Chris McNab (@chrisforce1) header
Chris McNab (@chrisforce1) profile picture

author & co-founder of @alphasoc

Joined October 2009
Photo by Chris McNab (@chrisforce1)Photo by Chris McNab (@chrisforce1)Photo by Chris McNab (@chrisforce1)Photo by Chris McNab (@chrisforce1)Photo by Chris McNab (@chrisforce1)Photo by Chris McNab (@chrisforce1)Photo by Chris McNab (@chrisforce1)Photo by Chris McNab (@chrisforce1)Photo by Chris McNab (@chrisforce1)Photo by Chris McNab (@chrisforce1)
Had a really cool chat with @alphasoc founder @chrisforce1 and some of his team members. Really awesome company and loved what they're doing in terms of detections, integrations and Sigma usage. Kudos to the @alphasoc team. Give them a follow if you haven't already.
1
2
13
1,321
We mashed up @BarackObama’s Bin Laden speech with @RealDonaldTrump’s al-Baghdadi speech, and the results are amazing
9,243
124,939
34,522
314,769
Chris McNab retweeted
Do you have #Emotet and #TrickBot coverage within your threat detection stack? Use our free, open source Network Flight Simulator™ utility to instantly synthesize C2 callback traffic and check your SIEM / SOAR visibility >> github.com/alphasoc/flightsi…
1
4
18
Chris McNab retweeted
WHO DO U WORK FOR music - @markmossberg visuals - me
18
37
10
174
Chris McNab retweeted
In Vegas this week? Find us at the Big Chill bar inside the Mandalay Bay to grab free AlphaSOC hoodies, t-shirts, and faraday pouches #BHUSA #BlackHat2019
4
4
2
11
BREAKING NEWS: Since so many have begged me to run against Nigel Farage in the EU Parliament Election on 23 May, a clever Earthling set up this link for you to fund the cost of the pricey deposit. Will I agree to run if the goal is met? MY ANSWER: YES! gofundme.com/lord-buckethead…
307
4,704
842
10,699
Chris McNab retweeted
Network Flight Simulator™ is our open source adversary simulation tool. Check out this demo to understand some of its capabilities and features >> youtube.com/watch?v=JwMdAPDz…
4
4
Chris McNab retweeted
We're tracking campaigns from 213.174.157.150 including this Linux cryptominer and IRC bot. Detection rates are low, so check your egress logs >> virustotal.com/en/ip-address…
2
3
Beautiful, evocative and moving: This is the earliest known original colour film of London, taken in 1924 - only 5 years after Armistice.
3,064
40,905
5,222
113,946
2013: New Zealand hacker and security researcher, Barnaby Jack, passed away in San Francisco. He has a marked influence on financial and medical device security focus and his 2010 Black Hat presentation during which he caused ATMs on stage to discharge fake currency was epic.
Chris McNab retweeted
The original pew pew map: #WarGames turns 35 today!
1
3
1
16
Got 3 minutes? Tell us what you think is right/wrong about the tech industry: surveymonkey.co.uk/r/9WFNCTV
Chris McNab retweeted
Beaconing to a young suspicious domain? 🤔 Use DNS Analytics for Splunk to automatically flag #cryptojacking and other emerging threats without signatures >> splunkbase.splunk.com/app/16…
5
3
Sound relationship advice #crypto
2
2
December 13, 2003: #TodayInHistory, Former Iraqi President Saddam Hussein is captured near his home town of Tikrit, during Operation Red Dawn.
250
2,249
323
5,462
Chris McNab retweeted
Network Flight Recorder™ is our lightweight utility to instantly score network data via the DNS Analytics API and retrieve alerts >> github.com/alphasoc/nfr
1
8
1
25
Chris McNab retweeted
IP Analytics for Splunk is coming. Anonymized circuit (e.g. Tor, I2P, Freenet) and C2 protocol detection. Contact us for closed beta access!
7
1
23
Chris McNab retweeted
DNS Analytics for Splunk 3.30 released! Use our certified app to identify DNS tunneling and unknown malware >> apps.splunk.com/app/1657/
Chris McNab retweeted
185.145.128.177 remains a popular C2 for #KeyBase and #LokiBot. Today's samples go undetected by 75%+ of AV >> virustotal.com/en/ip-address…
1
1
Chris McNab retweeted
We've published a breakdown of Alexsey Belan's TTPs observed across three monumental breaches >> medium.com/@chrismcnab/alexs…
6
75
23
86