Ron Woolery @TechRonick

DFIR history, moved into Cyber Threat Intelligence. GCTI, GCFA, GCIA Omaha, NE Joined September 2016

Tweets

329
Followers

177
Following

168
Likes

416

Jake Williams @MalwareJake

2 years ago

Okta is a symptom of a larger issue: too many orgs have outsourced their root of trust to a third party and have NO MECHANISM to detect abuse. Be real: the only reason we know about this one is because the threat actor targeted top tier orgs who caught them, not because Okta did

11 130 705 64K 64

Jack Rhysider 🏴‍☠️ @JackRhysider

2 years ago

You should be aware of the term "harvest now, decrypt later". At some point, the encryption we use today will be easily crackable. Don't rely too heavily on it. Better to be very protective of where your data ends up, even if it's encrypted.

27 135 739 78K 44

Ne0ne | Igal @0xToxin

2 years ago

Here comes a new blog, In this one I've uncovered a new underground info stealer type malware "KrakenKeylogger". The blog will cover the Phishing campaign alongside with the execution chain, loader and injection process and overview of the malware capabilities (with some quick…

9 185 536 76K 198

Download Image

Dr. Ch33r10 @Ch33r10

2 years ago

I’ve been laid off! I’d be a great fit for the following roles: 🔥CTI Analyst 🔥Hunt 🔥CTI Manager 8 GIAC Certs + MBA IT Management + DSc Cybersecurity 5 + years of CTI/Hunt experience Thank you!

48 375 501 189K 38

Jake Williams @MalwareJake

3 years ago

So much of vendor selection is being able to articulate value proposition in absolutes ("I've done it before, it's simple with X"). The first vendor in a category to give free advanced training on their products will own their market inside of 36 months. 2/2

6 3 43 5K 1

Ron Woolery @TechRonick

3 years ago

A fund raiser my wife is doing. gofundme.com/f/supplies-out…

0 0 0 25 0

The Babylon Bee @TheBabylonBee

3 years ago

Elon To Stay As Twitter CEO After Counting Mail-In Votes babylonbee.com/news/elon-to-s…

3K 15K 88K 3.9M 312

vx-underground @vxunderground

3 years ago

Insert commas into your password so when your credentials are dumped into a CSV it breaks it

285 5K 57K 0 4K

Ron Woolery @TechRonick

3 years ago

Is @threatpost still in operation? I can’t find anything from them since late August.

0 0 0 0 0

Download Image

Jake Williams @MalwareJake

3 years ago

This is quite... something.

Ronnie🍌 @NaisuBanana

3 years ago

This is quite... something.

10 6 80 0 3

Download Image

54 38 569 0 41

Ron Woolery @TechRonick

4 years ago

regarding #log4jrce, this is a great site for an affected software list. Does anyone know who is responsible for the website, and running it? log4j.mwni.io

0 0 0 0 0

Corelight @corelight_inc

4 years ago

You may not think CVE-2021-42292 can be detected at the network level, but our @corelight_inc Labs team (big shout-out to @keithjjones @alexgkirk @ynadji @benreardon) shows you how on the blog today: corelight.com/blog/detecting… #CyberSecurity #DFIR #ThreatHunting #OpenNDR

0 8 9 0 1

Download Image

Eslam Omar @Sam_0x0

4 years ago

A Zeek package to detect CVE-2021-42292, a Microsoft Excel local privilege escalation github.com/corelight/CVE-…

0 2 3 0 1

Ron Woolery @TechRonick

4 years ago

New #MacOS #ZeroDay, this one is bad, and no working patch forthcoming… bleepingcomputer.com/news/apple/new…

0 1 0 0 0

Ron Woolery @TechRonick

4 years ago

FBI had the #REvil decryption key for weeks - after accessing their servers - before sharing it with anyone. #ransomware washingtonpost.com/national-secur…