Partner Research Director, Microsoft Security Research
Cheltenham, United Kingdom
Joined April 2017
- Tweets152
- Following90
- Followers1.8K
- Likes28
timbMSFT retweeted
Big news on the work front! Today is my last day at @Secureworks, and I’d like to thank you for the opportunity to work with such fantastic people to make the world safer!
My journey continues in January with #Microsoft as a Principal Identity Security Researcher. I’ll be working with @TimbMsft's team in the Security Research organization led by @JohnLaTwC. Before that, some time off and quality time with family 😊
timbMSFT retweeted
Your new favorite podcast is here! The Microsoft Threat Intelligence Podcast has behind-the-scenes tales about uncovering attacks, threat actors, malware, exploits, etc. from researchers & analysts. Hosted by @sherrod_im. First 3 episodes are live! msft.it/60159tDKv
timbMSFT retweeted
🧵We are excited to share that @Zeekurity is now a component of @Microsoft @Windows ! An incredible development that truly establishes Zeek as the de facto standard for #networkevidence:
corelight.com/company/zeek-n…
1/4
timbMSFT retweeted
Microsoft Detection and Response Team (DART) was engaged to lead the investigation on destructive cyberattacks launched against the Albanian government in mid-July. We assess that the attack was launched by an Iranian state-sponsored actor. Full report: microsoft.com/security/blog/…
timbMSFT retweeted
Here are the technical details from @MsftSecIntel on the destructive (faux-ransomware) malware targeting multiple organizations in Ukraine
microsoft.com/security/blog/…
BREAKING: Ukrainian officials now linking defacement to Belarusian actor UNC1151/Ghostwriter. Some have tied the group to Russia as well and they could be a joint unit. They also claim there was a destructive component possibly linked to APT29! 11/x reuters.com/world/europe/exc…
timbMSFT retweeted
Happy 25th Sysinternals Anniversary @markrussinovich
Shout out to @kevsecurity for helping making Sysmon for Linux a reality
Great blog from @Cyb3rWard0g @jessen_kurien & @russmcsec on using Sysmon for Linux with #AzureSentinel
techcommunity.microsoft.com/…
This Post is from an account that no longer exists. Learn more
timbMSFT retweeted
Today, Microsoft is open sourcing Cloud Katana, a cloud-native serverless application built on the top of Azure Functions to assess security controls in the cloud and hybrid cloud environments. Read about the design principles and learn how to deploy: msft.it/6011n46MT
timbMSFT retweeted
Just announced: #Defender for Endpoint for #Linux is coming to #Azure Defender!
techcommunity.microsoft.com/…
timbMSFT retweeted
Thank you to @dpl2310 for this textbook example of dangerous driving.
Don’t try this at home.
Or anywhere else.
timbMSFT retweeted
Learn how the protection stack in Microsoft Defender for Office 365 works. This article details the four phases of filtering – edge protection, sender intelligence, content filtering, and post-delivery protection – that incoming mail passes through: msft.it/6011VdgZf
timbMSFT retweeted
🚨More Exchange updates for out-of-support versions released including E2019 RTM, CU1 and CU2. E2016 CU8, CU9, CU10 and CU11.🚨
Updates for additional out-of-support Exchange CUs released today👍
E2019 CU3. E2016 CU12, 13 and 17. E2013 CU21 and 22.
👇👇👇
techcommunity.microsoft.com/…
timbMSFT retweeted
Important steps for customers to protect themselves from recent nation-state cyberattacks blogs.microsoft.com/on-the-i…
timbMSFT retweeted
Scoop: The recruiter for FIN7, a hacking crew that posed as a security firm, just pleaded guilty to helping steal more than $100 million from restaurant chains and a casino. He faces up to 25 years. cyberscoop.com/fin7-recruite…
timbMSFT retweeted
🔥Happy #MTP Monday! In case you missed this - we just announced Microsoft Threat Protection APIs!!! Read more about it techcommunity.microsoft.com/… #threatprotection #cybersecurity #infosec
timbMSFT retweeted
Defense is a team sport & this couldn’t be more true in cyber security. I’m proud to have worked @Microsoft & @Mandiant that both helped out the people behind one of the most prolific Chinese APT groups of our time
🍺🍺Cheers to all the defenders who helped make today happen
timbMSFT retweeted
Great stuff! In a similar fashion, one can identify anomalies in traffic. Here is an example of outliers identified in traffic from internal hosts (the query was modified to quickly allow modification of the time range).
timbMSFT retweeted
Wrote about my journey from #Engineering to #pdctmgmt, tips to land your first PM job, and what I think are important capabilities that #product managers should have. #WomenInSTEM #WomenInTech @womeninproduct @WomeninSecurity link.medium.com/Svjpxq7ldW
timbMSFT retweeted
Want another great news for defenders. Session ID will now be audited as part of Office365 mailbox auditing. Session ID is a guid identifier encoded in the Azure AD token. Want to know why this is important. Here are couple of good reasons. blogs.technet.microsoft.com/…
timbMSFT retweeted
Are you an expert on malware, APT and intrusion detection? @TimbMsft and I are looking for a software engineer to join us in the Microsoft Threat Intelligence Center in either the UK or Redmond.
careers.microsoft.com/us/en/…
timbMSFT retweeted
Yesterday we announced Microsoft #AccountGuard. Here’s how Microsoft #AccountGuard works, and how those involved in political campaigns and the democratic process can help protect themselves from cyberattacks by nation states. blogs.microsoft.com/on-the-i… #midtermelections
