SpecterOps @SpecterOps

Creators of BloodHound | Experts in Adversary Tradecraft | Leaders in Identity Attack Path Management specterops.io Joined January 2017

Tweets

3K
Followers

39K
Following

397
Likes

2K

SpecterOps @SpecterOps

4 hours ago

Identity security isn't one-size-fits-all. @jaredcatkinson spoke to @campuscodi for Risky Business News about how classifying identities into two distinct categories — identities at rest and identities in transit — changes how we approach security. 🎧: ghst.ly/4pB9rWL

0 3 7 961 3

SpecterOps @SpecterOps

a day ago

Certificate-based privilege escalation vulnerabilities are the attack vector enterprises keep overlooking. Join @leidy_tector at #BSidesNYC on Oct. 18 to learn a structured approach to ADCS remediation using attack path analysis and BloodHound Enterprise. ghst.ly/3J0BxKt

0 6 19 3K 10

Download Image

SpecterOps @SpecterOps

4 days ago

Red teams slip past detection. Defenders adapt. The cycle continues. 🔄 John Wotton's latest on AI gated loaders shows how offensive operators are using LLMs to make shellcode execution context-aware, executing only when OPSEC policies are met. ghst.ly/4nvxsgh

1 42 155 11K 79

SpecterOps @SpecterOps

5 days ago

Securing Domain Controllers without breaking AD is harder than it sounds. @MGrafnetter at @HIPConf covers: ✅ IaC approach to Windows Firewall policy ✅ RPC filters & outbound traffic controls ✅ Hybrid environment challenges ✅ Network service discovery hipconf.com/agenda/

0 9 34 2K 18

Download Image

SpecterOps @SpecterOps

6 days ago

What happens when the User-Account-Restrictions property gets misconfigured? Spoiler: It's not good. From account compromise to full domain takeover, @unsigned_sh0rt breaks down why this permission set is more dangerous than most realize. ghst.ly/4mKgycH

0 52 89 11K 50

SpecterOps @SpecterOps

a week ago

Move beyond signature-based detection to catch what traditional defenses miss. Our Detection course at Specter Bash next week will teach you to engineer detections based on adversary TTPs & behavioral analysis. There's still time to save your spot! 👉 lnkd.in/eP58JqcU

0 1 7 3K 1

Download Image

SpecterOps @SpecterOps

a week ago

Lateral movement getting blocked by traditional methods? @werdhaihai just dropped research on a new lateral movement technique using Windows Installer Custom Action Server, complete with working BOF code. ghst.ly/4pN03PG

1 115 278 30K 164

SpecterOps @SpecterOps

2 weeks ago

Hidden attack paths are why attackers succeed despite top security tools. They exploit identity & permission connections most orgs can't see. At @HIPConf, @JustinKohler10 will share how to reveal these routes with BloodHound & shift to prevention. ghst.ly/3W6nxlc

0 0 2 1K 1

Download Image

SpecterOps @SpecterOps

2 weeks ago

Think like an attacker & defend like a strategist. Our Tradecraft Analysis course at Specter Bash 2025 teaches you to: ✅ Transform telemetry → detection coverage ✅ Assess if your defenses work ✅ Bridge offensive tactics w/ analytic precision 🎟️: ghst.ly/specter-bash-2…

0 1 9 2K 1

Download Image

SpecterOps @SpecterOps

2 weeks ago

It's time to change how you think about SaaS integrations. The Salesloft attack shows how GitHub → AWS → Drift → Salesforce created an attack highway defenders never saw coming. @jaredcatkinson's analysis details the patterns we should look out for. ghst.ly/4ngDQrD

1 1 21 2K 6

Jared Atkinson @jaredcatkinson

2 weeks ago

Better late than never. I wrote a post that analyzes the Salesloft-Drift breach in the context of Attack Paths. specterops.io/blog/2025/09/2… My main takeaways: 1) Hybrid paths are not limited to two platforms owned by the same organization 2) Ad-hoc paths arise when passwords are…