@EndpointSec

Research | Product Management | IT Security | Digital Forensics | Malware. Tweets are my own views, RTs not necessarily.

 Manchester, England
Joined April 2014
  • Tweets1.1K
  • Following381
  • Followers311
134Media
Just because AV missed it doesn't make it an APT, unless APT stands for Average Preventable Event. Stop reacting, start preventing
1
6
Captain Helme at the helm @BSidesLanc
1
1
1
15
2,108
I was recently interviewed on @VICENews where we discussed hacking as a career path. @BiaSciLab clearly shows the future is amazing and vibrant, with a strong glow of terminal green. GirlsWhoHack.com biascilab.com youtube.com/watch?v=vY-U5nG8…

Girls Who Hack

Teaching girls the skills of hacking so that they can change the future

girlswhohack.com
1
4
10
What a journey so far on the @girlsoutloudorg Big Sister Programme! Me and my ‘little sister’ 📸 Loving watching this girl grow! 💫 Kudos @BeyondTrust for sponsoring such a meaningful initiative 🧡 #mentoring #community #beyondtrustlife
2
6
looking/hunting for MS Office -> suspicious child processes on macOS (sh, osascript etc.) ? this is how MS Office Errors Reporting looks like on macOS :D
1
8
1
34
Fantastic to have @marcmaiffret onboard!
Marc Maiffret
@marcmaiffret20 Aug 2021
Excited to be back at @BeyondTrust building on all of the great progress that's been made. Thank you to the infosec teams that invited me in to work along side them the last few years. I will bring that empathy forward with what I do next. bit.ly/2W7ckVY
1
"We don't think we're vulnerable to this local privilege escalation CVE because no unprivileged users access our servers." F M L
19
16
10
243
Is ending a sentence with "socially distanced of course" the equivalent of returning from doing the shopping and saying "I didn't steal it"
2
"Attackers prefer short paths and rarely attempt long paths. This means anything you can easily throw in their way to increase the number of actions they have to take is likely to significantly decrease their chance of absconding with the data" - Verizon DBIR 2020
1
This is why removing admin rights and application control has such a big impact. You remove the easy short paths from the attacker forcing them to take the long way round which they might not be able or willing to do
Application Guard for Office has been release for general availability. It was a long fun journey to get here. Special thanks to @dwizzzleMSFT and team for your support. We look forward to adding new things in this area so send us feedback - techcommunity.microsoft.com/…

Application Guard for Office now generally available | Microsoft Community Hub

Application Guard provides an extra layer of protection for your users' Office files. Click here to learn more!  

techcommunity.microsoft.com
1
5
2
33
Any one else still use @Avecto Sandboxing ?
1
7
Threat research life
Yonathan Klijnsma@ydklijnsma3 Feb 2020
To the person who figured out my honeypot is a honeypot could you please stop putting the picture of Pooh bear with a jar of honey on it? Its like this person's life mission, I've blocked him on: - Client - IPs (now on Tor ffs) - The image (he just edits 1 pixel every time...)
Hi ho hi ho it's off to work we .....doh! @northern_resist @northernBetrail
1
1
7
Cybertruck pulls F-150 uphill
12,429
87,793
15,128
523,452
This is what trying to get into Manchester by train in 2019 looks like, trains cancelled, late and short formed with people left on the platform @AndyBurnhamGM @northern_resist @northernBetrail @northernassist
9
22
1
41
Off to a fine start for the return journey
1
2
Despite running late and having to stand I am still doing better than the folks trying to get trains final stops which have now been cancelled
Enough is enough. We’re organising a mass protest at MCV station before the GE. People have to *beg* to get on the train & others have been pushed to near falling between the train & platform. We pay thousands per year for this hell. Time for them to go. #northernlightsout
8
28
3
78
Load more