mikecybersec @mikecybersec

Tweets

185
Followers

65
Following

117
Likes

2K

spencer @techspence

4 months ago

If you're not getting the answers you're looking for, change the questions you're asking... "Is PingCastle detected?" is the wrong question... "Is Active Directory enumeration detected?" is better... "Is high volume enumeration of the Domain Administrators group from a…

11 13 175 18K 73

mikecybersec @mikecybersec

5 months ago

tokesi.cloud/blogs/25_04_17…

0 0 0 62 0

Jack Rhysider 🏴‍☠️ @JackRhysider

7 months ago

Everyone gangsta until the SIEM starts alerting at 4:59 PM on Friday

73 192 2K 64K 80

mikecybersec @mikecybersec

8 months ago

Bring back @5pmIncident

0 0 0 82 0

mikecybersec @mikecybersec

9 months ago

Good advice but to add context... Legitimate apps and tools use Axios, we're seeing commercial/sales teams who use PipeDrive will also produce Axios UAs in AAD Audit. Be careful before locking out your clients sales directors 👀

Bert-Jan 🛡️ @BertJanCyber

9 months ago

0 22 106 9K 76

0 0 2 167 0

Cerbersec @cerbersec

10 months ago

nc -lvnp 4444 python -c 'import pty; pty.spawn("/bin/bash")'

30 218 2K 144K 533

Download Image

WeaselSec™️ @WeaselSec

10 months ago

Proud to announce the New CTI Analyst Onboarding playlist, which will save organizations dozens of hours in training and Confluence Page review.

7 41 295 27K 70

Download Image

mikecybersec @mikecybersec

11 months ago

A (slightly) fraudulent win considering I've taken the course before, however, a coin is a coin, right 🤣🤌🏼

0 0 0 49 0

Download Image

rekdt @rekdt

11 months ago

*Unmutes* …..”Thanks, everyone.” *leaves meeting*

14 729 12K 392K 410

Download Image

Ash @_bin_Ash

a year ago

As I've aged into offensive work, the value of certs has diminished for me compared to a solid methodology Delivering a quality assessment is so different from cert material. Maybe there's room for a course that guides you through an assessment start to finish? (Reporting too?)

4 3 42 4K 9

vx-underground @vxunderground

a year ago

Logging into Xitter and seeing thousands upon thousands of people, who have never written a single line of code their entire life and can barely use a computer, giving their expert input into kernel-mode programming

134 586 7K 283K 245

Download Image

mikecybersec @mikecybersec

a year ago

The amount of misinformation about the CS outage is wild 🤡

1 0 1 110 0

vx-underground @vxunderground

a year ago

"We need you to come info the office and help us find all the BitLocker keys"

50 1K 10K 304K 684

Download Video

mikecybersec @mikecybersec

a year ago

I made a container version of @SecurityYamato #Hayabusa, enjoy 🤟🏼 hub.docker.com/repository/doc…

0 0 2 53 0

ᴉpᴉǝH 🐐💕 @summer__heidi

a year ago

5 27 205 21K 13

Download Image

mikecybersec @mikecybersec

a year ago

Yeee boi, sponsoring @bsidesncl, stoked to be at an org that supports and gets involved as much as we do!

BSidesNCL (Newcastle upon Tyne, UK) @bsidesncl

a year ago

Yeee boi, sponsoring @bsidesncl, stoked to be at an org that supports and gets involved as much as we do!

1 0 5 258 0

0 0 2 156 0

mikecybersec @mikecybersec

a year ago

Had fun at BSides Leeds! Shared some tips on how to catch cyber crims.

0 0 4 202 0

Download Image

mikecybersec @mikecybersec

a year ago

One for the SOC/MDR peeps. When you detect a burst of activity in a customer environment and reach a verdict that it's benign, but the detections were accurate. Do you still notify your customers?