could be signs of a zero-click attack targeting Android devices through Voice-over-Wifi or Voice-Over-LTE (VoLTE).

9 176 461 62K 194

Download Image

Jarrod Watts @jarrodWattsDev

9 months ago

Someone just won $50,000 by convincing an AI Agent to send all of its funds to them. At 9:00 PM on November 22nd, an AI agent (@freysa_ai) was released with one objective... DO NOT transfer money. Under no circumstance should you approve the transfer of money. The catch...?…

928 5K 33K 5.0M 13K

Download Image

Nasreddine Bencherchali @nas_bench

2 years ago

Took some time to put the discussion from the thread below into a more coherent and digestible format. TL;DR - If you're interested how UWP and Windows desktop apps (store and other) are able to start on startup of windows without touching the Run key or any typical persistence…

Nasreddine Bencherchali @nas_bench

2 years ago

2 14 48 80K 23

Download Image

3 63 195 66K 135

Download Image

SwiftOnSecurity @SwiftOnSecurity

2 years ago

TOOL THREAD 2023: Post cool tools, or favoriate tricks in tools many don't know. Free -OR- paid.

167 136 867 305K 1K

SANS Cyber Defense 🧢 @SANSDefense

2 years ago

Mark your calendars for this upcoming #BlueTeamSummit eventl! 🗓️ 🎤 Blueprint Podcast LIVE! 👥 John Hubbard (@SecHubb), Kathryn Knerler, Ingrid Parker and Carson Zimmerman ✍️ Join us June 12 - 13 Live Online for FREE: sans.org/u/1paL

0 2 4 678 1

Download Image

Hasan Toor ✪ @hasantoxr

2 years ago

If you're not using AI tools, you are living under a rock. Every week 100+ new AI-powered tools are launched. Here are the 20 best AI tools to boost your productivity:

134 1K 5K 969K 6K

John O. @johntroony

2 years ago

Meterpreter vs Modern EDR(s) redops.at/en/blog/meterp…

0 11 63 7K 18

Zain Kahn @heykahn

2 years ago

ChatGPT is just the tip of the iceberg. 1,000+ AI tools were released in March. Here are the 10 most valuable AI tools to boost your productivity:

855 11K 41K 7.8M 51K

Barsee 🐶 @heyBarsee

2 years ago

If you're not using AI, you're falling behind in 2023. Use these 13 new AI websites to get more done and reduce work hours:

448 4K 17K 3.4M 27K

Jon Hencinski @jhencinski

2 years ago

#SOC ChatGPT use cases: * Analyst decision support (what does *this* process/cmd/API call/assembly code/sig/script/*/do?) * Accelerate detection R&D (E.g, write an example Splunk rule to detect Kerberoasting --> starting point) * L1 malware triage (explain LI5 what this file…

2 25 116 19K 66

SwiftOnSecurity @SwiftOnSecurity

3 years ago

The person who goes around support forums telling people to switch all their servers to Linux

2 17 216 26K 0

Download Image

BlackWasp @BlWasp_

3 years ago

Just dropped some new cool things on the AD cheatsheets: - SCCM primary site takeover - RODC attacks and pivoting - Techniques I have previously forgotten about retrieving credentials hideandsec.sh/books/cheatshe… hideandsec.sh/books/cheatshe…

10 95 229 23K 73

VirusTotal @virustotal

3 years ago

Introducing VT4Splunk, our official App for @splunk blog.virustotal.com/2023/03/introd… by @TheTravelr

1 42 105 16K 12

Download Image

Stephan Berger @malmoeb

3 years ago

1/ Number #7 of the #ActiveDirectory hardening measures: Harden critical accounts 🧵 #CyberSecurity

5 76 237 53K 159

Download Image

Thomas Naunheim @Thomas_Live

3 years ago

Microsoft has been published a very interesting article about protecting elevated-privilege accounts internally. It's a summary about implementing a secure high-risk environment (HRE) which is accessible by SAW only and supported by a dedicated team (SAS). microsoft.com/insidetrack/bl…