Threat Hunter | DFIR | Blogger/Speaker | echo "views are my own"
Joined May 2014
- Tweets146
- Following53
- Followers120
- Likes87
Daniel G retweeted
Bianco, keeping us all WOKE with his keynote this morning, and I'm not even done with my first cup of coffee.
Just a few minutes away from my @sansforensics #ThreatHuntingSummit keynote: "Raising the Tide: Driving Improvement in Security By Being a Good Human". I'm very excited for this one, so if you're attending the summit I hope you're awake! 😃
Daniel G retweeted
Preparados, listos... ¡YA! 📣 ¡INSCRIPCIONES ABIERTAS al workshop de #ThreatIntelligence y MITRE por @fierytermite y @cyb3rR4v3n! 🔥🔥 Será gratuito, online y en español, los cupos son limitados. Se deberá esperar confirmación del lugar. ¡Inscríbete aquí! attendee.gotowebinar.com/reg…
Daniel G retweeted
Clearly I’ve been sleeping too long and didn’t see this month staff picks release unlike Stoner. Anyway, make it Saturday coffee reading. Thanks to @jennxxdcs @43nsicBot @sansforensics @mattifestation @jasonbarnette @bryanthiryscows splunk.com/blog/2019/11/06/s…
Daniel G retweeted
Today I stumbled across the fact that I can extract any file that is locked by the OS on a Windows 10 machine with this native command.
C:\WINDOWS\system32\esentutl.exe /y <SOURCE> /vss /d <DEST>
Initially I thought it only worked for ese files, but it seems to work everywhere!
Daniel G retweeted
I spent 6 hours today trying what I thought would be a pair groundbreaking Kerberos attacks.
Neither panned out.
But I learned more about Kerberos and I now know two things that don’t work. #KeepMovingForward
Daniel G retweeted
#ThreatHuntingSummit had some really great talks this year. Definitely check out digital-forensics.sans.org/c… for some good content.
Daniel G retweeted
Missed the Operationalizing Intelligence #CrowdCast w/@Adam_Cyber? Watch the recording & Splunk integration demo now: crowdcasts.crowdstrike.com/r…