Matthew 6:33. Husband. Dad. IR & SecOps Manager for a QSR. Tinkerer of things. Perpetual student.

Atlanta, GA
Joined July 2015
Replying to @mattifestation
We are blessed to be a blessing.
4
‘How are you so focused under pressure?’ Me in 1995:
1,030
10,522
1,375
67,460
6,008,955
MOTHER OF ... THIS IS AMAZING!!! WE DID IT! 2024 and the world has said in formal documents: DO NOT USE A CONSUMER VPN!! If I had time I would bake a CISA CYBER CAKE! I have a feeling they will not be the only agency.... #VPN #CYBER #SECURITY
50
162
26
1,179
109,971
Atomics on a Friday: Unveiling LOLRMM - A New Dawn in Cyber Defense xitter.cf/i/broadcasts/1vAGROLMZ…
4
1
13
4,469
Truth 😅
161
885
181
10,878
546,397
If you're havin' EDR problems, I feel bad for you, son I got ninety-nine problems, but Crowdstrike ain't one
1
123
Want to restrict service principals (workload identities) so they can only login from trusted locations? You can do it! But, like any modern Microsoft product, stronger security is a premium feature.. learn.microsoft.com/en-us/en…
129
I heard there was a secret cord That David made and displeased the Lord, But you don't really care for safety, do ya? Well it goes like this, a plug, a switch A circuit breaker open-hitched The socket catching fire, hallelujah.
122
2,089
106
14,074
866,702
Please do the incident response team a favor, and check that the X-Forwarded-For Header is set on all your reverse proxies / load-balancers / etc. They will thank you later.
22
106
11
602
128,933
(Archived from @shanselman)
5
86
1
460
25,219
So @emailrepio by @jkamdjou et al is pretty great. Anyone know of a good and similar equivalent for phone numbers? Thanks!
2
3
416
Anyone know of a tool that can categorize software similarly to web-filter categories? Ex: Google is a search engine, AnyDesk is a remote access tool.
Lots of fun stuff happening from GitHub Actions lately in @GreyNoiseIO 🧐 viz.greynoise.io/query/?gnql…
1
3
Some commands are overwhelmingly run by attackers on compromised hosts (and seldom ever by regular users in regular usage). Our @subtee has just released a new (free) Canarytoken to make monitoring these commands trivial. Read more about it - blog.thinkst.com/2022/09/sen…
10
181
23
555
Seeing canarytokens.org used as a website traffic analytics tool is a first for me.
Folks, I am teaching my next Pay What You Can class next week. It is SOC Core Skills. Please share with someone who is trying to get into security. antisyphontraining.com/soc-c… Thanks!
15
268
25
615
Why can't I create Azure AD conditional access policies referencing user agent, but the "platform" in policies is based on user agent?