Picture

The DFIR Report @TheDFIRReport

Real Intrusions by Real Attackers, the Truth Behind the Intrusion. Services: https://t.co/XW613EKt2w thedfirreport.com thedfirreport.com/contact Joined April 2020
  • Tweets
    2K
  • Followers
    62K
  • Following
    0
  • Likes
    691
The DFIR Report retweeted
TheDFIRReport Profile Picture

The DFIR Report @TheDFIRReport

4 months ago

"Analysis of command-line activity reveals the threat actor’s use of specific PowerShell cmdlets for discovering and interacting with virtual machines. 1/4

The DFIR Report retweeted
TheDFIRReport Profile Picture

The DFIR Report @TheDFIRReport

4 months ago

🌟New report out today!🌟 Another Confluence Bites the Dust: Falling to ELPACO-team Ransomware Analysis and reporting completed by @pcsc0ut.bsky.social, @IrishDeath.bsky.social & @0xtornado 🔊Audio: Available on Spotify, Apple, YouTube and more! thedfirreport.com/2025/05/19/ano…

The DFIR Report retweeted
TheDFIRReport Profile Picture

The DFIR Report @TheDFIRReport

3 months ago

🎉New DFIR Discussions Episode🎉 🔊Available on Spotify, Apple, & YouTube! 🎙️ We dive into our latest public report with Randy Pargman, Jake Ouellette, Kostas T., and Mangatas Tondang. Check it out and let us know what you think! open.spotify.com/episode/1SKPWF…

TheDFIRReport Profile Picture

The DFIR Report @TheDFIRReport

2 months ago

🚨 New Interlock RAT variant spotted! Researchers from The DFIR Report, in partnership with Proofpoint, have identified a new and resilient variant of the Interlock ransomware group’s remote access trojan (RAT). 🔎 thedfirreport.com/2025/07/14/kon… #DFIR #KongTuke #InterlockRAT #FileFix

TheDFIRReport Profile Picture

The DFIR Report @TheDFIRReport

a month ago

🚨 Search for software, end up getting ransomware! SEO-driven #Bumblebee malware campaigns observed throughout July led to domain compromise, data theft & #Akira ransomware. Tools included #AdaptixC2 & #Netscan. thedfirreport.com/2025/08/05/fro…

TheDFIRReport Profile Picture

The DFIR Report @TheDFIRReport

4 weeks ago

📉DFIR Labs Weekend Discount📉 Use this discount code to receive 10% off all DFIR Labs cases! Discount expires August 11th 03:59 UTC ⏲️Buy now, use anytime over the next 3 months. ➡️Discount code: WeekendDiscount20250808 Access DFIR Labs: dfirlabs.thedfirreport.com

TheDFIRReport Profile Picture

The DFIR Report @TheDFIRReport

4 weeks ago

🎯 DEF CON Attendees — Swing by Malware Village today at 4 PM and snag some free DFIR Report swag! Come say hi to @angelo_violetti and @RussianPanda9xx, they’ll be there handing it out. Don’t miss it!

TheDFIRReport Profile Picture

The DFIR Report @TheDFIRReport

a month ago

🔎 What do you value most in a DFIR report? Detailed deep dives? Timely, concise summaries? Strategic insights? Something else? Vote in the poll and share your thoughts in the replies 👇

TheDFIRReport Profile Picture

The DFIR Report @TheDFIRReport

a month ago

🚨 New: DFIR Labs Pro Tier is here! 🎯 Smarter investigations with: • 🧠 AI Timeline Builder (w/ IOCs + notes) • ⏱️ More lab time + extension credits • 📊 Analytics dashboard w/ tailored insights 🔗 Dive in: dfirlabs.thedfirreport.com/subscription-p…

TheDFIRReport Profile Picture

The DFIR Report @TheDFIRReport

2 months ago

This position is closing soon, don’t miss your chance to apply!

TheDFIRReport Profile Picture

The DFIR Report @TheDFIRReport

2 months ago

This position is closing soon, don’t miss your chance to apply!

The DFIR Report retweeted
TheDFIRReport Profile Picture

The DFIR Report @TheDFIRReport

2 months ago

📢DFIR Labs Enterprise Forensics Challenge📢 🔹 When: Aug 30, 2025 (14:00-18:00 UTC) 🔹 SIEM: Azure Log Analytics, Elastic, or Splunk 🔹 Teams: 2-3 analysts 🔹 Prizes: Top team wins! 🏆 Limited spots available. Register Now: dfirlabs.thedfirreport.com/dfirchallenge-…

TheDFIRReport Profile Picture

The DFIR Report @TheDFIRReport

2 months ago

🌟New report out today!🌟 Hide Your RDP: Password Spray Leads to RansomHub Deployment Analysis and reporting completed by @tas_kmanager, @iiamaleks and UC2 🔊Audio: Available on Spotify, Apple, YouTube and more! thedfirreport.com/2025/06/30/hid…

The DFIR Report retweeted
r3nzsec Profile Picture

Renzon @r3nzsec

2 months ago

Classic #ransomhub execution baked into the encryptor itself. Check out the latest report here and learn how that exposed RDP on your network can trigger a massive ransomware attack. #dfir thedfirreport.com/2025/06/30/hid… @TheDFIRReport

Trends for United States

#CashAppFriday
7.844 posts
#2KDay
67,1 B posts
Tylenol
15,8 B posts
#2kgiveaway
54,9 B posts
Hyundai
86 B posts
#YIAY2025
Darius Smith
2.065 posts
Alcaraz
28,2 B posts
Rosie
35,3 B posts
Andre 3000
8.861 posts
#SmackDown
14,6 B posts
Djokovic
27,9 B posts
Chargers
24,2 B posts
Chargers
24,2 B posts
Double
219 B posts
Department of War
73 B posts
Cars 4
2.452 posts
OutKast
4.348 posts
No Volpe
BB Unlocked
1.095 posts

You might like

The largest collection of malware source code, samples, and papers on the internet. Password: infected
vx-underground
@vxunderground
368K Followers
MITRE ATT&CK® - A knowledge base for describing the behavior of adversaries. Replying/Following/Re-tweeting ≠ endorsement. @ https://t.co/wt46ArkZVt
ATT&CK
@MITREattack
113K Followers
Official MHT Twitter account. Check out ID Ransomware (created by @demonslay335). More photos & gifs, less malware.
MalwareHunterTeam
@malwrhunterteam
244K Followers
founder & hacker @xintraorg 🌎
inversecos
@inversecos
80K Followers
The latest research and news from Unit 42, the Palo Alto Networks (@paloaltontwks) Threat Intelligence and Security Consulting Team covering incident response.
Unit 42
@Unit42_Intel
63K Followers
The cybersecurity home for the latest #BlueTeam, #DFIR, and #ThreatHunting news and tools.
Blue Team News
@blueteamsec1
52K Followers
DFIR | Malware Hunter | @Cryptolaemus1
proxylife
@pr0xylife
20K Followers
DarkFeed: Cyber Threat Intelligence Platform, Putting things at order in the ransomware crazy world #OSINT | #Ransomware | #Cyberattacks | #Hacktivism
DarkFeed
@ido_cohen2
43K Followers
Breaking cybersecurity and technology news, guides, and tutorials that help you get the most from your computer. DMs are open, so send us those tips!
BleepingComputer
@BleepinComputer
240K Followers
Head of Threat & Vulnerability Mgmt @ Henkel AG & Co. KGaA https://t.co/NC1orlKrW3
Nicolas Krassas
@Dinosn
146K Followers
Security researcher | Co-founder https://t.co/QxBlzp9A8w | https://t.co/zqMXQRZjQN | https://t.co/Fq7WSqTBva | https://t.co/eKezFcO6nd
mr.d0x
@mrd0x
44K Followers
Fighting malware and botnets
abuse.ch
@abuse_ch
36K Followers
Programmer, #malware analyst. Author of #PEbear, #PEsieve, #TinyTracer. Private account. All opinions expressed here are mine only (not of my employer etc)
hasherezade
@hasherezade
89K Followers
Head of Research @nextronsystems #DFIR #YARA #Sigma | detection engineer | creator of @thor_scanner, Aurora, Sigma, LOKI, YARA-Forge | always busy ⌚️🐇 | vi/vim
Florian Roth ⚡️
@cyb3rops
206K Followers
Peace and Love. Just Analysis/Hunter. #APT #threatIntelligence #Exploit #CTI Need Job
blackorbird
@blackorbird
35K Followers