Threat hunting, automations, tooling | Mandiant Managed Defense | Operationalizing intelligence | Structural engineer turned APT ejector
Joined April 2021
- Tweets153
- Following216
- Followers298
- Likes275
Tommy Dacanay retweeted
Curious how threat actors use digital analytics and advertising tools to increase the effectiveness and duration of their campaigns?
Check out our latest, trade-craft focused blog where we mint the sizzlin' new term: malnalytics!
🔥🔥
cloud.google.com/blog/topics…
#malvertising
Tommy Dacanay retweeted
MITRE Kalikimaka, everyone! Just in time for the holidays, here's a yule blog covering UNC2975 malvertising activity that led to DANABOT and DARKGATE malware. (1/7)
mandiant.com/resources/blog/…
@rufusmbrown @_gackerman_
New Haven pizza pilgrimage, stop No. 1: Modern Apizza. Great flavor, a little on the greasy side. Sprinkling parmesan helped. Nice amount of char, my fingertips were happily char-coated.
Based on this trip, New Haven Pepes is a little better than Alexandria Pepes. Either way, I'm proud to be a Frank Pepes member. I told the waitress that and I'm pretty sure she was impressed.
Stop No. 3: Sally's. Great way to end the pilgrimage. Delicious crust, and the pepperoni had some excellent #CuppingAction going on. My craving is satisfied..... For now 🍕🍕🍕🍕🍕🍕🍕🍕🍕
Tommy Dacanay retweeted
Christmas is here baby 😍 adios qakbot justice.gov/usao-cdca/pr/qak…
Tommy Dacanay retweeted
Just announced in preview: Mandiant Hunt for Chronicle Security Operations! This new service is tailored to organizations with existing security programs who want a threat hunting capability to discover new threats that may be missed by product detection.
cloud.google.com/blog/produc…
Tommy Dacanay retweeted
@Sa1jak, Dan, and I had the honor to be invited onto The Defender's Advantage podcast to chat about our recent blog on UNC961 and how @Mandiant Managed Defense approaches threat hunting as an MDR service.
Pod: open.spotify.com/show/7CFsvR…
Blog: mandiant.com/resources/blog/…
Tommy Dacanay retweeted
Happy to provide Managed Defense contributions with @tommysec to the Campaigns section of M-Trends. Lots of APT-over-USB this past year.
🚨 @Mandiant’s M-Trends is here!! 🚨
Stories include 👀
1️⃣ Mandiant’s insights on attacker operations from the frontlines
2️⃣ Ukraine holds the line against 🇷🇺’s cyber operations
3️⃣ Uncommon techniques, successful hacks
4️⃣ DRPK getting 🔐coin
5️⃣ Red Team vs the ☁️
6️⃣ 🎓 APT 42
Tommy Dacanay retweeted
🚨 @Mandiant’s M-Trends is here!! 🚨
Stories include 👀
1️⃣ Mandiant’s insights on attacker operations from the frontlines
2️⃣ Ukraine holds the line against 🇷🇺’s cyber operations
3️⃣ Uncommon techniques, successful hacks
4️⃣ DRPK getting 🔐coin
5️⃣ Red Team vs the ☁️
6️⃣ 🎓 APT 42
🔥Read read read!🔥 It's fascinating to be able to compare & contrast three incidents from the same threat actor (plus handoff - or not! - to another).
Incredible work here by the team, especially the blog authors! 🔥🔥🔥🔥🔥
We assembled a team of Avengers to bring this comic book superhero themed blog into existence. It's action packed with detection opps and intrusion timeline data for a prolific initial access broker: UNC961.
@rufusmbrown @Sa1jak @tommysec Josh, Fotios
mandiant.com/resources/blog/…
I really resonate with this. Writing a thesis for my structural engineering degree, plus countless reports in my former field helped hone my technical writing. Being able to write well is critically important, and to do so, one needs to take criticism well.
If writing is a primary (or THE primary) way you communicate in your field, it directly impacts your effectiveness. Doesn't matter if it's STEM or not, as @techieStef indicated
Tommy Dacanay retweeted
Nothing better prepared me for writing high-quality deliverables in cybersecurity than the academic writing critiques I received during my non-STEM masters program.
It was never just critiques of my work, they came for my ideas/intellect/personality/drive/ability/SOUL. Brutal.
