@Rev10D
Joined February 2016
  • Tweets215
  • Following498
  • Followers647
23Media
jordan drysdale retweeted
David Rowe@davidprowe11 Feb 2021
Update list for Badblood: 1. Parameters for easier creation of Objects 2. Parameters to skip LAPS and OU creation.
2
3
13
BHIS | Tester's Blog A Sysmon Event ID Breakdown by: @Rev10D Published: 1/8/2021 Learn more: blackhillsinfosec.com/a-sysm…

A Sysmon Event ID Breakdown - Updated to Include 29!! - Black Hills Information Security, Inc.

Jordan Drysdale // UPDATES! October 30, 2023There’s been an additional update for Sysmon! Event ID 29! Another Event ID (EID) was added to the Sysmon service. This event ID followed […]

blackhillsinfosec.com
7
11
jordan drysdale retweeted
Blake Regan@crash0ver1d35 Feb 2021
Replying to @cillic
Sysmon, 25 event IDs, better visibility vs. traditional Windows Logging. Great blog on Sysmon Logging and EventIds, with the new Event Id 25, Process Tampering, written by @Rev10D blackhillsinfosec.com/tag/sy…
3
1
21
jordan drysdale retweeted
blueteamblog@blueteamblog29 Jan 2021
Red teams / pen testers etc. What one thing can blue teams do to make your life more difficult? What do you come across and think “Damn, they did that”?
3
8
33
#ThreatHunting: A #Sysmon Event ID Breakdown bit.ly/3acUlkm-Ttx @olafhartong @Rev10D @BHinfoSecurity 𝞝 #Enterprises #Organizations #ThreatHunting #Hacking #InfoSec #CyberAttacks #LateralMovements #CyberSecurity #WMIC #ClipBoard #Passwords #MitreAttack #MSDefender
2
5
Applied Purple Teaming will be offered only once this year, so unless you plan on waiting until 2022 to join us for APT, you'll want to register ASAP. Registration closes this Wednesday (1/27): defensiveorigins.com/trainin… #infosec #purpleteam #blueteam #redteam #cybersecurity
8
2
5
Remember the Squirrel Nut Zippers?
24
1
1
85
jordan drysdale retweeted
Blake Regan@crash0ver1d314 Jan 2021
Thank you for the cool swag @grimmcyber. #GrimCon 0x3 was a blast!
1
1
jordan drysdale retweeted
Olaf Hartong@olafhartong11 Jan 2021
Sysmon 13 has just been released. I’ve just published a detailed look at the new ProcessTampering feature in a blog. medium.com/falconforce/sysmo… #DFIR #Infosec #Sysmon
8
247
8
624
Fresh on the blog today: "A Sysmon Event ID Breakdown" defensiveorigins.com/a-sysmo… @Rev10D #infosec #sysmon #sysinternals #logging #threatoptics #cybersecurity
5
6
💥😱 @tiraniddo added "named pipe RPC client transport" to NtObjectManager 🔥 Thank you very much James for all your work 👏! I'll create PS scripts to cover a few scenarios 🍻 (Img 4) If anyone would like to help me, let me know 😉 @OTR_Community github.com/Cyb3rWard0g/WinRp…
2
46
2
133
Great year in webcasts. @BHinfoSecurity @WWHackinFest
1
2
Thanks Brother! Couldn't do it without you!
Roberto Rodriguez 🇵🇪
@Cyb3rWard0g4 Dec 2020
Nicee! Thank you for sharing @Rev10D ! Very happy to see Azure-Sentinel2Go 🛒 helping others in the community 🙏 🔥 github.com/OTRF/Azure-Sentin… I also appreciate all the support from the @BHinfoSecurity fam to my open source work 🤗🍻 it means a lot! @OTR_Community

GitHub - OTRF/Microsoft-Sentinel2Go: Microsoft Sentinel2Go is an open source project developed to...

Microsoft Sentinel2Go is an open source project developed to expedite the deployment of a Microsoft Sentinel research lab. - OTRF/Microsoft-Sentinel2Go

github.com
2
***NEW*** BHIS | Tester's Blog Azure Sentinel Quick-Deploy with Cyb3rWard0g’s Sentinel To-Go - Let’s Catch Cobalt Strike! by: @Rev10D Published: 12/2/2020 Learn more: blackhillsinfosec.com/azure-…

Azure Sentinel Quick-Deploy with Cyb3rWard0g’s Sentinel To-Go - Let’s Catch Cobalt Strike! - Black...

Jordan Drysdale // tl;dr Sentinel is easy! Especially when using Azure Sentinel To-Go. So, let’s do some threat research by deploying Sentinel To-Go and executing a Cobalt Strike beacon. Link: […]

blackhillsinfosec.com
5
1
23
***NEW*** BHIS | Tester's Blog Azure Security Basics: Log Analytics, Security Center, and Sentinel by: @Rev10D Published: 11/24/2020 Learn more: blackhillsinfosec.com/azure-…

Azure Security Basics: Log Analytics, Security Center, and Sentinel - Black Hills Information...

Jordan Drysdale // TL;DR The problem with a pentester’s perspective on defense, hunting, and security: Lab demographics versus scale.  If it costs $15 bucks per month per server for me […]

blackhillsinfosec.com
29
1
86
jordan drysdale retweeted
Anthony Randazzo@amrandazz23 Nov 2020
Mapped all of the Amazon GuardDuty Findings to @MITREattack. A bit more of an art than a science. Hopefully useful to some detection and response teams out there. See 🧵for more detail 👇
8
143
14
526
The "Cloud Pentesting" Roundup is well nigh upon us. Join us on December 10! @dafthack will MC. Presenters include @_dirkjan, @Moos1e_Moose, @mcohmi, @andrewkrug, and @elitest. Attendees register for free. Learn more here: wildwesthackinfest.com/the-r…
13
5
29
jordan drysdale retweeted
Tony Hawk
@tonyhawk20 Nov 2020
I once skated through the NYSE because trading on the floor was too intimidating. Investing in the stock market is scary if you aren’t an expert or don’t have money to burn. But @public is changing the game; the app allows you to invest small amounts in publicly traded companies – at Encinitas, CA
65
109
42
2,055
If you see something, say something!! @Rev10D hacking public wifi, trying hard to get someone to ask what he's doing.
1
2
11
We officially have a blog! Thinking of threat hunting in Azure? Start here: defensiveorigins.com/azure-s… @Rev10D #infosecurity
1
10
24
Load more