iEmoji Feeds @Nate Guagenti (Neutron) (neu5ron)
1.
Nate Guagenti (Neutron)
@neu5ron
LAWMAKER is getting a Device Health dashboard!
We continue to add features and improve the user experience. I'mβ¦ twitter.com/i/web/status/1β¦
We continue to add features and improve the user experience. I'mβ¦ twitter.com/i/web/status/1β¦
2.
Nate Guagenti (Neutron)
@neu5ron
New #SecurityOnion 2 Training!
Learn how to build your own Detection Playbook in #SecurityOnion - using real-β¦ twitter.com/i/web/status/1β¦
Learn how to build your own Detection Playbook in #SecurityOnion - using real-β¦ twitter.com/i/web/status/1β¦
Retweet of status by @DefensiveDepth
3.
4.
5.
6.
7.
Nate Guagenti
@neu5ron
Saturday project (WIP..)!
a) Doc #Bloodhound cypher queries from the community in YAML
b) Auto parse queriesβ¦ twitter.com/i/web/status/1β¦
a) Doc #Bloodhound cypher queries from the community in YAML
b) Auto parse queriesβ¦ twitter.com/i/web/status/1β¦
Retweet of status by @Cyb3rWard0g
Nate Guagenti
@neu5ron
Looking for anything to do this weekend ? Check out Sentinel To-Go!(Part 1)
1) Deploy an #AzureSentinel lab w/ pβ¦ twitter.com/i/web/status/1β¦
1) Deploy an #AzureSentinel lab w/ pβ¦ twitter.com/i/web/status/1β¦
Retweet of status by @Cyb3rWard0g
Nate Guagenti
@neu5ron
Latest
1. Data dictionaries and more in YAML thanks to @hxnoyd Using the repo via code ?
2. OSQuery logs +Fβ¦ twitter.com/i/web/status/1β¦
1. Data dictionaries and more in YAML thanks to @hxnoyd Using the repo via code ?
2. OSQuery logs +Fβ¦ twitter.com/i/web/status/1β¦
Retweet of status by @OSSEM_Project
Nate Guagenti
@neu5ron
Here's the blog post on my new tool:
dfir.blog/introducing-unβ¦
Unfurl takes a URL and expands ("unfurls") it to sβ¦ twitter.com/i/web/status/1β¦
dfir.blog/introducing-unβ¦
Unfurl takes a URL and expands ("unfurls") it to sβ¦ twitter.com/i/web/status/1β¦
Retweet of status by @_RyanBenson
Nate Guagenti
@neu5ron
@ItsReallyNick reminds of the global writable .bat file for the siem app on a jumbox..
8.
9.
Nate Guagenti
@neu5ron
I wrote my first Sigma rule that use the new value modifiers ... and they're awesome!
- took one of the most suβ¦ twitter.com/i/web/status/1β¦
- took one of the most suβ¦ twitter.com/i/web/status/1β¦
Nate; Neu5ron(Neutron)
@neu5ron
Dear Sandbox vendors,
it'd be helpful if you included the following in your reports:
Windows events or
Sβ¦ twitter.com/i/web/status/9β¦
it'd be helpful if you included the following in your reports:
Windows events or
Sβ¦ twitter.com/i/web/status/9β¦
...but wait! There's more!
1.
fakhright
@fakhright
astaghfirullah peng.krim guaaaaaaaa..............a *salto sambil solat*
