Virginia, USA
Joined April 2010
- Tweets3.1K
- Following418
- Followers1.2K
- Likes3.8K
Jared Greenhill retweeted
Yes! What they said 👇Register today for our #BSidesNoVA conference and go hang out in our Career Village! tinyurl.com/bsidesnova2025ti…
This Post is from a suspended account. Learn more
Jared Greenhill retweeted
#JobHunting? Don't miss our Career Village! Register today: tinyurl.com/bsidesnova2025ti…
📸 Professional Headshots
🧐 Resume Reviews & Mock Interviews
💪 Career Talks & Strategy Sessions
🤗 Sponsor Engagement
Jared Greenhill retweeted
Rise and shine! Our #BSidesNoVA 2025 Workshops are now available for purchase.
Hacker U: Where Curiosity Becomes Capability
Get your conference and workshop tickets here: eventbrite.com/e/bsidesnova-…
ALT Orange alarm clock with the Hacker U BSidesNoVA skull and crossbones crest in a field.
Jared Greenhill retweeted
TICKET SALES ARE NOW LIVE! THIS IS NOT A DRILL, PEOPLE!
Join us for #BSidesNoVA Workshops on Fri Oct 10th and/or the full conference on Sat Oct 11th at the GMU - Mason Campus in Arlington, Virginia.
Enroll in our Hacker U here:
eventbrite.com/e/bsidesnova-…
Jared Greenhill retweeted
Get school'd at Hacker U.
Security BSides Northern Virginia's 2025 conference will be enrolling soon.
Tickets - Fri Sep 5
Workshops - Fri Oct 10
Main Event - Sat Oct 11
bsidesnova.org
#BSidesNoVA #BSides
Jared Greenhill retweeted
Set an alarm for Friday, September 5th. Enrollment for #BSidesNoVA's Hacker U opens!
Watch this space for updates about ticket sales, conference schedule, keynote speaker, and more!
Workshops - Fri Oct 10
Main Event - Sat Oct 11
bsidesnova.org
Jared Greenhill retweeted
READY? OK!
WE'VE GOT SPIRIT, YES WE DO
WE'VE GOT SPIRIT, HOW 'BOUT YOU?
Enrollment in BSides NoVA's Hacker U begins on Fri, Sept 5th. Watch this space for more announcements.
bsidesnova.org
Workshops - Fri Oct 10th
Main Event - Sat Oct 11th
Jared Greenhill retweeted
Are you ready for it? ⚡️Follow us for updates about our #BSidesNoVA ticket sales and the identity of our 2025 keynote speaker.
ALT BSides Northern Virginia. Workshops: Friday, October 10th. Conference: Saturday, October 11th. bsidesnova.org.
Jared Greenhill retweeted
Our last talk in the 3PM ET time slot here at #BSidesNoVA, "When BlackCat Pounces: A Ransomware Tale from Personal Device to Governmental Impact" with Clint Patterson and Jared Greenhill.
bsidesnova2024.sessionize.co…
Jared Greenhill retweeted
"When BlackCat Pounces: A #Ransomware Tale from Personal Device to Governmental Impact" with Clint Patterson and Jared Greenhill (@jared703) at the #BSidesNoVA 2024 conference!
Saturday, September 7th at 3PM ET
Arlington, Virginia
Tickets: eventbrite.com/e/bsidesnova-…
Jared Greenhill retweeted
Don't miss this and all the great workshops, talks, and fun we will have at #BSidesNoVA 8-bit Games in a few weeks!
Register today: eventbrite.com/e/bsidesnova-…
Jared Greenhill retweeted
This is just one of the statistics included in the latest @Unit42_Intel 2024 Incident Response report. Get more valuable IR insights here:
paloaltonetworks.com/resourc…
#dfir
Jared Greenhill retweeted
#BlackCat has made #MuddledLibra an affiliate, giving them access to their “kit," including ransomware, support, negotiations and access to their leak site. Learn more about our insights into their tactics from @mikesiko in @SCMagazine: bit.ly/3EGmFve
Jared Greenhill retweeted
Dear DFIR colleagues,
Always be wary of 404 error codes in web server log files. Some webshells intentionally send this error code to deceive you into thinking the request failed.
shadowserver.org/news/techni…
Shot out to @BSides_NoVA and the awesome attendees of our Sept. 9 Black Basta talk. I was so impressed with all the great questions and engagement. CC: @Unit42_Intel #dfir
Excited to be speaking tomorrow at @BSides_NoVA with Mike Savitz around some of the most prolific intrusions I've seen this year.
Jared Greenhill retweeted
Curious about how groups like Muddle Libra operate? In this week's Unit 42's Threat Vector podcast, Stephanie Regan, senior consultant, sheds light on countering these enigmatic threat actors. Listen here: bit.ly/3KUWaWq.
Excited to announce that I’ll be speaking at @BSides_NoVA 2023 with Mike Savitz! Our talk, "Decrypting the Threat: When Black Basta Brings Their A Game" dives into IR examples and insights we've observed by this group over the last year.
Jared Greenhill retweeted
2023-05-17 (Wednesday): Today, this week's BB28 #Qakbot-style distribution chain pushed #Pikabot instead of Qakbot. Followed up with #CobaltStrike using #DNSTunneling. We later saw additional Cobalt Strike traffic over HTTPS. List of IOCs available at bit.ly/41OOKt2
ALT Diagram of Qakbot style distribution pushing Pikabot. It starts with an email that distributes a .JS file. A Pikabot DLL is saved and executed. The followup activity is Cobalt Strike.
ALT Wireshark traffic showing the Pikabot command and control, and the Cobalt Strike DNS tunneling. Highlighted in green is the initial .JS download. Also included is the Cobalt Strike data via DNS tunneling.
ALT Wireshark screenshots showing the Pikabot HTTPS command and control, the HTTPS Cobalt Strike traffic start, and inset windows show the Cobalt Strike server. Note: the earlier DNS tunneling for Cobalt Strike is still running at this time, but that traffic has not shown in this image.
ALT File Explorer screenshots showing how Pikabot is persistent on the infected Windows host.