Threat hunter. Hacker. Streamer. Educator. #infosec, #programming 🦀 🐍 👑, #opensource. Co-made OffensiveNotion. Made https://t.co/uy7X4V6u6t. All opinions my own. He/him
Oct 31, 2022 • 27 tweets • 7 min read
Okay let's do this: Mastodon/Fediverse Megathread LET'S GO!
Herein, find everything you need to get started on a healthier, more community-oriented social platform.
(1/22) ⬇️
Did you know Mastodon is only one of many platforms in the Fediverse? Built on the ActivityPub protocol, these platforms interconnect to create a rich tapestry of communities. You can find out more about each at fediverse.party and fediverse.space.
(2/22)
Jul 30, 2022 • 6 tweets • 2 min read
For those who missed the stream, an easy method to prevent mounting ISOs is to delete this registry value:
HKEY_CLASSES_ROOT\Windows.ISO.File\shell
Default value is "mount." Null it and Explorer will no longer mount ISOs on doubleclick. Still mounts from the command line.
I have been unable to get the method @mubix detailed with the Hardware Device Class GPO block list to work.
Apr 12, 2022 • 16 tweets • 3 min read
Alright fam, let's talk about network segmentation gotchas. This 🧵comes from years as a network engineer/designer, making every kind of mistake possible! 1/16
First, let's describe the most secure segmented environment: airgapped. That's not usable, and neither is the next most secure, which would be every host sinkholed and only able to connect outbound. We don't do this because computers have to be networked. 2/16
Mar 15, 2022 • 9 tweets • 3 min read
Reading through the whole incident report of the Irish NHS Conti attack, and this thing needs to be taught in every defense course. 🧵 1/8
Look at this dwell time! Also, note the lag between malicious detections on a DC and any action taken. 2/8
