Adversary emulation @scythe_io. Public Speaker. USMC vet. Writing about threat intel, detection engineering, and what actually works. Thoughts are my own.
Tampa, FL
Joined July 2018
- Tweets1.2K
- Following1K
- Followers597
- Likes3.2K
TreyCraf7 retweeted
TOMORROW with @MalwareJake
3 days out: @brysonbort and @MalwareJake on how MCP turns AI agents into a new attack surface, and what defenders should test now. Wed 10/14, 2:30 PM ET. #UnicornDispatchLive #MCP hubs.ly/Q04yCzRL0
Interesting breach reporting from @Unit42_Intel
unit42.paloaltonetworks.com/…
Thanks for having me on the show again @PhillipWylie . It was a great conversation! 🫡
@TCraf7 was featured in episode 100, but so much has happend with Trey since that episode. We sat down this week to discuss all he has done and what's new. His episode drops on October 27. Check out episode 100 in the comments.
TreyCraf7 retweeted
October has entered the Temple. 🕯️💻
Tonight, we’re kicking off the month with Talk Roulette then next week, we’re diving back into the grid for Hack The Box & Training Night.
Check the graphic for the details and RSVP.
See you at the Temple. 👻 neontemple.net
TreyCraf7 retweeted
If you are not following @TCraf7, you should. He frequently speaks at conferences and leads workshops. He runs an educational nonprofit in the Tampa area. He was also a guest on my podcast, and we are planning a new episode soon. Here is his episode: youtu.be/3n0BKLaqDvs
TreyCraf7 retweeted
Web/API Security: Attack & Exploit with Burp Suite with @sunnywear
Get hands-on with Burp Suite in this fast-paced 4-hour workshop covering real-world web and API exploitation techniques.
bsidesorlando.org/workshops/…
Hey everyone, I just wanted to let y'all know I will be speaking and teaching a workshop on PurpleTeaming at @InfoSec_World 2026 in October! #PurpleTeam #cybersecurity
Hey Florida friends and neighbors, ill be teaching a workshop and hanging out with everyone at @BsidesORL September 25th & 26th! Come check it out.
TreyCraf7 retweeted
I just published If America’s Innovation Economy Is Becoming More Distributed, Here’s Where I’d Bet joyrandels.medium.com/if-ame…
TreyCraf7 retweeted
AI agents are changing how security teams decide what to patch first.
Register here to join Unicorn Dispatch Live: hubs.ly/Q04pC3DV0
@brysonbort sits down with Mike Gualtieri (@mlgualtieri) from @Netlify to talk agentic vulnerability management and how teams ruthlessly prioritize what actually matters.
Sept 17 | 11:30 AM ET
#CybersecurityEvents
#UnicornDispatchLive
#AI
TreyCraf7 retweeted
🛡️We added Fortinet FortiSandbox vulnerabilities CVE-2026-25089 & CVE-2026-39808 and Microsoft SharePoint vulnerability CVE-2026-58644 to our KEV Catalog. Visit go.dhs.gov/Z3Q & apply mitigations to protect your org from cyberattacks. #Cybersecurity #InfoSec
TreyCraf7 retweeted
A reverse shell that checks C2 for newer versions of itself, pulls updates, and restarts automatically: Trey Bilbrey (@TCraf) on Qtop's self-update mechanism and why it's worth hunting for.
See more of our next live sessions here:
hubs.ly/Q04p8P2y0
#ThreatEmulation #ThreatThursdayLive
Anyone on here play MTG Commander? I'm debating bringing a deck or two with me to Hacker Summer Camp since im there for the whole week.
Hacker Summer Camp is almost here! My team and I have been busy preparing some killer content for you all. If you want to learn more about Threat emulation, Purple Teaming, or some cool new behaviors come hang with us and the @scythe_io team. Deets Below:
#DEFCON34 #PurpleTeam #ThreatEmulation #BSidesLV
🤖 Made with AI
TreyCraf7 retweeted
Staying undetected isn't the win condition in a purple team exercise. Trey Bilbrey (@tcraf7 ) on the mindset shift: if your blue team isn't ready to detect in-memory execution or unmanaged PowerShell, obfuscation won't surface anything useful. Build the detection foundation first.
Got questions? Talk to us: hubs.ly/Q04m63nL0
#PurpleTeam
#ThreatEmulation
#DetectionEngineering
TreyCraf7 retweeted
Adversaries are walking the full ATT&CK chain with built-in Windows binaries, macOS isn't a safe haven, and AI is stripping the tells out of social engineering. Three live sessions:
June 24 | 1:00–4:00 PM ET | Living Off The Land: From Execution to Impact 3-Hour Hands-On Workshop with Trey Bilbrey (@tcraf7 ) and Tyler Casey → hubs.ly/Q04m68Dx0
June 25 | 12:00 – 12:20 PM ET | ChillyHell macOS Backdoor with Trey Bilbrey (@tcraf7 ) and Tyler Casey → hubs.ly/Q04m66Mx0
June 30 | 3:50 – 4:45 PM ET | AI-Augmented Social Engineering with @brysonbort and @ErichKron (from @KnowBe4): hubs.ly/Q04m6nsc0
See all upcoming events here:
hubs.ly/Q04m6qNW0
#CybersecurityEvents
#ThreatThursday
#UnicornDispatchLive
