@eric.zip always compiling and releasing some of the hottest - but most necessary - modern tools. Can’t wait to sink my teeth into this.

I have always wanted an app like Zimmerman's Timeline Explorer, but for macOS.... Sadly, nothing remotely close exists except Excel 🤮 Stoked to say, I am nearly done with the the MVP! 😎 Supertimelines on MBP! #dfir

I’m normally quiet about these things, but have to share a moment of laughter. If someone refers to you as “the dog that hasn’t barked”, you’re not the most powerful person in the room. That’s leverage.

Aww yissssssss...

BSky Outreach - Anyone here an Obsidian user (for notes, "second brain", etc.)? Anyone want to sing their praises in a reply; I'm curious what your experience has been like.

Usage spent towards troubleshooting Anthropic connectivity shouldn't count against your daily quota...

Has anyone been able to get Notion's MCP to stay connected for more than 1 hour? This thing is about as stable as a baby deer.

During my #BHUSA talk I've released many ETW research tools, of which the most notable is BamboozlEDR. This tool allows you to inject events into ETW, allowing you to generate fake alerts and blind EDRs. github.com/olafhartong/... Slides available here: github.com/olafhartong/...

day 1 of black hat 2025 in the books 🤓💙🌈 never a dull moment nerding with @eric.zip and @bromiley.io @blackhatevents.bsky.social #BlackHatUSA

Just to think, there _are_ people distracted by the MLK files.

T-minus 12 days until my favorite humans - @eric.zip & @whit.zip - and I deliver our Advanced Security Operations and Threat Hunting training at @blackhatevents.bsky.social. If you're a SOC analyst and/or work in IR, we'd love to have you. Come level up with us :) www.blackhat.com/us-25/traini...

No, THIS is the guy to follow. Pro tip: I follow @eric.zip therefore YOU should follow Eric.

As is @philhagen.com !! Sharing the DFIR love

Feels like a fresh start, so let's make it one. Nice to meet you :) I'm a #cybersecurity nerd | security ai r&d @prophetsecurity.bsky.social | frequent trainer @sansinstitute.bsky.social, @blackhatevents.bsky.social, and other conferences | Cybersecurity Defenders Podcast | forever #blueteam.

Defenders out there - CVE-2025-53770 is an unpatched, actively exploited vulnerability in SharePoint. If you have on-prem SharePoint facing the Internet, roll up your sleeves. Microsoft's guidance: 1. Configure the Windows AMSI integrations and deploy Defender AV. 2. Disconnect from the Internet.

They’ve done it again…

ATTN NERDS: we'll be teaching at @blackhatevents.bsky.social during hacker summer camp again! come join me and @eric.zip and @bromiley.io for our 4-day training: Advanced Security Operations and Threat Hunting 🤓🔥💙 www.blackhat.com/us-25/traini...

No matter where in the world you go, one thing remains the same: the guy at the gym who slams weights down and then looks around to see who noticed. 🤦‍♂️

Kendrick Lamar just owned 2025.

ATTN NERDS: We'll be at @blackhatevents.bsky.social USA again this year! Registration is now open for our Advanced Security Operations and Threat Hunting course 🤓🔥💙 Join @eric.zip, @bromiley.io, and @whit.zip for our 4-day training: www.blackhat.com/us-25/traini...

Secure Annex can now be used directly from with @limacharlie.io 's SecOps Cloud Platform. Installed agents give visibility into extensions utilized and are now enriched. These attributes can be used to run D&R rules for immediate response to issues. https://limacharlie.io/blog/automating_browser_e…

Another week, another episode of The Cybersecurity Defender's Podcast in the books with @tekgrunt.bsky.social !! More podcasting news on the horizon for me, but always a fun weekly chat with Chris @limacharlie.io. Check the podcast out here: limacharlie.io/podcast

Amplifying this for awesome conferences and unique CFP opportunities!

Good article and statistics on lengths of time for adversary activities. I always like seeing this annual statistics to get an idea of how things have "improved", for either side. Key figure: An average of 48 minutes "breakout time". A quick 🧵

If you haven't yet subscribed to @johntuckner.me's @secureannex.com "Just Browsing" newsletter, then your inbox is clearly suffering. However, a little something that caught my eye today: "...some individual users have as many as 6 browsers installed on their devices!" A quick 🧵...

As if @haroonmeer.canary.love and company couldn’t get any better, I must now find a way to play Padel with them!

One of my favorite weekly activities: Recording the Cybersecurity Defender's Podcast with @tekgrunt.bsky.social. I love that @riversidefm.bsky.social gives us quick snippets and pictures to share. Watch out for the next episode soon!

How about instead of "thinking about" banning links from X, just do it and move on? Actions speaker louder than words.

I'm not trying to chase technology, but the speed at which the M4 Max is creating videos is just insanely quick. Definitely the right choice to go all in on this one.

Currently running a cloud-focused workshop in Monaco @ the @first.org European Symposium, and naturally the Notion Incident Management System (NIMS) by @eric.zip and @whit.zip came up. I highly recommend checking this out for effective, automated incident management! nims-template.notion.site

@whit.zip equally also one of the coolest people I know, thank you!!

In Monaco for #TFCSIRT & FIRST Europe? Catch @bromiley.io's advanced threat hunting workshop tomorrow - real-world attack scenarios, open-source tools, and hands-on practice for hybrid cloud security. See you there! www.first.org/events/sympo...

This was a fun episode to record with Jason, highly recommend checking out his advice and journey!

A great CISO isn't just technical - they build relationships to help manage risk while asking the right questions. In Episode 6, Jason Rebholz explained some key objectives for today's CISOs. Watch or listen to the full episode here: cyberontheedge.fm/episode/epis... #Leadership #Cybersecurity

Dallas fam! Come hang with industry vets Ken Westin and @bromiley.io for a FREE hands-on workshop. We're diving into Okta detection & IR automation - perfect for MSSPs and IR teams. Plus, drinks after! Limited spots, don't miss out! lu.ma/st0hr2mx #cybersecurity #mssp #infosec

T-minus 35 minutes. Come join me as we talk about the browser extension fiasco that happened during the Christmas holidays. Let's hit 2025 running - I hope to see you there!

We're back with Defender Fridays tomorrow at 10:30am PT / 1:30pm ET - Matt Bromiley from LimaCharlie will talk about safe browser extensions. Come join the conversation! limacharlie.io/defender-fri...

I’m not sure what y’all asked for for Christmas, but watching @johntuckner.me dissect the Cyberhaven browser extension compromise is the gift I didn’t know I needed. This is a literal play-by-play, annotated analysis of a significant browser-borne threat.

Not that I had my doubts, but just a quick lookup in @johntuckner.me's @secureannex.com to validate I'm installing what I'm expecting. This is a must-have reference for anyone analyzing and/or managing Chrome extensions.

Dannng - always feels a bit personal when researchers are targeted. Threat actor MUT-1244 trojanized GitHub tools to steal 390K+ credentials, targeting security researchers and pentesters. Lesson? Vet all tools—even exploit PoCs. Don't just clone and run! More here:

I'm not sure if Ben Reardon is on bsky (or else I'd tag), but I highly recommend defenders check out this @corelight-inc.bsky.social blog post on Ben's quick network detection work on a newly-released SSH scanner: corelight.com/blog/black-h... CC: @philhagen.com for some awesome insight

Say what you want about the “hacker”movie Swordfish, Paul Oakenfold ripped out a banger of a soundtrack.

I’m excited to see @secureannex.com here, my dude @johntuckner.me is building something amazing for browser extensions. Go check it out!

So happy - I just signed up to join @tekgrunt.bsky.social on the Cybersecurity Cares telethon on 2024-12-19. Looking forward to vibing with Chris for a quick session, despite the fact that he and I record a podcast episode every week 😎 Want to contribute: www.cybersecurity-cares.com

I may be late to the game, but I just discovered this app and I feel this is one of those "won't ever go back" apps. Bringing Alt+Tab granularity to macOS: alt-tab-macos.netlify.app

Recording the latest episode of Cybersecurity Defender's Podcast with @tekgrunt.bsky.social, and part of our conversation featured Wolfi, a Linux distribution built for secure software supply chain. Seems cool on the surface, I need to dig into this further! github.com/wolfi-dev

Seems I stumbled upon a thread of folks revitalizing CRT monitors. I’m all for nostalgia, but this might be one I sit out..

Just got back from @bsidesaustin.bsky.social last night, and I wanted to drop a quick thanks to the conference organizers for putting on an amazing event. I've attended multiple times over the past few years, and it's an event I always look forward to. From content to workshops, a solid lineup.

Day 2 @bsidesaustin.bsky.social ! I had a ton of fun running yesterday's workshop, looking forward to talks and content today. Hit me up if you're around!