Paul @_paulewing
research for @elastic Joined June 2016-
Tweets41
-
Followers434
-
Following98
-
Likes97
.@MITREattack round 2 evaluations have been released. Make sense of how each security vendor performed with these easy-to-configure #Kibana dashboards. go.es.io/2W1Odo7
Want to learn what we’ve been up to with @eventquerylang over the summer? We added an interactive shell, new EQL analytics, and we made it easier than ever to contribute to the community. Check out the recap from @rw_access and @_paulewing on the blog: bit.ly/2Yqos41
If you're in the San Diego area, then consider joining us for lunch at @BallastPoint on July 16 from 11 am to 1 pm PT. Our very own @SubTee and @FlyingMonkey127 will join @EndgameInc's @_paulewing to discuss how security teams can leverage @MITREattack: hubs.ly/H0jphwM0
#AtomicFriday: @rw_access and @_paulewing of @EndgameInc join @SubTee and @M_haggis on January 11 to discuss EQL internals and how #security teams can use @eventquerylang for #threathunting and #detection. hubs.ly/H0g0w2R0
“How does Endgame use MITRE ATT&CK?” @_paulewing explains in this video Q&A ⬇️ Interested in learning more about how your org can develop the best plan of ATT&CK? Download our new guide here: pages.endgame.com/the-best-plan-…
First up, Ross Wolf (@rw_access) and Paul Ewing (@_paulewing) of @EndgameInc present "From technique to detection: Rapid prototyping of ATT&CK-based analytics." #ATTACKcon
We're giving live demos at our #BHUSA booth #1328 throughout the conference. @simpleprodmgr is talking about the end of phishing, @_paulewing will tell you how to stop fileless attacks and several of our partners are joining us too. Learn more: ow.ly/8W4M30li72c
NEW BOOK LAUNCH: Read our new #ThreatHunting book written by @_devonkerr_ & @_paulewing. This one-of-a-kind guide is full of step-by-step instructions and practical advice on how to hunt. Download now: ow.ly/ra4130kjH0T
Join @MP_HealthCare CISO Matthew Witten and their Sr. Security Architect Brandon Bergman along with Endgamer @_paulewing during our @SCMagazine webinar Monday November 20 learn how to chose the right endpoint solution. Register: ow.ly/N71n30gybnb
Join @MP_HealthCare CISO Matthew Witten and their Sr. Security Architect Brandon Bergman along with Endgamer @_paulewing during our @SCMagazine webinar Monday November 20 learn how to chose the right endpoint solution. Register: ow.ly/N71n30gybnb
Just over 3 weeks until our next #ThreatHunting workshop! We're in #Seattle this time and @SpecterOps @Cyb3rWard0g will be presenting alongside Endgamers @_devonkerr_ & @_paulewing! Save your seat: ow.ly/LiBj30gyFq1
Our awesome presenters tonight @_devonkerr_ @_Pilk_ @_paulewing. There's no denying how much they love leading our #ThreatHunting workshop!
1 week until our #ThreatHunting workshop in #SanAntonio w/ @_devonkerr_ & @_paulewing! Register now: ow.ly/3tD830fWRCy
Our next #ThreatHunting workshop is Oct 26 in #SanAntonio with Endgamers @_devonkerr_ & @_paulewing. Save your seat: ow.ly/j2dO30fPPiv
Interested in #ThreatHunting? Join our workshop Aug 24 w @CapitalOne @Cyb3rWard0g @_paulewing @_devonkerr_ Register: ow.ly/IC5z30efKSH
Tomorrow Endgamer @_paulewing will be on @securityweekly talking about #ThreatHunting. Don't miss it! Join live: ow.ly/DZyL30dlZap
Learn the importance of #threathunting from our sr. threat researcher @_paulewing. Watch now: ow.ly/Wwsk309ozSQ
New blog posted by @Andrew___Morris @_paulewing @dez_ on detecting #Dridex in the wild. #atombombing Read now: ow.ly/zAi2309DK7d
Interested in #threathunting? Hear from @_paulewing on requirements to get started hunting for advanced threats: ow.ly/cdLY309fvr6
Join @filar @mark_dufresne @_paulewing #RSAC booth #1739 to hear about #fileless attacks #malware prevention & #bots ow.ly/oz8L308cTpp

Andrew Morris (afk) @Andrew___Morris
21K Followers 3K Following 🔳 Internet listener. Founder/Chief Architect of GreyNoise Intelligence (@GreyNoiseIO)
Rich Seymour @rseymour
2K Followers 3K Following over at bluesky, not here. 🦀 past: @runsybil, @phosphorusinc, @CrowdStrike, @elastic, @endgameinc 👨🎓@usc PhD @columbia bs materials science, he/him 🎸
J⩜⃝mie Williams @jamieantisocial
10K Followers 7K Following threats && stuff || #UNC1799 forever 🤘|| @DistrictHeather ♥️ + 🍷 **𝚅𝚒𝚎𝚠𝚜 𝚎𝚡𝚙𝚛𝚎𝚜𝚜𝚎𝚍 𝚊𝚛𝚎 𝚖𝚈 օ𝚠𝚗**
Nick Carr @ItsReallyNick
38K Followers 3K Following Tech Director / Threat Intelligence at Microsoft. Previously, Director of Incident Response & Intel Research at Mandiant. Former Chief Technical Analyst at CISA
Bobby Filar @filar
2K Followers 974 Following dad. security machine learning @sublime_sec fmr:@elastic, @endgameinc Wizards/Timberwolves/LFC
Katie Nickels @likethecoins
55K Followers 3K Following Director of Intel at @redcanary. SANS Certified Instructor for FOR578: CTI. Senior Fellow at @CyberStatecraft. She/her. Mastodon: @[email protected]
Microsoft Threat Inte... @MsftSecIntel
187K Followers 1K Following We are Microsoft's global network of security experts. Follow for security research and threat intelligence.
Adam Pennington @_whatshisface
4K Followers 1K Following I lead @mitreattack. Ask me about deception, but don't believe the answers. Non ATT&CK tweets only speak for me. @[email protected]
Daniel Stepanic @DanielStepanic
1K Followers 652 Following Malwarez at @elasticseclabs | Macrodata Refinement
Jared Atkinson @jaredcatkinson
10K Followers 2K Following | CTO @specterops | Host @dcpthepodcast | Ex PowerShell MVP | USAF Vet | FC Bayern Supporter | Language Learner 🇳🇴 🇮🇹 🇧🇷 |
Terrance DeJesus @_xDeJesus
788 Followers 1K Following ☁️ Cloud & Identity Security | Hunting threats & safeguarding the cloud | #cybersecurity #threathunting #cloudsecurity | {opinions are my own}
Devon Kerr @_devonkerr_
8K Followers 722 Following Director of Threat Research and @ElasticSecLabs team lead; custodian of secret histories. Posts are my own.
toshisam @toshisam
19 Followers 308 Following
nanjin002 @nanjin00272827
21 Followers 4K Following
Napeaus @napeaus8323
74 Followers 5K Following
crawler_cookie_0 @crawler_cookie0
49 Followers 4K Following
M.Masood (BS , MS) @masood11
346 Followers 4K Following Technically sophisticated and business-savvy management professional with a pioneering career reflecting strong leadership.
Iq0n3ss @iq0n3ss
32 Followers 545 Following
code_points @non_meta_handle
114 Followers 4K Following
Steven Legg @ZenM0de
666 Followers 721 Following CEO @antigensecurity, former CISO & engineer, Nerd, Father. Treasurer of MISEC Nonprofit #OWASP Leader #BSidesDetroit/Converge Organizer My words, my views.
Derek Ditch @dcode
307 Followers 178 Following Founder of @rocknsm. I ❤️ all things @elastic so much that I now build things there.
Anton @Antonlovesdnb
5K Followers 3K Following Blue Team stuff | Trying to be a decent human being | @munkschool Grad | Hunt & Response @HuntressLabs
Osama Al-Tahish @Al_Tahish
212 Followers 4K Following Artificial Intelligence and Cyber Security Researcher
Josh @dfircoffee
19 Followers 158 Following
James @jamesspi
1K Followers 538 Following Helping folk do security things with @elastic. Views are my own. Creator of https://t.co/FY2IQ2eAhe, https://t.co/aDuzYgUuYw, https://t.co/qz9J8Kb0v3 and https://t.co/eiiVHgqb5G
GΞø §†IG(\/)Λ (... @ge0st1gma
95 Followers 854 Following Greyhat, Pentester, RE, Malwr Researcher, Dark Arts | #hacking, #infosec, #cybersecurity | #becomeAdifference
AkkarinMSB @AkkarinMsb
0 Followers 155 Following
Spencer Walden @__Masq__
777 Followers 4K Following Principal Cyber Threat Analyst @Centene #cti #ctf #blueteam #dfir #malware #netsec #infosec
Daniel Grant @dandroid_grant
170 Followers 93 Following ML researcher, relapsing political junkie, sometimes security stuff.
nathnath @nathnath
45 Followers 2K Following
Infrasys Technology @infrasystech
56 Followers 3K Following
Justin Boss @Network_Ranger
130 Followers 2K Following IT enthusiast | Network Engineer #labeveryday #EndSars #EndOppresion #EndbadGovernance
Thijs @PoliticsLurker
0 Followers 448 Following
David French @threatpunter
1K Followers 970 Following Detection & Response Engineer • Threat Hunter • Threat Researcher • 🇬🇧💙🎣⛰🍻 • Opinions are my own
Jared @DLL_Cool_J
779 Followers 745 Following Maker of things, breaker of bits. Statements are my own and do not reflect the views of my employer(s). #Founder of #APT Hot Sauce
Brian @briandmckinney
28 Followers 257 Following
Frank Duff @FrankDuff
1K Followers 359 Following Co-founder of Tidal Cyber; Former GM ATT&CK Evaluations. Opinions are my own
David Pilato 🇺🇦... @dadoonet
6K Followers 2K Following developer | evangelist @elastic 📧 DM opened. DJ 4 times a year, just for fun! 🎧 https://t.co/1OtWJ8PzAy
Kristina Sisk @kathayra
295 Followers 78 Following Extremely technology literate and pop culture illiterate. Usually you can find me either buried in a book or battling bad guys in a game of Dungeons & Dragons.
Yogesh Khedkar @yogeshrkhedkar
147 Followers 2K Following I write secure code for cyber security products
Midhunraj.Rajan.T @MidhunrajRajanT
134 Followers 498 Following .Net Developer With Experience Developing Desktop And Web Based Application.Like's Reading Book, Listening Music,Playing Basket Ball And Blogging.
InfosecGandalf @InfosecMinion
1K Followers 5K Following Director of Engineering - Security & Privacy. DevSecOps, xMSFT, In weird relationship with coffee machines.
Patrick Bareiß @bareiss_patrick
1K Followers 1K Following Principal Security Research Engineer @Splunk Speaker: DeepSec Vienna, BlackHat Europe Arsenal
Abdulla @bahraini
2K Followers 5K Following
Med Dawg @retsdem22
213 Followers 1K Following NVIDIA Threat Hunter and Investigator🕵🏽♂️ | ΩΨΦ 🐶 | NSU Alum🔰| Success Rule: “You are confined only by the walls you build yourself....” 🔑
Corey Thomas @InfraCaptain
29 Followers 865 Following Cloud Architect - Delivering elastic, reliable, and secure hybrid cloud experiences.
David Imbordino @DavidImbordino
284 Followers 420 Following Public Servant, White Sox fan, craft cocktail aficionado, cyber dude
tamasV @tamasV2
13 Followers 72 Following
Toto @Toto43089261
26 Followers 4K Following
Kram @Kram19760680
1 Followers 99 Following
Andrew Morris (afk) @Andrew___Morris
21K Followers 3K Following 🔳 Internet listener. Founder/Chief Architect of GreyNoise Intelligence (@GreyNoiseIO)
Rich Seymour @rseymour
2K Followers 3K Following over at bluesky, not here. 🦀 past: @runsybil, @phosphorusinc, @CrowdStrike, @elastic, @endgameinc 👨🎓@usc PhD @columbia bs materials science, he/him 🎸
Bobby Filar @filar
2K Followers 974 Following dad. security machine learning @sublime_sec fmr:@elastic, @endgameinc Wizards/Timberwolves/LFC
Tony Lambert @ForensicITGuy
6K Followers 1K Following Recovering sysadmin that now chases adversaries instead of uptime. Sr Malware Analyst @redcanary
BleepingComputer @BleepinComputer
240K Followers 200 Following Breaking cybersecurity and technology news, guides, and tutorials that help you get the most from your computer. DMs are open, so send us those tips!
Daniel Stepanic @DanielStepanic
1K Followers 652 Following Malwarez at @elasticseclabs | Macrodata Refinement
Jared Atkinson @jaredcatkinson
10K Followers 2K Following | CTO @specterops | Host @dcpthepodcast | Ex PowerShell MVP | USAF Vet | FC Bayern Supporter | Language Learner 🇳🇴 🇮🇹 🇧🇷 |
Devon Kerr @_devonkerr_
8K Followers 722 Following Director of Threat Research and @ElasticSecLabs team lead; custodian of secret histories. Posts are my own.
David French @threatpunter
1K Followers 970 Following Detection & Response Engineer • Threat Hunter • Threat Researcher • 🇬🇧💙🎣⛰🍻 • Opinions are my own
Elastic @elastic
64K Followers 178 Following Elastic is The Search AI Company. We bring together the precision of search and the intelligence of AI to accelerate results that matter.
John Wunder @jwunder
1K Followers 701 Following CTI and adversary emulation @MITREcorp, and honorary @MITREattack until they kick me out. father to a 6 year old. Trains are better than cars.
Frank Duff @FrankDuff
1K Followers 359 Following Co-founder of Tidal Cyber; Former GM ATT&CK Evaluations. Opinions are my own
Joseph Pilkington @_Pilk_
233 Followers 461 Following Senior Hunter @ endgame. Infosec passion & homer sports rants. Thoughts and tweets are the voice in my head.
ben wolfson @benwolfson10
580 Followers 823 Following Oracle Tech PR. probably reading. Arsenal. overprotective plant dad. bird watcher. cinephile and physical media enthusiast. F1. views my own.
Red Canary, a Zscaler... @redcanary
30K Followers 1K Following 24/7/365 threat detection and response across your cloud, identity, endpoints and everything in-between. We got you: https://t.co/pFNwBJN3d5
Blake Strom @stromcoffee
3K Followers 347 Following Tech, security, and other random things. @msftsecurity researcher. Creator and former lead of @mitreattack. Tweets are my own.
Ross Wolf @rw_access
1K Followers 622 Following fan of the absurd. engineer for @Sublime_Sec. previously at @Elastic @EndgameInc @MITREcorp https://t.co/Jvf9O8HJvM
Justin Ibarra @br0k3ns0und
2K Followers 917 Following Tech Lead, security intel @elastic @elasticseclabs via @endgameinc | security research | detection engineering | bench press: 455lbs & 📈 | I like my own tweets
Curt @CurtBarnard
447 Followers 499 Following Sometimes I talk about computers. https://t.co/lQqeEELwk9
SpecterOps @SpecterOps
39K Followers 397 Following Creators of BloodHound | Experts in Adversary Tradecraft | Leaders in Identity Attack Path Management
Rich @richbarger
1K Followers 1K Following Proverbs 25:2 | Christian | Husband | Dad | Veteran | Coach | Entrepreneur | Investor | Cybersecurity | Intelligence Analyst @ Heart | #Faith #Family #Freedom
Rob Winchester @robwinchester3
1K Followers 229 Following Vice President @SpecterOps | Former USAF | Problem Solver
Will Schroeder @harmj0y
48K Followers 957 Following Researcher @SpecterOps. Coding towards chaotic good while living on the decision boundary.
Matt Nelson @enigma0x3
33K Followers 369 Following @specterops | Enjoys abusing features | https://t.co/aN1kcQxRJt
Paul Asadoorian @paul... @securityweekly
76K Followers 9K Following Founder of Security Weekly, Principal Security Evangelist at Eclypsium
Peter Kjeldgaard @pkjeldgaard
25 Followers 80 Following
Roberto Rodriguez �... @Cyb3rWard0g
26K Followers 628 Following AI Security Researcher @nvidia | Prev: @Microsoft | Founder of the @OTR_Community
BarryV @BarryV
988 Followers 656 Following Show me, don't tell me -- Opinions are my own and do not represent those of my employer
Greg Wells @wellsgr
458 Followers 570 Following Product @ Dreadnode | product, growth, cyber security, AI
Andrea Little Limbago @limbagoa
2K Followers 983 Following Geopolitics, national security, global supply chains, cybersecurity, data science, women in tech, digital privacy, quant social scientist, polisci PhD
Erica @ReekaEE
104 Followers 83 Following she/her | 🍽foodie | 🏋🏻♀ gymrat | 🐈 cat mom | sportsfan: ⚽ #sounderstilidie 🏀 #uconnwbb #nyliberty🗽 🏈 #flyeaglesfly
Lyndon Brown @asklyndon
240 Followers 228 Following Co-Founder/CEO @ Prequel (https://t.co/sR15nf4AU7); Engineer; Former Mandiant (acquired by Google); Former Endgame (acquired by Elastic)
Sergio Caltagirone - ... @cnoanalysis
16K Followers 1K Following President @AcademyThreat & Tech Director @GblEmancipation; Fmr @Dragosinc, @Microsoft & @NSAGov He/Him NOW AT https://t.co/ZWCsxBUFeG
Cyber Analytic Repo L... @MITREanalytics
787 Followers 1 Following This account is inactive and all tweets are now via @MITREattack , please follow us there for updates. (past Replying/Following/Re-tweeting ≠ endorsement)
Rob Fuller @mubix
79K Followers 25K Following Dad / Husband / Marine / Student / Teacher / @Hak5 / @NoVAHackers / @SiliconHBO / @NationalCCDC / @MARFORCYBER Auxiliary
SANS Institute @SANSInstitute
191K Followers 417 Following SANS is the most trusted and by far the largest source for information & cyber security training, certification and research in the world.
strandjs - strandjs@b... @strandjs
45K Followers 2K Following I will light the way by the bridges I burn. Retired Senior SANS Instructor IANS Faculty Black Hills Information Security Active Countermeasures
Jake Williams @MalwareJake
142K Followers 2K Following Breaker of software | VP R&D @hunterstrategy | CTI/DFIR | @ians_security faculty | Bookings: jake at malwarejake dot com | GSE #150 | He/him
algoritmic @algoritmic
39K Followers 810 Following algorithmic, computational, emergent, complex, generative, parametric, procedural ... random inspiring stuff
Trend Micro @TrendMicro
113K Followers 4K Following We're a global leader in cybersecurity that helps make the world safe for exchanging digital information.
Secureworks @Secureworks
25K Followers 2K Following Secureworks is now a part of Sophos! Defending organizations from cyberattacks with an adaptive, AI-driven platform and expert-led managed services.
Trend Micro Research @TrendMicroRSRCH
52K Followers 363 Following Security research, news, and information direct from @TrendMicro experts.
Threat Intelligence @threatintel
114K Followers 372 Following Symantec's researchers bring you the latest threat intelligence from the IT security world.