Creative problem solver, writer, speaker. #Automation #InfoSec #opensource #phishing #DFIR @TribeOfHackers #BlueTeam Atomic Red Team maintainer
Detection Eng - Sublime
Joined June 2014
- Tweets22.3K
- Following1.8K
- Followers3.2K
- Likes16.8K
Check out my new blog (and tool) titled Open Season: Domain Profiling!
This blog focuses on examining my own domain and breaks down understanding how domain resolution, registration, records, and domain security can be used to understand a domain.
dispatch.thorcollective.com/…
Josh Rickard - Thought Thinker retweeted
@MSAdministrator profiled his own blog's domain and walked away with a to-do list (he added CAA records, for one). new open season post for @THOR_Collective on how to actually profile a domain, and the tool he built to do it:
dispatch.thorcollective.com/…
#threathunting #thrunting
Hey everyone, I’m excited to share this new deep dive @sublime_sec blog I wrote on understanding Microsoft email headers for security (and IT) professionals.
sublime.security/blog/gettin…
Josh Rickard - Thought Thinker retweeted
the domain exists before the cert, before the page, before the email. icann publishes that moment daily, for free. @MSAdministrator wrote up why almost nobody bothers to look (& what's sitting there when you do)
@THOR_Collective 👉 dispatch.thorcollective.com/…
#threathunting
I wrote this blog post (finally) called Open Season: CZDS
Check it out if you want to know about this data enrichment service that’s free (sorta).
open.substack.com/pub/thorco…
I’d like to introduce opencti-enrichment! This is a Golang enrichment service to perform observable enrichment against OpenCTI to identify indicators of compromise.
As always, I hope this helps someone out there!
github.com/MSAdministrator/o…
Id like to introduce OSCO!
iterativesecurity.github.io/…
Open Security Capability Ontology is a canonical, semantic layer for cybersecurity capabilities
OSCO connects operating systems, cloud providers, SaaS platforms, security tools, & frameworks through shared capability semantics
I want to share this little python CLI tool I wrote called ai-router to route local LLM models based on your local system specifications.
ai-router uses Ollama, scores/ranks, then runs the prompt with the highest model.
github.com/MSAdministrator/a…
I know I don’t post much here but I’m excited to share that our (and my first) paper (Christianson, Rickard), “Beyond the Prompt: The Social Costs of Generative Artificial Intelligence” is available for the masses!
scholarship.law.missouri.edu…
I’m not sure if I ever shared this one but here’s saas-ips
saas-ips is a simple Python package and CLI tool to retrieve formatted lists of known SaaS based services IP ranges.
github.com/MSAdministrator/s…
Josh Rickard - Thought Thinker retweeted
this was a fun one. you're used to seeing evasion functions like this in malware but we're seeing it more in phishing kits these days too. great writeup by @MSAdministrator: sublime.security/blog/kratos…
Check out my first “official” blog at Sublime Security where I talk about a discovered “business term steganography” approach which I think is pretty neat.
A huge thanks to Brandon Murphy & Tony Sleva ! They are both wizards!
We found a phishing attack where the obfuscation was far more interesting than the social engineering.
The payload was hidden in an SVG using "business term steganography" – financial jargon as a cipher. To a scanner, metadata. To the attacker, one piece of a multi-layer obfuscation chain.
Breakdown: sublime.security/blog/kratos…
#cybersecurity #emailsecurity #phishing
Josh Rickard - Thought Thinker retweeted
@sysaaron is getting a Dickbutt tattoo. The catch: you have to fund it.
Raise $5,000 for Hope House and the ink goes on at SecKC in June. Permanent. Public. For charity.
Donate now: orders.seckc.org/
#SecKC #HopeHouse
Josh Rickard - Thought Thinker retweeted
Do you want to contribute to a good cause?We’re collecting donations for charity now through our June meeting.
What do you get out of it? Good feels and the knowledge that you are part of the reason @sysaaron has a tramp stamp! We’re less than $400 away!
orders.seckc.org/event/stamp…
I wanted to share a new blog post I’ve been tinkering with called “The Agentic Web”.
This post is my thoughts on a direction that LLMs can (should) take.
As a caveat the ideas are mine but did have Claude help :)
letsautomate.it/article/agen…
I’m excited to share that my talk titled “LLMs: Prompting, Agents, Assistants, Oh My!” was accepted for @_BSidesKC on April 25th!
We’ve all been hit by this tornado called LLMs. Join me as we navigate the yellow (LLM) brick road!
Josh Rickard - Thought Thinker retweeted
Checkout of this draft paper I cowrote about the externalities of generative AI on our society.
#llm #ai
linkedin.com/posts/josh-rick…
Checkout of this draft paper I cowrote about the externalities of generative AI on our society.
#llm #ai
linkedin.com/posts/josh-rick…