Interested in the cyber.
Joined February 2011
- Tweets848
- Following174
- Followers950
- Likes225
Excited to share some attack path diagram tips and tricks tomorrow with Brad! #DefendersThinkInGraphs #DFIR
Join us at #DFIRSummit when @DavidPany and @BSlay88 discuss how they plan attack diagrams and tools they have used so you can develop your first or next diagrams.
Register here: sans.org/u/1pkc
#DFIR #IR #IncidentResponse
Is it weird that it’s a well known faux pas to roll your own crypto, but every website has been rolling their own identity with password policies, hashing, salting, storing, mfa, etc. for many years?
Recent advances in “log on with” providers must be relief for devs.
I just made a vector graphic and I liked it. Please don’t tell MS Paint. I’ll tell it via text when I’m ready.
Anyone know if Sysmon EID 9 RawAccessRead can record the target file being accessed? I only see the process doing the access (less useful if injected) and the Device being accessed (how is that useful?). Not seeing answers in docs/blogs/etc.
#DFIR
Planning a New Year's resolution to get a new job at an awesome #DFIR company? Make it happen with:
Weekend shift IR: jobs.smartrecruiters.com/man…
Engineering our in house world class toolset:
jobs.smartrecruiters.com/Man…
jobs.smartrecruiters.com/Man…
Questions? Let me know.
Okay here are more #FrozenDFIR memes you did not ask for to pick up from xitter.cf/DavidPany/status/14526…
This Friday 2 PM ET is your chance for a win/win/win:
- learn from an amazing incident responder @Gigs_Security
- look at cyber threat hunting through the perspective of the @taylorswift13 fanbase
- support the @DianaInitiative mission
dianainitiative2021.sched.co…
#ReadyForIt?
1. Random scripts have been more popular than I ever expected. If you have an idea, share it.
2. Some of my bigger tools never get used. Doesn’t mean they didn’t serve a purpose.
3. Fumbling through python with (almost) 0 formal edu was an amazing investment. You can do it too.
During my Twitter break, I implemented @DavidPany’s B64Cer .py (github.com/davidpany/PanyToo…) fully in Kusto.
Necessary? No way! But was super fun.
Wondering if we should make a repo of standalone Kusto queries that anyone can run to see why it’s more than a query language...
Ty @ItsReallyNick for advocating this little tool several times. I’m pretty sure I made it to directly combat @danielhbohannon being sneaky with PowerShell and to catch the string “@mattifestation”
Friendly reminder that if you don’t have your career all figured out, you are not alone or failing. Stern reminder not to assume others are 100% happy just because they are good at their job. Support others on the journey of life. Ask for help if afraid.
youtu.be/kQ8xqyoZXCc
Follow me on @onepeloton as Davidpany, or do not, I am not a beggar. End of #DFIRFit commercial.
.@nicastronaut and I have been using @msexcel formula =CONCAT like amateurs! TY @noah_sidd for showing us =TEXTJOIN that accepts a delimiter!
#ExceleratingAnalysis
