The 2025 SANS Holiday Hack is open! www.sans.org/holidayhack Shoot, I always blink when the photo's taken...

Yay for innovative phishing?

Is it "punching down" when vets/service members pick on the Air Force? (-:

I know I'm a mil nerd when I get excited about a quote like: "We want our military to be our servant - never our overseer." It's one of those truisms those of us in uniform all feel but maybe never had the words to speak. warroom.armywarcollege.edu/podcasts/sec...

JSB finna drop some new beats! Umm, wait...

Called a healthcare facility today and got my call rejected with an error code. I was calling from my home SIP line. Are orgs are starting to do reputation scoring for incoming calls?

Do you have a bunch of breach data that you're tired of grepping through every time? Sure. We all are! Try Clickhouse! I went from ~10 min/query to 1-15 seconds. And it takes up less disk space! gist.github.com/chriselgee/8...

"Any president has the right to make a wrong decision and the right to see that wrong decision executed by the US military to the best of their ability - even if it goes directly against military advice." -GEN (Ret.) Frank McKenzie on military (a)politics warroom.armywarcollege.edu/podcasts/the...

In case you didn't know, December was a long time ago

Encouraging to see directly from SECDEF: "I'm proud to come alongside the 1.3 million uniformed members of the department who execute America's national security approach and do so with fidelity only to the Constitution and the rule of law, and that's all you can ask for," he said.

DeepSeek: along with conversations, we collect cookies, device model, operating system, keystroke patterns or rhythms, IP address, and system language 🇨🇳 For security. 🇨🇳 www.forbes.com/sites/zakdof...

Well TIL www.linkedin.com/pulse/discov...

It warms my heart that strategery is part of our lexicon

Want to grab screenshots of lots of web hosts in one shot? EyeWitness is the thing. And if you have Docker installed on your testing machine, you don't need to install anything else. Grab the commands here: gist.github.com/chriselgee/f...

The year is 2025, and you still can't name a folder COM1 in Windows 11

What podscasts do you rely on to stay current in #infosec? For me: - isc.sans.edu/podcast.html (short, techincal) - thecyberwire.com/podcasts/dai... (less technical) - risky.biz (feat. geopolitics!) - www.cisecurity.org/insights/pod... (managerial) - darknetdiaries.com (stories)

Should... should I have more than one?

Thanks Evan Booth (you on here?) for designing this collectible, artisinal Chris Elgee card. I love it!

Teaching our kids the classics

Bank as IDP?

"Our job is to make it safe, not to tell [users] not to click on things on the *thing clicking machine that we gave them*" @metlstorm.risky.biz I'm planning on repeating this quote quietly to myself at least once a week for the rest of my days. www.youtube.com/watch?v=Rxye...

My son asked my why the whole world doesn't use a sinlge timezone That's when I knew he'd end up in digital forensics 😢

It's been said that cool APT names only encourage attackers. What should we use instead? I'll get you started. - Sad Wiener Dog - Incontinent Chipmunk - Disappointing Lunch - Moist Compost - Impotent Uncle

Swing and a miss Copilot, but I like the way you think!

Intentionally vague post: If you've pentested an org and they later have "an incident," I recommend you don't write speculative blog posts about how you think it maybe went down. 💩