PageinSec @pageinsec

Geek, researcher, teacher. Sec+, eJPT. Statements, etc are my own. Follow/like != endorsement IANAL, don't do illegal stuff, etc. Joined May 2014

Tweets

449
Followers

451
Following

1K
Likes

3K

Craig Rowland - Agentless Linux Security @CraigHRowland

a year ago

https://t.co/zcc4VF608q

0 0 2 21K 0

5 11 105 22K 19

Download Image

Great info. I would add 1) if a leet style code question comes out, really think about if that's the kind of place you want to be and 2) consider whether take home stuff has crossed into free work territory, you're interviewing not consulting.

julie agnes 🌈 @JulieASparks

a year ago

2 3 31 2K 13

0 0 1 68 0

BrBr @bryanbrake

2 years ago

@mzbat will be joining us on #brakeSecEd #twitch stream this weekend to discuss hiring... this thread is telling of the fuckery that is #infosec and #cybersecurity right now. x.com/bryanbrake/sta… twitch.tv/brakesec youtube.com/@brakeseced

BrBr @bryanbrake

2 years ago

2 1 1 1K 0

0 2 7 3K 0

PageinSec @pageinsec

2 years ago

One of many great talks at the summit

Stef Rand @techieStef

2 years ago

One of many great talks at the summit

2 7 46 6K 4

Download Image

0 0 2 111 0

Mar_Pich @Mar_Pich

2 years ago

6 months ago, I started working on a way to better map the #ransomware ecosystem and its evolution, including rebrands.🔎 I am really happy to share this handmade cartography, which is based on @orangecyberdef resources, #OSINT and reverse engineering. ➡️ github.com/cert-orangecyb…

60 658 2K 343K 752

Download Image

PageinSec @pageinsec

2 years ago

Some thoughts on #threatmodeling - apageinsec.wordpress.com/2023/06/08/tho…

0 0 2 40 0

Shoshana Weissmann, Sloth Committee Chair 🦥 @senatorshoshana

2 years ago

NEW in my series on the fundamental problems with age verification legislation: If platforms are required to have your government IDs and face scans, hackers and enemy governments can access them too rstreet.org/commentary/if-…

5 35 87 53K 4

nyxgeek @nyxgeek

2 years ago

Why user enumeration is important -- We can think of a login attempt like this: username + password = [successful login] -At a large organization, we can be pretty sure that at least one account will have a weak or common password (Spring2023, Ilovemyjob2023!, etc). -This…

1 22 91 18K 17

Keith Krueger @keithkrueger

2 years ago

Hoping FCC listens to the overwhelming supportive public record on modernizing Erate firewall coverage . This is national problem 4 ALL schools. districtadministration.com/top-10-states-… @CoSN @JRosenworcel @SimingtonFCC @BrendanCarrFCC @GeoffreyStarks

1 9 19 1K 0

PageinSec @pageinsec

3 years ago

Should not have laughed at this, but I did.

vx-underground @vxunderground

3 years ago

Should not have laughed at this, but I did.

47 128 1K 0 55

0 0 1 0 0

Nathan McNulty @NathanMcNulty

3 years ago

Finally published my methodology for implementing Microsoft Defender ASR rules blog.nathanmcnulty.com/defender-for-e… I wrote it down over a year ago and modified it for my blog 6 months ago thinking I'd improve it. With kids, Alaska move, etc, it never happened... so feedback appreciated! :)

21 173 488 0 198

Ryan K @meansec

3 years ago

Waiting on OpenSSl project like

0 1 10 0 0

Download Gif

HOU.SEC.CON Security Conference @HouSecCon

3 years ago

Who’s ready for day 1?

1 1 6 0 0

Oklahoma Department of Wildlife Conservation @OKWildlifeDept

3 years ago

The eastern hognose snake will flatten its entire head to look like a cobra or flip belly-up and pretend to be slowly dying if you're looking for pointers on how to get out of a meeting just saying

110 2K 17K 0 163

PageinSec @pageinsec

3 years ago

Lots of interesting talks at @HouSecCon this year (yes I did delete previous because of dang autocorrect)

HOU.SEC.CON Security Conference @HouSecCon

3 years ago

Lots of interesting talks at @HouSecCon this year (yes I did delete previous because of dang autocorrect)

0 2 4 0 0

Download Image

0 0 2 0 0

Wietze @Wietze

3 years ago

The #LOLBAS project's website now provides automatically updated feeds containing all entries part of the project! 🆕 .JSON file with the project's data set as data objects 🆕 .CSV file with the project's data set, broken down by command Check it out! 👉 lolbas-project.github.io/api

3 112 327 0 68

Download Image

Ushi @ush1c

3 years ago

Dear infosec: I know we out a lot of pressure on ourselves to always be learning more. But please realize that too much can contribute to burnout. Take a few days and do something 💯 for yourself, trust this stressed out momma. We need time for us

16 26 289 0 1

PageinSec @pageinsec

3 years ago

Excited to be speaking @HouSecCon this year - all about detection as code. Looking forward to another great conference!

1 2 4 0 0

Mick Douglas 🇺🇦🌻 @bettersafetynet

3 years ago

Reminder: blocking IP addresses is one of the least effective IR techniques you can do. Swapping IP for an attacker is fall out the chair easy. You're letting them know you know. 1/?