@reg0bs

Infosec and Data Enthusiast. Lecturer. Course Author. Coffee Nerd. He/Him.

 Austria
learnsplunk.co
Joined October 2014
  • Tweets1.2K
  • Following1.3K
  • Followers349
80Media
I'm super happy and grateful to present you a new course I created together with the legendary @chrissanders88: Splunk for Security Analysts. I still can't believe it, but it just launched and I hope people will enjoy it 🤞
Chris Sanders 🔎 🧠
@chrissanders8818 May 2023
I’m excited to launch our latest course, Splunk for Security Analysts. ⛏️ You can read more about the online, on-demand Splunk for Security Analysts course and register now at networkdefense.co/courses/sp….
4
2
23
5,274
Thanks to @QuinnyPig's newsletter I stumbled upon this gem: Instead of providing a Sigma rule to copy/paste or download, AWS (or its AI) decided to include step by step instructions on what values to put in what fields: aws.amazon.com/security/secu…
Meme saying "Y u no sigma rule"

ALT Meme saying "Y u no sigma rule"

51
I miss Audiogalaxy.
Bryson 🦄
@brysonbort5 Oct 2025
i miss napster
64
Regular Obsession retweeted
Shodan@shodanhq23 Sep 2025
Want to explore the Internet through a retro-futuristic version of Shodan? We've just updated the Shodan 2000 website: 2000.shodan.io/
6
40
2
252
24,220
I don't know many CISOs, but judging by the endless stream of "CISO guides" vendors keep cranking out, apparently the industry thinks they're all winging it.
35
Who says I can't be all 3?
41
To the person who decided that certificates in /usr/local/share/ca-certificates have to have a .crt file extension: Please be aware, that I'm not a huge fan of your decisions.
43
Today's reason to raise an eyebrow: Your document includes the phrase "Data is the new oil"
48
What's a good way to measure/communicate detection coverage? And no, not ATT&CK 😅
53
Interesting thought by @jack_naglieri that AI may replace (or enhance?) detection rule conversion currently done e.g. with @sigma_hq🤔 @cyb3rops @nas_bench are you thinking about / looking into this? Curious to get your take on it.
2
3
1,052
At least once the 90s aren't calling @anton_chuvakin, right? 😁
1
1
89
This looks pretty useful. Looking forward playing around with it: aws.amazon.com/blogs/securit… Thanks @clintgibler for keeping all of us informed! 🫶

Testing and evaluating GuardDuty detections | Amazon Web Services

Amazon GuardDuty is a threat detection service that continuously monitors, analyzes, and processes Amazon Web Services (AWS) data sources and logs in your AWS environment. GuardDuty uses threat...

aws.amazon.com
28
Dragonball detection engineering: When your goal is to get over 9000.
35
Regular Obsession retweeted
Alan Orlikoski
@AlanOrlikoski16 Feb 2025
Replying to @chrissanders88
@chrissanders88 DFIR Course Investigative Theory is by far the best course I've ever recommended to teach this critical skill. chrissanders.org/training/in…

Investigation Theory Training | Chris Sanders

chrissanders.org
DFIR Training
@DFIRTraining15 Feb 2025
2
2
442
What's your take on alert scoring? High/medium/low vs. 0 - 100 vs. record/notification/page? Static per rule vs. influenced by subject or other attribute (e.g. if user == admin: score++) Communicated attribute: Severity vs. urgency vs. confidence...? One of them, a combo?
3
4
465
@anton_chuvakin @Antonlovesdnb @ateixei @jaredcatkinson @bettersafetynet @0x4D31 @ramimacisabird
1
116
Even new portals still come up with a UX like this around passwords: * Password complexity requirements 👎 * You ban (only) these 2 words? 👎 * If you block certain special characters it seems you don't know much about encoding/escaping 👎 * Red check marks for passed items 🙈
45
Regular Obsession retweeted
Yes, But
@_yesbut_29 Dec 2024
441
57,824
2,484
260,837
8,226,487
Recruiters doing memes on LinkedIn hurts so much, it should be a felony.
45
AND courses on sale tomorrow 😊
1
5
23
2,191
Me when my phone asks me for the name of the person in the selfies
34
Load more