fan of the absurd. engineer for @Sublime_Sec. previously at @Elastic @EndgameInc @MITREcorp
Colorado
Joined June 2018
- Tweets633
- Following626
- Followers1.1K
- Likes3.5K
Ross Wolf retweeted
Your phishing simulations should be as targeted as the attacks they're preparing people for. Tailored Phishing Simulations and Training is now GA: simulations built from attacks Sublime catches, plus training the moment someone clicks. sublime.security/blog/tailor…
Ross Wolf retweeted
I’m building an interactive history of graphic design, from 1850 to today.
Learning about the movements, the people, and the turning points that shaped how we design. Developing my taste by learning from the best.
Ross Wolf retweeted
Most DLP tools force you to choose: catch every violation, or keep the business moving. Sublime Email DLP just went GA and does both. Real violations get blocked, legitimate email keeps moving.
sublime.security/blog/email-…
Ross Wolf retweeted
Speed matters in threat hunting.
We built high-performance historical hunting and detection backtesting at Sublime that scales to millions of messages without slowing analysts down.
Read the technical deep dive: sublime.security/blog/how-we…
I'm definitely feeling warm and fuzzy hashes this holiday season. Fast similarity is something that stumped me for a very long time, but MinHash turned out to be an elegant solution!
Wrote up how to build it from scratch on the @sublime_sec blog
Grouping similar emails creates herd immunity and boosts analyst productivity. We built a low-latency similarity system that groups millions of messages in milliseconds. Technical deep dive: sublime.security/blog/how-to…
Ross Wolf retweeted
We’re excited to announce that Sublime has raised $150M in a Series C led by @Georgian_io, joined by new investors @Avenir_Growth, @01Advisors, @jonoberheide, and @nicoleperlroth, and existing investors @IndexVentures, @IVP, @slow, and @CitiVentures.
This year we launched ASA and ADÉ, our AI agents that autonomously triage threats and auto-adapt coverage, freeing security teams from repetitive work and delivering rapid, tailored defenses. We’ve grown our customer base 4x since the beginning of the year while maintaining zero enterprise customer churn since company inception.
This funding accelerates our vision to deliver autonomous email security that adapts to each organization's unique needs, stopping sophisticated attacks while eliminating the manual work and vendor bottlenecks of legacy solutions.
Thank you to our customers, partners, and investors for being on this journey with us.
🔗 Read more: sublime.security/blog/sublim…
go get yourself some @MITREattack T1667 coverage
Introducing email bomb protection from Sublime: a powerful solution for automatically detecting, remediating, and triaging email bombs. In these attacks, an adversary will send hundreds or thousands of emails at once to flood an inbox and obfuscate the malicious intent. Learn how our solution works and how to use it: sublime.security/blog/email-…
Ross Wolf retweeted
Introducing email bomb protection from Sublime: a powerful solution for automatically detecting, remediating, and triaging email bombs. In these attacks, an adversary will send hundreds or thousands of emails at once to flood an inbox and obfuscate the malicious intent. Learn how our solution works and how to use it: sublime.security/blog/email-…
this was a very cool problem to solve with @filar! It's such a natural evolution of the platform, which has been group-centric since day 1.
Fellow nerds, look out for an engineering post about how "fuzzy" grouping works and the scaling+realtime challenges we had to overcome
Mass volume email attack campaigns are often customized to the recipient to increase legitimacy.
We recently improved our campaign grouping algorithm to be better at identifying similar messages in a campaign to cut review time, reduce alerts, and boost herd immunity.
Read how it works here: sublime.security/blog/enhanc…
don't practice Scanteria, just use our QRystal ball
It's been a busy week for QR code phishing, so @samkscholten put together a deep dive on how Sublime detects and decodes these email attacks with our open source rules: sublime.security/blog/qr-cod…
Ross Wolf retweeted
I know it's a running joke about everyone boasting 100% MITRE Engenuity scores but please actually read the results, they provide a lot more nuance and insight into how the products performed and at what level of specificity
Ross Wolf retweeted
Happy to share what I've working on in the last year- Unveiling Elasticsearch Query Language (ES|QL) elastic.co/blog/elasticsearc…
Ross Wolf retweeted
Our DEF CON 31 workshop may be full, but there are some spots still available @BSidesLV on Aug 9. Come hunt for various email attack types in a lab environment w/ @jkamdjou and @ajpc500!
eventbrite.com/e/bsideslv-20…
Ross Wolf retweeted
🔊 New blog post: Part 2 of the “Creating a full-text search engine using PostgreSQL” series. In this one we are comparing the Postgres search functionality to Elasticsearch.
xata.io/blog/postgres-full-t…
