Logo
Picture

Jaysus @JayInfoSec

Detection Engineer & False Positive Aficionado 🦸‍♂️🇨🇦 Joined August 2011
  • Tweets
    438
  • Followers
    663
  • Following
    3K
  • Likes
    25K
JayInfoSec Profile Picture

Jaysus @JayInfoSec

6 days ago

@M_haggis I exported the entire S1 PowerQuery guides in markdown and fed it to claude....... detections actually worked after lol.

JayInfoSec Profile Picture

Jaysus @JayInfoSec

a month ago

@josefchen My mom's cooking blows this away.

Jaysus retweeted
InsiderPhD Profile Picture

Katie Paxton-Fear @InsiderPhD

2 months ago

A lot of people ask me what they need to learn to keep up in AIxHacking: Right now you need to learn how to turn the monotonous part of your methodology into a repeatable agent, after that it’s scale and harness. Then it’s building skepticism into that system externally from you.

JayInfoSec Profile Picture

Jaysus @JayInfoSec

2 months ago

@SBousseaden For Elastic, I set up a CICD ingesting all Sigma LOLRMM rules convert to TOML as building block rules > with higher order rule for "first time observed LOLRMM rule" Am i doing this right 😅

Jaysus retweeted
anton_chuvakin Profile Picture

Dr. Anton Chuvakin @anton_chuvakin

2 months ago

You may joke and say we woefully undermarket stuff (and we do), but our team build this thing: docs.cloud.google.com/docs/security/…

Jaysus retweeted
SANSDefense Profile Picture

SANS Cyber Defense 🧢 @SANSDefense

2 months ago

Hot take: AI in the SOC is most useful when it’s… boring. 🧵

Jaysus retweeted
MITREattack Profile Picture

ATT&CK @MITREattack

2 months ago

ATT&CK v19 is live! We've split Defense Evasion into Stealth and Defense Impairment, introduced Sub-Techniques to ICS ATT&CK, Detection Strategies to Mobile, and added some AI and Social Engineering to Enterprise. Check out all the details in our blog post medium.com/mitre-attack/a…

JayInfoSec Profile Picture

Jaysus @JayInfoSec

3 months ago

we dont hate rich people nearly enough

JohnFugelsang Profile Picture

John Fugelsang @JohnFugelsang

3 months ago

JayInfoSec Profile Picture

Jaysus @JayInfoSec

3 months ago

@jlabernathy "cloud kill data centers" hahahahahahahaha

Jaysus retweeted
IceSolst Profile Picture

solst/ICE of Astarte @IceSolst

3 months ago

Would any security team benefit from having a Certified Scrum Master ®

JayInfoSec Profile Picture

Jaysus @JayInfoSec

3 months ago

consulting in infosec is not meant to produce outcomes. you are just entertaining the circus while the clowns are hiding behind their empty suits.

JayInfoSec Profile Picture

Jaysus @JayInfoSec

3 months ago

I am so sick of companies posting "Remote" opportunities on @LinkedIn and then when you read the fine print it says "3 days in office mandatory" - why is there not a hybrid filter yet ????

Jaysus retweeted
whiskeyhacker Profile Picture

WhiskeyHacker @whiskeyhacker

3 months ago

I spent my normal whiskey/cigar break thinking and reading and counting how many configuration "switches" are available when you are a firm like Stryker. 36,000 to 45,000 config settings And that's before you count the permutations. You think a spreadsheet and a quarterly review covers it?

Jaysus retweeted
bytecodevm Profile Picture

eleven red pandas @bytecodevm

3 months ago

Research shows how Palo Alto Cortex XDR predefined BIOC behavioral rules can be decrypted and analyzed. By understanding rule logic and built-in exceptions, attackers can adapt techniques to evade detection and bypass behavioral protections. core-jmp.org/2026/03/decryp…

Jaysus retweeted
whiskeyhacker Profile Picture

WhiskeyHacker @whiskeyhacker

3 months ago

Taken from the Stryker Handala / Intune Detection Pack v2 "Check PIM role settings for Global Administrator, Intune Administrator, and Cloud Device Administrator. If you see only the "Require Azure MFA" checkbox and no Authentication Context configured, you have the same gap that enabled the Stryker wipe. Configure Authentication Context with FIDO2 or certificate-based auth today. Enable Intune Multi-Admin Approval for wipe, retire, and delete actions. Tenant Administration > Multi Admin Approval. Under 10 minutes. No additional licensing required. Deploy Rule 13 (bulk wipe threshold alert). Five wipes in 15 minutes from a single identity fires the alert. Wire it to a Logic App that calls revokeSignInSessions on the triggering account via Microsoft Graph. " link to Detection Pack v2 blog and direct download. Please share so others can lock down their InTune environments please threathunter.ai/blog/iran-hand…

Jaysus retweeted
bovaird_zach Profile Picture

Zach Bovaird @bovaird_zach

4 months ago

The 3 AI SOCs I’ve demoed with this month all give me serious cause for concern. Traditional ML in a SIEM with UEBA should probably be leveraged before AI solutions. Following that, SOAR with AI sprinkled in where necessary, then more advanced AI measures. Also, security architecture evals for our own deployments has proven more difficult than I expected. Like Gall said in the 70s: complex systems are never built. They evolve from simpler ones.

Jaysus retweeted
PanasonicDX4500 Profile Picture

one dozen rats at a keyboard @PanasonicDX4500

4 months ago

they were right to take cigarette ads off tv, I would’ve smoked a pack a day if I saw this when I was 14

PrefEquityPeter Profile Picture

Peter Pref @PrefEquityPeter

4 months ago

Me after 9 overpriced Guinness at the local Irish pub

Jaysus retweeted
sahill_og Profile Picture

Sahil @sahill_og

4 months ago

Every AI Company : We're replacing your job with AI Me who already replaced my job with AI :

Jaysus retweeted
IceSolst Profile Picture

solst/ICE of Astarte @IceSolst

4 months ago

There’s an astronomical skill gap between good security people, and the rest. There’s no mid. Accounts you see posting their research here are absolutely cracked, it’s not the norm. When you go out and talk to security folks that don’t go to conferences, don’t read up on research, you realize- holy shit. They have no fucking clue. The majority of the cybersecurity work force is absolutely incompetent. It’s partly why vendors can come up with inane bullshit as marketing material and it works on many CISOs. If you’re reading this, you’re most likely 1000x the skill level of the average person. Like I cannot emphasize enough how low the bar is when the sample size is the entire industry.

Jaysus retweeted
cossackgundi Profile Picture

COSSACKGUNDI @cossackgundi

4 months ago

How it feels right now

Trends for United States

#BETAwards
#ForbiddenDoor
Lauryn Hill
#HOTD
Ospreay
Megan
#HouseOfTheDragon
Melanie
Andrade
Cardi
Maya World
Rhaenyra
Druski
Emma D’Arcy
Aniya
Jay White
D’Angelo
Deadpool
Otto
Yankees

You might like

Cuando uno compara sus talentos con los de Leibniz uno tiene la tentación de tirar todos sus libros e ir a morir silenciosamente en la oscuridad de algún rincón
Juan Marcelo Gutiérr...
@juanmasktr
341 Followers
Threat Hunting | DFIR | Liverpool & FC Dallas
r00tx
@_r00tx
211 Followers
NSU graduate || Hobbyist Security Researcher || Gamer || Lazy.
Fatin Sirat
@fatinsourav1
795 Followers
Coffee crazed lifelong infosec junkie @RedTeamVillage_ veteran, ex-governmental type, currently gainfully unemployed..
Greg Oldham
@Hax4Coffee
540 Followers
IAM Engineer, Avid Gamer, Husband and Raiders Fan. He/Him. Opinions mine, not my employers. | Identity Defense Workbench Now found @redraven85.bsky.social
Ryan
@RRaven85
596 Followers
Infosec student, Gamer, Martial Artist
shawn hammons
@Shawn_Hammons
659 Followers
🇺🇸 God and Country 🇺🇸 Proud Patriot 🇺🇸 All Things Hacking CyberSecurity Crypto. Forever Learning - Forever Protecting
PacketSniper
@HackToProtect
10K Followers
DFIR | Threat Intelligence | Malware Analyst | Researcher | Cybersecurity Proactive Defense Team
perfect4sec
@perfect4sec
743 Followers
Founder @pulsedive. Organizer @defcon908. Created @threatfeeds_io.
Dan Sherry
@netbroom
2K Followers