Nels retweeted
People are going to lose their mind when they realize its actually easier to hack things using FEATURES not CVEs.
Nels retweeted
Hey TWC! Unfortunately, this tracker is inaccurate and an unverified website. Here is our latest status map as of 5:30pm EST.
Nels retweeted
If you want to get better at detection, threat hunting, or incident response, you need to understand the data you're working with.
Logs and telemetry are the foundation of security visibility.
If you want to become a security engineer, here are 5 things you need to know about Logs and Telemetry ⬇️
1️⃣ You Can't Investigate What You Can't See
Security decisions are only as good as the data behind them.
If something happens in your environment, you should be asking:
- What data would show me this happened?
- Where does that data come from?
- Do I actually have access to it?
No telemetry means no visibility.
And no visibility means blind spots.
2️⃣ Know What Your Logs Actually Tell You
Not every log tells you the same thing.
Understand the difference between telemetry from:
- Endpoints → Processes, files, users, commands
- Network → Connections, DNS, HTTP, traffic
- Identity → Logins, authentication, permissions
- Applications → Requests, errors, application behavior
- Cloud → API activity, resources, configuration changes
The important part isn't memorizing log sources.
It's knowing what questions each source can help you answer.
3️⃣ Learn to Find the Signal
Real environments generate a LOT of data.
Your job isn't to look at everything.
It's to identify what's relevant.
Learn to:
- Filter large datasets
- Search for meaningful patterns
- Correlate events across sources
- Establish timelines
- Separate normal behavior from anomalies
Good security engineers turn huge amounts of telemetry into useful information.
4️⃣ Understand Telemetry Gaps
One of the most important questions you can ask during an investigation:
“What don't we have?”
Maybe you have endpoint logs but no DNS telemetry.
Maybe you have authentication logs but can't see activity after login.
Maybe you have cloud audit logs but they're missing from a critical account.
These gaps can make investigations significantly harder.
Visibility is a security control.
5️⃣ Know What “Normal” Looks Like
This is one of the most important skills you can develop.
If you don't understand normal behavior, how do you recognize suspicious behavior?
Learn what normal looks like for:
- Users
- Hosts
- Applications
- Network traffic
- Authentication
- Cloud activity
Then you can start asking:
“What changed?”
That's where detection and investigation begin.
Nels retweeted
10 years ago today CAPE Sandbox was released...
Today we are proud to announce its desktop partner-project CAPEsolo: github.com/CAPESandbox/CAPEs… 🎉
All the power of the sandbox in a desktop application 💪
pip install capesolo
Nels retweeted
IT Admins, hear me out...
If you FIX IT....
AI can't find it and AI can't exploit it.
It's never been more important to do foundational IT/Security well.
Nels retweeted
Dan Geer (waaaay back in 2015¹) predicting:
- Our current mess;
- Tokenomics;
- The popularity of Tim Nolan's Odyssey.
__
¹ geer.tinho.net/geer.issa.13x…
Nels retweeted
Everyone debating beef prices should hear from someone who actually raises cattle.
I’m a small rancher. It can cost me ~$2,500 to raise an animal + ~$600 to process it. If I bring home ~500 lbs of beef, that’s $6.20/lb before I pay myself ONE DOLLAR for land, fencing, equipment, fuel, labor, losses or risk.
So no, American ranchers aren’t getting rich off expensive beef.
And importing cheaper beef isn’t the solution I want.
I’d rather see Americans cut out the mega-packers and buy directly from local ranchers. Buy a quarter, half or whole animal. Know the farm. Know how it was raised. Ask whether it was grass-fed, grass-finished, grain-finished, or something else. Know who processed it.
Quality and production standards vary, and “imported” doesn't automatically mean inferior—but cheaper commodity beef is not the same proposition as knowing exactly where your food came from.
Want to help American families AND American cattlemen?
Buy local. Buy direct. Shorten the supply chain.
Then you don’t have to wonder which multinational handled your dinner—or whether tomorrow’s “beef” came from a cow, a bioreactor or a 3D printer.
Food security starts with knowing your farmer.
#BeefPrices #BuyLocal #AmericanRancher #FarmToTable #FoodSecurity
Nels retweeted
normalize your damn logs. so many want to set and forget their SIEM and that doesn't work. look at data you're bringing in & whether it adds context. you want enough info (criticality, environment) to be able to make a quick decision & not have to dig deep on every alert. (3/x)
Nels retweeted
🚨🚨🚨🚨Today the U.S. House passed the Sunshine Protection Act, advancing legislation that would make Daylight Saving Time permanent nationwide.
This is the biggest legislative step this issue has taken in years but it is not law.
The bill now moves to the U.S. Senate, where there is still an opportunity for it to be debated, amended, or rejected. If you care about health and circadian biology, this is the time to speak up.
The scientific case against permanent DST has become increasingly strong:
• Morning light is the most powerful signal for synchronizing the human circadian clock.
• Permanent DST delays sunrise for much of the year, especially in winter, reducing exposure to morning light when our brains need it most.
• Later sunrises are associated with chronic circadian misalignment, sleep loss, poorer mood, reduced alertness, and increased cardiometabolic risk.
• Studies comparing western versus eastern portions of time zones consistently show worse health outcomes where people experience later sunrises despite sharing the same clock time.
• The American Academy of Sleep Medicine and numerous sleep and circadian experts recommend permanent Standard Time, not permanent DST, as the option that best aligns with human biology.
The argument for permanent DST is largely one of convenience and preference for lighter evenings. The argument for permanent Standard Time is one of physiology and public health.
If you believe our laws should reflect the best available scientific evidence, now is the time to respectfully contact your U.S. Senators. Tell them that while ending the twice-yearly clock changes is a worthy goal, permanent Daylight Saving Time is not the healthiest solution. Ask them instead to support permanent Standard Time, which preserves the morning light our circadian system depends on.
Please REPOST this. The Senate has not yet voted, and informed voices can still make a difference.
@LeaderJohnThune is the Senate majority leader that will determine when this legislation comes to the Senate for debate. He should know how you feel.
Nels retweeted
“Daylight Saving Time puts the sun where I can actually make use of it. In the evening time and not before I wake up.”
Tell me that you don’t understand circadian biology without telling me that you don’t understand circadian biology
There is growing evidence that daylight entering the bedroom shortly before awakening helps the body transition from sleep to wakefulness.
In a randomized crossover trial, 19 participants received natural daylight either for 20 minutes before waking, from dawn until waking, or not at all. Light during the final 20 minutes produced less sleepiness, less fatigue and greater alertness. Starting too early sometimes disrupted sleep.
Wang X, et al. Building and Environment. 2025;273:112733.
doi.org/10.1016/j.buildenv.2…
In another crossover study, gradually increasing light for 30 minutes before awakening significantly increased the normal cortisol awakening response—the physiologic rise in cortisol that prepares the body for daytime activity.
Thorn L, et al. Psychoneuroendocrinology. 2004;29:925–930.
doi.org/10.1016/j.psyneuen.2…
A third study found that simulated dawn beginning 30 minutes before waking produced a smoother rise in heart rate and better parasympathetic regulation during the transition from sleep to wakefulness—potentially reducing the abrupt cardiovascular stress of awakening.
Viola AU, et al. Sleep Medicine. 2015;16:457–461.
pubmed.ncbi.nlm.nih.gov/2581…
Together, these studies suggest that the body is designed to receive increasing light before or around the time of awakening. This improves morning alertness and influences hormonal and autonomic physiology.
This is also one reason permanent Standard Time makes more biological sense than permanent Daylight Saving Time: Standard Time allows more people to awaken closer to natural dawn rather than forcing them to begin their day in darkness.
Nels retweeted
Tell your senators to oppose permanent DST (9am sunrises) and support permanent Standard Time! votervoice.net/ditchDST/Camp…
