Lucas @lucastrainer

Here for meditations on infosec, small business, and adorable pets. Joined August 2013

Tweets

218
Followers

166
Following

2K
Likes

4K

Murray @MyNameIsMurray

2 years ago

Lately I have come across a bunch of weird apps and installers that demand, but really don't need, admin rights. Luckily, pretty much all of these were able to be fixed. Here are a couple of things to look for, and tricks to try, when going admin less...

7 23 105 17K 149

Jon Erlichman @JonErlichman

2 years ago

Rear Admiral Grace Hopper was born on this day in 1906. She programmed the first computer. Q: “How’d you know so much about computers?” A: “I didn’t. It was the first one.”

32 263 1K 180K 130

Download Video

Phil Venables @philvenables

3 years ago

Are you living with Ceremonial Security? 12 Ritual Traps to Avoid. Useful controls when first envisioned can become a ritual over time - performed without question of effectiveness. It’s considered heresy to question the ritual and so it continues. philvenables.com/post/ceremonia…

1 11 42 11K 3

Yusuf Dikmenoglu @YusufsDSBlog

3 years ago

Download these cool end-user material with posters, trainings, and email templates to communicate the roll out #AzureAD features in your organization appropriately: microsoft.com/en-us/download… Deployment plans: ⁠ aka.ms/AADDP ⁠

1 38 158 9K 42

Addy @secops_addy

3 years ago

#mde #kql #entropy #query: RemoteUrl, ProcessCommandLine, & InitiatingProcessCommandLine #entropy #calculation #Malware #Hunting github.com/A-dd-Y/secops/…

0 2 4 311 1

Jesse Loudon @coder_au

4 years ago

I've put together an AWESOME Azure Policy list! 100s of blogs, videos, code repos, and more ❤️ Your 1-stop-shop for anything to do with Azure Policy across official Microsoft and Community sources github.com/globalbao/awes… #CloudFamily #AzOps #AzurePolicy #ITPro

7 110 313 0 75

Sean Metcalf @PyroTek3

4 years ago

Scott on the @TrimarcSecurity team wrote this much needed & excellent article on how best to protect an Active Directory environment & it's more than just AD. Article covers protecting workstations/servers including GPO configuration. This is a must read hub.trimarcsecurity.com/post/implement…

Trimarc @TrimarcSecurity

4 years ago

3 63 181 0 62

Download Image

2 49 126 0 34

Jessen Kurien @jessen_kurien

4 years ago

Sharing a Quick Guide on Using Sysmon for Linux in Azure Sentinel techcommunity.microsoft.com/t5/azure-senti…

3 43 105 0 20

𝕯𝖒𝖎𝖙𝖗𝖞 𝕾𝖒𝖎𝖑𝖞𝖆𝖓𝖊𝖙𝖘 @ddd1ms

4 years ago

Full-Spectrum Cobalt Strike Detection go.recordedfuture.com/hubfs/reports/…

0 41 87 0 21

Download Image

John Lambert @JohnLaTwC

4 years ago

Some of my #infosec infographics in one thread 👇👇👇

9 205 758 0 405

strandjs - [email protected] @strandjs

4 years ago

Hey all. My next Pay What You Can (PWYC) SOC Core Skills class is coming up this August. If you, or someone you know, is getting started in IT or security it is a great place to start. wildwesthackinfest.com/antisyphon//so…

4 87 194 0 40

Download Gif

Jerry Gamblin @JGamblin

4 years ago

Current CVE-2021-1675 remediation advice:

12 185 889 0 12

Download Image

Lucas @lucastrainer

4 years ago

PingCastle is an amazing resource for defenders.

Vincent Le Toux (Paris, France) @mysmartlogon

4 years ago

PingCastle is an amazing resource for defenders.

2 85 232 0 31

Download Gif

0 0 0 0 0

Joe Słowik 🌻 @jfslowik

4 years ago

Focus on the access, intrusion, lateral movement, and persistence mechanisms. Catch or defeat one (or more) of these and you never need to worry about learning silly ransomware variant names.

0 20 58 0 5

Jorge Orchilles @jorgeorchilles

4 years ago

Guess now is a good a time as any... if you want to test mounting an ISO, executing an EXE, and unmounting. We committed a @redcanary Atomic Red Team test for it. Shout out to @OrOneEqualsOne @Adam_Mashinchi for help and reference to @mattifestation github.com/redcanaryco/at…

2 13 34 0 2

Billy York @SCAutomation

4 years ago

over a year later i still get people asking for the visio from this post, someone internally just told me its the best blog they've found to show the overview differences between #AzureMonitor #AzureSentinel #AppInsights #LogAnalytics #AzureSecurityCenter cloudsma.com/2020/04/overvi…

1 27 59 0 12

Oleg Ananiev @OlegAnaniev

4 years ago

Great blog about detecting anomalies with #kql and #LogAnalytics . This is just one of the methods #azuremonitor techcommunity.microsoft.com/t5/core-infras…

0 17 41 0 4

Thomas Roccia 🤘 @fr0gger_

4 years ago

Windows privileges determine the type of operation a user account can perform on the OS and are sometimes abused by attackers. If you've ever wanted to know what a privilege is for, I've created the ultimate cheat sheet that shows all Windows privileges on one page!🤓 #infosec

20 865 2K 0 611

Download Image

Stan Hegt @StanHacked

5 years ago

Catching red teams with honeypots part 1: local recon. outflank.nl/blog/2021/03/0… Blog post by co-worker @jmoosdijk on building file and registry based honeypots using SACLs. With examples of how to detect attackers (not just red teams ;-) using tools like SeatBelt, PowerUp, etc.