InfoSec | PowerShell Novice | Craft Beer | Gamer | Prefers 4 out of 5 Great Lakes
Michigan, USA
Joined March 2018
- Tweets259
- Following181
- Followers55
- Likes980
Morgan retweeted
๐ฅ Exciting update and launch competition! ๐ข
Folks, I'm happy to announce another important milestone for @PwnedLabs - the launch of the ๐ ๐ถ๐ฐ๐ฟ๐ผ๐๐ผ๐ณ๐ ๐๐น๐ผ๐๐ฑ ๐๐๐๐ฎ๐ฐ๐ธ ๐ฎ๐ป๐ฑ ๐๐ฒ๐ณ๐ฒ๐ป๐๐ฒ ๐๐ผ๐ผ๐๐ฐ๐ฎ๐บ๐ฝ - and our first certification!
๐ง๐ผ ๐๐ถ๐ป ๐ฎ ๐๐ผ๐๐ฐ๐ต๐ฒ๐ฟ, ๐ท๐๐๐ ๐น๐ถ๐ธ๐ฒ ๐ฎ๐ป๐ฑ ๐ฟ๐ฒ๐๐๐ฒ๐ฒ๐ ๐๐ต๐ถ๐ ๐ฝ๐ผ๐๐. 5 vouchers are available and will be drawn randomly.
This comprehensive 4-week bootcamp and its structured learning path provide students with foundational concepts, essential security tools and techniques, and instruction in attacking and defending Azure and Microsoft 365 environments.
Students who successfully complete the 4-week bootcamp and structured learning path can then attempt the exam lab to try and earn the ๐ ๐ถ๐ฐ๐ฟ๐ผ๐๐ผ๐ณ๐ ๐๐น๐ผ๐๐ฑ ๐ฅ๐ฒ๐ฑ ๐ง๐ฒ๐ฎ๐บ ๐ฃ๐ฟ๐ผ๐ณ๐ฒ๐๐๐ถ๐ผ๐ป๐ฎ๐น (๐ ๐๐ฅ๐ง๐ฃ) certification.
This has been one of the main things that our community has been asking for.
What can you expect to learn? -> bootcamps.pwnedlabs.io/mcrtpโฆ
โSecurity isnโt very technicalโ - the number of ppl within the IT Dept that believe this is concerning.
Despite being on the security team - somehow I spend more time in AD/Group Policy than the systems teamโฆ
Starting to feel like I never really left the Systems side despite switching roles a while ago.
Devices onboarded for Defender and Security Administrator = fast track to owning them. Applies in general to Security Administrator and or custom roles with adv live response with unsigned scripts.
Especially important to pay attention to if DCs are onboarded.
Information overload - vuln scans are great if the info is actionable. Scans from multiple sources for the sake of additional info and to compare against is just wasteful.
Shiny object syndrome kicking hard these days with all these vendors promising the latest+greatest.
Demoโd to my coworkers an escalation path to Domain Admin and showcase why logging/alert alone isnโt sufficient.
Reactions were mixed but overall we learned as a teamโฆ(but seriously it was a cool path to exploit)
Taking a break and hitting up the slopes for some classic Midwest skiing. Better than being in the office!
Few weeks into a new job and just recently learned what hours im supposed to workโฆ
Is that a sign? I feel like thatโs a sign.
Another day where an object was used elsewhere (not documented) and caused an issue when changed. Yesterday it was a service account, today a group.
Positive note, itโs been identified and properly remediated but still. Create purpose built objects from the start.
Offering your team a 4x10 with conditions on Friday to: check in, answer emails, and be available - isnโt really much of an offer. But thanks for letting me know I can always work longer days and extra hours if I want to.
