Tweet

https://twitter.com/offsectraining/status/1321074270987034627

https://twitter.com/offsectraining/status/1321078445967843328

This Thread may be Removed Anytime!

Twitter may remove this content at anytime! Save it as PDF for later use!

More from @HackingDave

Dave Kennedy

@HackingDave

30 Sep

Us: In network for a month without detection.

Client: Why didn't nextgen EDR pick any of this up?

Us: Detection is more than just an EDR, it requires an understanding of your network.

Client: Can you get on phone with the vendor to share all of your TTPs so they can detect?

We're working with the customer to help educate and shore up the deficiencies, but it's just rough because of the over-reliance on security tools versus baselining and doing the work for your own environment.

This also isn't just a CustomerX problem. It's a widescale industry problem in general. There is no solution out there that does the hard work of building a security program or focusing on your threat models and baselining your own infrastructure.

Read 4 tweets

Dave Kennedy

@HackingDave

27 Sep

Here we go

Read 7 tweets

Dave Kennedy

@HackingDave

21 Sep

One thing that I’ve learned from my nutritionist / planner is to screw fad diets (keto as an example) and focus on your body. Start counting calories, and focus on primarily protein intake and balance the rest. Workout days for me 2300 calories, 200g of protein and mix fat/carbs.

If you are going to do long term fitness for life, you need something that you can sustain yourself on.

Non workout days 2100 calories.

For tough working days I stack more carbs, for less workout days, I stack less.

I count every calorie I put in my body religiously.

I was freaking out at first, I gained weight, but that is due to protein taking longer to digest and body to get use to it. Week one gained ten pounds, week two down 8 pounds. Put on a lot of muscle and having larger gains.

Do not judge yourself on weight and adjust slowly.

Read 5 tweets

Dave Kennedy

@HackingDave

10 Sep

I've heard that there are a few folks that were "annoyed" or "upset" from the #redteamfit posts in INFOSEC.

The intent is not to point out people that aren't doing this but to have a motivational group of people (anyone is welcome) that shares in a common goal for better health

This is a very easy hashtag to mute or ignore if it doesn't interest you.

Fitness isn't for everyone and certainly wasn't for me. I never want to go back to big 317lb Dave - where I was struggling health-wise, had heart surgery due to weight, and wouldn't be around for my kids.

My journey has been long, hard, and one that now I'm enjoying my progression, my body, my energy, and my ability to be there for my family.

If it's annoying to you, it is easy to unfollow, mute me, or others trying to motivate themselves to be healthier.

Read 7 tweets

Dave Kennedy

@HackingDave

5 Sep

Today a year ago was our final #DerbyCon.

A con that changed my life and others and still to this day raised more for charity than any other security conference.

I miss you all and thank you for making an awesome community that made a real impact in peoples lives.

😢

Fun facts - other than a victory dinner at doc crows or the silver dollar - we never made a penny off of the con.

First year I would have had to take a second mortgage on my house if we didn’t get 600 people, we got 1400.

Each year - it was about putting in a better show.

Read 7 tweets