I have been recruited by the Star League to defend the Frontier against Xur and the Ko-dan Armada
Joined July 2009
- Tweets1.5K
- Following404
- Followers1.3K
- Likes1.7K
William Metcalf retweeted
10 years ago today CAPE Sandbox was released...
Today we are proud to announce its desktop partner-project CAPEsolo: github.com/CAPESandbox/CAPEs… 🎉
All the power of the sandbox in a desktop application 💪
pip install capesolo
William Metcalf retweeted
I just pushed out version 1.9.28 of box-js to NPM (npmjs.com/package/box-js).
Nice! Yeah there is also signify which tries to approximate the ms-cert store pypi.org/project/signify/. Worth a look you! I wanted something that I could deploy in win sandboxes/throw away server core workers that did real validation using win api's. think updated signtool.
@SquiblydooBlog This tool is probably only useful to me.. But hat tip to you :) and certgraveyard.. github.com/wmetcalf/myatg
I was also recently looking into this for keys pulled out of lsass/SSLKEYLOG for cape runs. I found a PAN writeup from years ago that claimed this was possible with tshark but couldn’t get to work so I recently baked it into my HAR/SaZ conversion tool github.com/wmetcalf/GoGoRobo…
William Metcalf retweeted
Security Detections MCP 3.0 is LIVE
What started as a detection search MCP is now an autonomous detection engineering pipeline.
Agents now run a full workflow:
CTI → coverage analysis → detection generation → SIEM validation → PR staging
Pipeline example:
• CTI Analyst → extracts MITRE techniques from threat intel
• Coverage Analyzer → checks 7k+ detections across Sigma / Splunk / KQL / Elastic
• Detection Engineer → generates missing detections
• Atomic Executor + SIEM Validator → tests detections
• PR Stager → prepares them for review
Multi-SIEM support:
Splunk • Sentinel • Elastic • Sigma
Open source 👇
Repo
github.com/MHaggis/Security-…
npm
npmjs.com/package/security-d…
Pulse MCP listing
pulsemcp.com/servers/mhaggis…
Watch the full demo:
youtu.be/03ZmD5cdfHI
William Metcalf retweeted
Talk about ending the week on a high note. 🎉 With @Cisco's acquisition of @snapattackHQ now complete, we're looking forward to driving further Splunk innovation as we continue to deliver security solutions that support today's new era of SIEM. Read more here. #SplunkSecurity
Enjoy punching phish? Experience writing detections for phish, using regex, Yara, etc., and looking to grow as a researcher within an experienced team? Join me and the rest of the Splunk Attack Analyzer Misfits of Detection Science. US only, fully remote splunk.com/en_us/careers/job…
For the 2 people who probably care I took a stab at adding cert validation, SAN extraction, and missing/invalid certs. github.com/wmetcalf/rdp_holi…
William Metcalf retweeted
“America.
Oasis is coming.
You have one last chance to prove that you loved us all along.”
Oasis will tour North America in 2025!
Register for the North American ticket pre-sale private ballot 👉OasisMusic.lnk.to/L25NAmPS
The pre-sale will take place Thursday, 3rd October.
Tickets go on general sale this Friday, 4th October at midday local venue time.
@CageTheElephant
William Metcalf retweeted
“This is it, this is happening”
Tickets on sale this Saturday 31st August (🇮🇪8AM IST / 🇬🇧9AM BST)
Dates:
Cardiff Principality Stadium - 4th/5th July
Manchester Heaton Park - 11th/12th/19th/20th July
London Wembley Stadium - 25th/26th July & 2nd/3rd August
Edinburgh Scottish Gas Murrayfield Stadium - 8th/9th August
Dublin Croke Park - 16th/17th August
William Metcalf retweeted
Liam and Noel Gallagher seemingly confirmed that an Oasis reunion is happening after sharing a cryptic clip on social media on Sunday.
variety.com/2024/music/news/…
