@JimmyVo

BJJ Blackbelt & Security @cantinasecurity

Joined March 2008
  • Tweets61.7K
  • Following2.2K
  • Followers4.1K
1.6KMedia
I've been using @bot for a while. One of the workflows that have helped is what I dub, interesting shit curator. When I see interesting posts on various social platforms, blog posts, etc I use an iOS Shortcut which webhooks the link or text to a Curator bot
🤖 Made with AI
1
3
165
more replies
Researcher bot will do a deeper dive when it's something I should be looking at now. The handoff from Curator can be seen here to my Research bot
1
1
60
These items are also dropped into a custom reader/Karpathy inspired llm wiki. Where I can read, annotate/highlight notes. The combination of specialized bots and some custom tooling has really helped me stay better organized. The custom tooling (curator queue and llmwiki) are self hosted and have their own MCPs for grok bots to use.
1
67
A lot of skills and plugins to clarify what frontier models are outputting but sometimes we want to spice up the outputs to feel frontier-y when using local models. I made a very unhinged solution to take human written text to frontierize your text: meatpro.xyz
2
249
Before you speculate and dunk on Snowflake's Security team, remember they're real fucking good a threat detection. How would I know? I've built a threat detection program based off their Threat Detection Maturity Model: medium.com/snowflake/threat-… #hugops

Threat Detection Maturity Framework

How do you measure the success or maturity of a Threat Detection program? What should a Threat Detection team roadmap look like? What is…

medium.com
1
6
589
Actually don't dunk on any security team dealing with shit unless you want me to heel hook you
9
281
ugh computers
1
1
8
681
You get “you up?” texts for booty calls. I get them from pager duty. We are not the same
𝚒𝚍𝚒𝚘𝚝 𝚜𝚊𝚗𝚍𝚠𝚒𝚌𝚑@jabbareadssmut20 Oct 2022
you get "you up?" texts for booty calls. i get them for honest star wars reviews. we are not the same.
8
I’m gutted to hear the world has lost @kriggins. He was someone I always looked up to. I had the pleasure of meeting Kevin in person. We shared a mutual love for lifting weights and corgis. He has always been a role model and embodied excellence.
3
1
20
June 2012 - I finished grad school and was trying to break into security. Kevin sent me a graduation present. He was always cheering for me. April 2014 - I meet Kevin for the first time at BSides Chicago. He took a sweet headshot that I used for years.
1
7
Nov 2018 - I was drowning in grief and agony. I didn’t realize until now that he sent this message of support and I didn’t even fucking thank him.
8
My wife received a heart 15 years ago, on this day. Be a donor - @DonateLife
1
2
74
Replying to @M_haggis @subtee @ionstorm
I think that’s why an abstraction of asset management is interesting, like @jupiterone. Use current tooling to grab inventories, whether it be VM scanners, your CSPM product, EDR, doesn’t matter and dump into J1 for future querying.
1
1
It’s funny how we go back to asset management. I think about malicious docker containers on dev laptops. What are the rare docker images on laptops? What are some rare node packages?
1
4
I found @lnavapp be really useful when I have to review a log file.
1
1
So, I’m expecting in the next 2 weeks to have posted the following roles to join my team: - Senior Compliance Lead - Compliance Analyst - Senior Risk Lead - 3rd party Risk Lead - Senior Technical Privacy Lead - Security Awareness and Culture Lead Feel free to DM, and please RT
1
22
3
18
A coworker got called a hipster for using Miro for a kanban board. I’m just realizing how hilarious that comment was.
2
1
8
AWS She Builds is offering FREE training & cert vouchers for the AWS Solutions Architect Associate. Women will also join a community of learners & build connections to women in tech! awsshebuildscloudupsaa.splas… 🎓Earn AWS Certs 📆 8-weeks 🤩Register by 10/15 🛑NO experience required
13
236
14
559
Vendors can ML all they want but out of the box detections often lack context of your environment. Consume raw EDR events and augment with custom detections. Same applies with control plane/data plane logs on your cloud provider.
4n6lady
@4n6lady21 Sep 2022
An EDR/XDR isn't your be-all and end-all tooling to safeguard your environment against cyber incidents. You still need to manage it and update it. It's not a magic wand.
2
3
6
The security vendor space is interesting because there is incentive from an ARR perspective to become a platform which offers many prevention or detection capabilities by 1 vendor. When your VM vendor can do SIEM things, you can combine context (asset + events). That's great.
1
1
What if I only want to use one solution on your platform? Let's hope there's an integration.
Load more