Rich @_RichL

InfoSec || OffSec || Windows Kernel || Tweets are my own and do not reflect the views of my company. Joined May 2022

Tweets

31
Followers

26
Following

105
Likes

94

Yarden Shafir @yarden_shafir

a year ago

Huge week for people whose favourite color is this exact shade of blue

Pirat_Nation 🔴 @Pirat_Nation

a year ago

Huge week for people whose favourite color is this exact shade of blue

102 244 2K 416K 572

Download Image

19 932 9K 193K 207

This strange tweet got >25k retweets. The author sounds confident, and he uses lots of hex and jargon. There are red flags though... like what's up with the DEI stuff, and who says "stack trace dump"? Let's take a closer look... 🧵1/n

254 3K 16K 3.3M 5K

Download Image

Yarden Shafir @yarden_shafir

a year ago

Please make this happen. I would love nothing more than to have an image parser run during a bugcheck

24 82 1K 67K 51

vx-underground @vxunderground

2 years ago

Absolutely tragic news. Geoff Chappell, the reverse engineer and author, has passed away today. His work was incredible. Our deepest condolences to Geoff's family, friends, and colleagues. Check out Mr. Chappell's work. It's amazing: geoffchappell.com

Travis Goodspeed @travisgoodspeed

2 years ago

38 114 497 189K 50

4 56 315 55K 40

Tim Misiak @timmisiak

2 years ago

Seriously, @Arm? WTF?

vx-underground @vxunderground

2 years ago

Seriously, @Arm? WTF?

35 144 489 93K 48

Download Image

1 5 14 6K 0

Ken Sykes @KensyAtMS

2 years ago

Collect Time Travel traces quickly and easily with new command line recorder! Install anywhere (Windows 10 or later), record child processes, monitor process launch, then open in WinDbg. aka.ms/ttd/download. More details: learn.microsoft.com/en-us/windows-…

5 16 33 6K 10

Download Video

Yarden Shafir @yarden_shafir

2 years ago

170 of the loldrivers.io drivers load with the most recent HVCI driver blocklist. Do with this information what you will.

6 83 334 113K 92

Download Image

Tim Misiak @timmisiak

2 years ago

(1/n) WinDbg finally released outside the store, and no more "Preview"! Ecstatic to see my old team hit this milestone! It's come so far since @aluhrs13 and I started the "WinDbgNext" project so many years ago. learn.microsoft.com/en-us/windows-…

6 92 334 71K 49

Rich @_RichL

2 years ago

Super cool! cc @clarkb_cs

Kevin Gosse @KooKiz

2 years ago

Super cool! cc @clarkb_cs

11 91 429 65K 87

Download Video

0 0 1 79 0

Kevin Gosse @KooKiz

2 years ago

Still a very early prototype, but here is Windbgpt, a #chatgpt-powered AI assistant directly in #Windbg! It analyzes the output of the commands, and provides guidance to solve the stated problem. Here is an example of it investigating a deadlock in a .NET application.

11 91 429 65K 87

Download Video

Alex Ionescu @aionescu

3 years ago

Kind Microsoft Employee Soul that finally added the Thread Pool data structures to the public symbols... you are loved, appreciated, and thanked beyond your wildest dreams. This will have meaningful impact on so many troubleshooting scenarios, deadlocks, race conditions, etc...

5 46 276 0 26

Download Image

Rich @_RichL

3 years ago

99 problems but memory issues aren’t one… except when they are … sometimes … but it’s okay because Windows fixes them for us .. except if the fix doesn’t work… today we encountered the “Fault Tolerant Heap” @timmisiak this was fun 🫠 cc @clarkb_cs learn.microsoft.com/en-us/windows/…

1 1 8 1K 1

vx-underground @vxunderground

3 years ago

On the Windows OS the data type BOOL is not the same as data type BOOLEAN

11 21 508 66K 19

Download Image

Yarden Shafir @yarden_shafir

3 years ago

@aionescu Yes but that would require writing C++ and at that point I’d rather do this in assembly

1 1 11 1K 0

Yarden Shafir @yarden_shafir

3 years ago

This is what defeat looks like

26 87 1K 122K 24

Download Image

Rich @_RichL

3 years ago

so far in this week’s game of “who’s fault was it?”: #golang 2 (Win SXS / UpdateConfig) #microsoft 1 (FwPsFlowAbort) #mine 1 (PEBKAC) @clarkb_cs 0 (🧙) can’t wait to see how the week ends!