Passionate about all things cyber security. MITRE ATT&CK is my jam.
Joined July 2016
- Tweets3.9K
- Following1.2K
- Followers955
- Likes10.7K
Pinned Tweet
"Cyber Knight Oath":
The internet is for everyone, to be used without fear. We stand up to the malicious. We stop those who would ransom. We never give up against any threat. For we are the Cyber Knights.
The Technique Inference Engine was a great experience and project. Really expanded our abilities using @MITREattack . Here is my journey on the project.
googlecloudcommunity.com/gc/…
So I have not posted here in a long time. But going to my fifth @MITREattack conference reminded me how important everyone i follow on here has been. Despite having less time and such I want to make an effort to maintain this account again.
Ivan Ninichuck retweeted
It's back to school time, and adversaries are taking advantage! If you support higher education or know someone who does, check out our blog on an email campaign targeting a university. Infrastructure pivoting suggests this could affect multiple orgs. redcanary.com/blog/email-acc…
Ivan Ninichuck retweeted
We'll be offering free virtual registration to ATT&CKCon 4.0 in the coming weeks, but would you like to join us Oct 24-25 in McLean, VA? Ticket sales start this Thursday, 8/3, at 12:30pm EDT/1630 UTC and will be $495. We'll be sharing the link here and on our other social media!
So apparently I wasn't paying attention to the fact that the app icon on this app was going to change. I saw a random "new app" called X and assumed malware downloaded on my phone. I uninstalled, then went, oops.
Ivan Ninichuck retweeted
Fucking love seeing my frens win. My brilliant friend @megan_roddie wrote a book!! Preordered, can’t wait to crack into this puppy.
Ivan Ninichuck retweeted
We've updated the Elastic Container Project to @elastic 8.9.0. Uses a shell script to deploy Elasticsearch, Kibana, and Fleet server. Useful for detection engineering tests, checking out malware capabilities, sandboxes, or other data analysis use cases. github.com/peasead/elastic-c…
This is going to be fantastic 😊
We are thrilled to announce our ATT&CKcon 4.0 keynote speaker, Runa Sandvik!
@runasand founded @GranittHQ, where she works to protect journalists and other at-risk people globally. She's also an ATT&CK contributor!
Tickets will be announced soon for our 10/24-25 conference.
Ivan Ninichuck retweeted
Evading EDR, by Matt Hand, gives an inside look look at how Endpoint Detection & Response agents pinpoint adversary activity. Learn the ways each sensor component collects data, how to design an EDR, & how to evade one. Pre-order at 30% off w/ code GOTCHA: nostarch.com/evading-edr
Ivan Ninichuck retweeted
✨detection-and-response-pipeline 🏗
A compilation of suggested tools/services for each component in a D&R pipeline, along with real-world examples. The purpose is to create a reference hub for designing effective threat detection and response pipelines.
github.com/0x4D31/detection-…
Ivan Ninichuck retweeted
.@redcanary recently helped create an expansion deck for Backdoors & Breaches! This is an awesome game to help learn incident response. Join my teammates plus @BanjoCrashland from @BHinfoSecurity at a webinar on July 13 to learn more! zoom.us/webinar/register/WN_…
Ivan Ninichuck retweeted
🚨I'm starting a new initiative where I share DFIR-related artifacts along with a short blog for context. My goal is to help ppl, especially newcomers, learn from real attacks.
More info in the resources below:
Repo: buff.ly/3NGf2J0
First blog: buff.ly/3NEWzwx
Ivan Ninichuck retweeted
There is a lot of hype around AI and cyber security, but what we really need is detail on specific use cases. I really enjoyed this latest @Mandiant blog that outlines specific examples where AI has helped (AND its limitations). mandiant.com/resources/blog/…
Ivan Ninichuck retweeted
Update on 'Azure AD Attack & Defense Playbook'. We (@Thomas_Live, @PitkarantaM & me) have added the updates on the AADSCA solution:
- Coverage of two new AAD endpoints: 'Default Settings' & 'Admin Consent Policy Settings'
- MS Sentinel integration (Playbook & Analytic rule)
Ivan Ninichuck retweeted
I think an "ATT&CK Mapper" role should exist. Where a person's sole job is to map rules to Att&ck. That shit is hard 😂
