Ian Reynolds @_IanReynolds

@ianreynolds.bsky.social :: Security Operating , Incident Responding, Forensicating head scratcher :: {pick-a-colour}-teamer :: SANS Instructor :: Joined November 2009

Tweets

190
Followers

249
Following

729
Likes

124

Kevin Holvoet @digihash

5 months ago

After two years, the @CCBbelgium is thrilled to invite you to the highly anticipated return of the Quarterly Cyber Threat Report (QCTR) event on Friday 25 April 2025, from 14h00 to 16h00 (CET/UTC+2). Cyber threats never rest—and neither do we. Join us events.zoom.us/ev/Ao8U9Mou_HX…

0 5 5 921 2

Thomas Roccia 🤘 @fr0gger_

8 months ago

🤓 Since the #100daysofYARA challenge started, I decided to release my YARA cheat sheet version 2, extracted from my book Visual Threat Intelligence! I hope you will find it useful! Have fun 👇 And if you like this one you might like the full book: store.securitybreak.io/threatintel…

1 79 242 26K 199

Download Image

Ian Reynolds @_IanReynolds

3 years ago

It's easy to overlook how the OS evolves and how that affects the system posture. Worth taking some time to take a look at the options available.

David Weston (DWIZZZLE) @dwizzzleMSFT

3 years ago

It's easy to overlook how the OS evolves and how that affects the system posture. Worth taking some time to take a look at the options available.

9 241 722 0 227

Download Image

0 0 0 0 1

Ian Reynolds @_IanReynolds

3 years ago

Prevention: Disable troubleshooting wizards Remove the extension association Stop Office apps from spawning procs docs.microsoft.com/en-us/microsof…

SANS Institute @SANSInstitute

3 years ago

Prevention: Disable troubleshooting wizards Remove the extension association Stop Office apps from spawning procs docs.microsoft.com/en-us/microsof…

3 143 231 0 26

Download Image

0 0 0 0 0

Ian Reynolds @_IanReynolds

3 years ago

Y'all need to support your local infrastructure patch team today so they can patch all of the things. The only updside, it's not the weekend... yet 🤔

SANS.edu Internet Storm Center @sans_isc

3 years ago

Y'all need to support your local infrastructure patch team today so they can patch all of the things. The only updside, it's not the weekend... yet 🤔

0 24 37 0 3

Download Image

1 0 1 0 0

SANS Institute @SANSInstitute

4 years ago

⚠️ Urgent Webcast ⚠️ Join Tim Conway, @digihash, @robtlee & @MalwareJake as they outline current Russian Threat Actor capabilities, discuss critical infrastructure attacks on Ukraine & possible escalation spillover into the EU and/or the US. Register now: sans.org/u/1kQn

0 98 83 0 8

Download Image

Ian Reynolds @_IanReynolds

4 years ago

0 0 1 0 0

Download Image

SANS Institute @SANSInstitute

4 years ago

🚨⭐URGENT LIVE STREAM TODAY Join @bettersafetynet @johullrich @bojanz to discuss the newly published #RCE vulnerability #log4j - Learn the exploitation details & discuss what blue teams can do to detect the attack & protect their environments. Join: youtu.be/oC2PZB5D3Ys

0 11 16 0 1

Download Image

Ian Reynolds @_IanReynolds

4 years ago

I mean, if you can’t get Marmite then sure 🤔

ʝօʄʄ ȶɦʏɛʀ 🇦🇺🇺🇸 @yoda66.bsky.social @joff_thyer

4 years ago

I mean, if you can’t get Marmite then sure 🤔

0 0 2 0 0

2 0 1 0 0

Ian Reynolds @_IanReynolds

4 years ago

Awesome to be coming back to in-person but please remember to wear pants … yeah, we need to dress from the waist down again - a small sacrifice 👍🏻

SANS Institute @SANSInstitute

4 years ago

Awesome to be coming back to in-person but please remember to wear pants … yeah, we need to dress from the waist down again - a small sacrifice 👍🏻

5 52 67 0 0

Download Image

0 0 1 0 0

Ian Reynolds @_IanReynolds

5 years ago

I’ve only just noticed that etl2pcapng (github.com/microsoft/etl2…) added a PID comment field to each packet back in Jan 2020 🤦🏻. Now all of the awesome netsh etl captures are so much richer. And yeah, MS Message Analyzer had this first - more functionality across tools = 👍🏻

0 0 0 0 0

Jack Rhysider 🏴‍☠️ @JackRhysider

5 years ago

"If we stop checking for vulnerabilities right now, we'd have very fewer infections, actually"

17 65 447 0 1

Rob T. Lee @robtlee

5 years ago

BREAKING NEWS! DFIR SUMMIT 2020 (July 16/17) is now virtual & (wait for it) --> FREE --> IT IS FREE!!! SIGN UP NOW TO GET A RESERVED SLOT! sansurl.com/dfir-summit-fr… #justreleased #DFIR #DFIRSUMMIT #FreeDFIRSummit #digitalforensics #infosec

33 445 761 0 73

Download Image

Ian Reynolds @_IanReynolds

5 years ago

Somehow I never knew these existed and now I totally need one 🤨. Any idea how long the Rav powerbank lasts?

Meadow Ellis @notameadow

5 years ago

Somehow I never knew these existed and now I totally need one 🤨. Any idea how long the Rav powerbank lasts?

10 14 156 0 4

Download Image

1 0 2 0 0

Joshua Saxe @joshua_saxe

6 years ago

Infosec friends RT please: As attackers increasingly exploit the health crisis to compromise users, we should be sharing what we're seeing with one another. I'm starting a non-vendor-aligned Slack to this end. Please join and responsibly share intel! join.slack.com/t/covid19cyber…

4 104 97 0 5

SANS Institute @SANSInstitute

6 years ago

During the novel Coronavirus outbreak, the SANS Training Guarantee gives you the flexibility to change your plans to ensure you feel safe in your training environment. Learn more: sans.org/u/10AE

1 20 19 0 0

Download Image

Ian Reynolds @_IanReynolds

6 years ago

A steal at $15 so why not add a bit more for ⁦@EFF⁩ and ⁦@letsencrypt⁩ :: Humble Book Bundle: Cybersecurity 2020 by Wiley :: humblebundle.com/books/cybersec…

0 0 1 0 0

Ian Reynolds @_IanReynolds

6 years ago

And @4a696d still hasn’t seen it 😱

1 0 2 0 0

Download Video

Ian Reynolds @_IanReynolds

6 years ago

760 miles by car, 9320 miles in the air for a total of just over 10,000 miles to get to @WWHackinFest and back - we’re now on the final leg home. Major thanks to the team for putting on such an awesome event. Minor thanks to @4a696d and @tazwake for surviving 14 hrs of carpool