Christoph Falta 🇺🇦 @cfalta
Random infosec guy. Rainbow-teamer. Focusing on windows security. Powershell enthusiast. tweets are my own. 🇺🇦@[email protected] cyberstoph.org Vienna Joined March 2011-
Tweets3K
-
Followers773
-
Following377
-
Likes2K
Mandiant released CAPA Explorer, a UI to explore CAPA results! This is pretty cool, well done @williballenthin and all! 👏 👉 mandiant.github.io/capa/explorer#… #malware #infosec #malware
Red Teaming in the age of EDR: Evasion of Endpoint Detection Through Malware Virtualisation blog.fox-it.com/2024/09/25/red…
What is an IT admin's worst enemy? Their PowerShell history 😁 Thanks to 357384n NetExec now has a module to easily extract and parse the PowerShell history of all users, Looking for interesting keywords, such as "password" or "credential 🔑
Why am I only finding out about RemoteSessionNamedPipeServer.CreateCustomNamedPipeServer() now? Any .NET process can suddenly become a PowerShell Host *server* that you can connect to via named pipe from a regular PowerShell terminal: learn.microsoft.com/en-us/dotnet/a…
Please share this far and wide. As far and wide as you can. NIST Password Guidelines for 2024 are in the process of being updated. This is a HUGE pet-peeve of mine (when vendors in particular are still operating like its 2017 and keep changing passwords every 60 days, STOP DOING THIS, it's outdated and has been shown to put you MORE at risk than less -- NIST explains why it does in this document, meticulously outlining user behavior**) so I'm sharing this in the hopes all of you will pass it along to your bosses. The Special Publication series governing passwords is SP 800-63 "Digital Identity Guidelines". The 2024 version is 800-63-4. Here: pages.nist.gov/800-63-4/ The companion docs are also on that link. They are 800-63A, 800-63B and 800-63C. These are different documents for different scenarios in play at your org. The previous update was in2020. The changes in the 2020 version from the 2017 version were numerous but one of them was that the password verification method should NO LONGER require passwords be changed at specific intervals (i.e. every 60 days) but in the following circumstances instead: 1. After a breach/compromise 2. User request 2024 repeats this and adds a bunch more guidlines but here is a screenshot of page 13 of the new 800-63-4 (note the # 4 after it) which outlines how your systems should now and moving forward, be handling passwords. This goes for Active Directory, too. All your systems which have passwords should align with these guidelines provided there isn't another standard or framework you must adhere to which overrules this. Most frameworks, however, have moved away from arbitrary password resets and complexity rules. **We cybersec researchers and hackers use wordlists from breaches in a variety of different ways. Hackers use them in tooling to crack passwords whereas researchers use breach dumps to see the kinds of passwords users are creating and the psychology behind them. Using complexity rules gets you the user psychology of: Password1 Password2 and so on Use phrasing instead and allow for spaces, which is important. Humans type phrases with spaces. They also mention phish-resistant methods and most vendors are on-board with MS going to be turning off all Legacy Auth next month, across all free accounts and tenancies. I'm so excited for the new changes! Ok I'm off my soapbox. Share the love! Thank you!
Love that 🙌
Periodic Table of Windows Events #ThreatHunting #DFIR #Windows
I just posted a script I use for managing RDP certs yesterday but it seems I got some things wrong 😅 Recommend you read this post from Microsoft 👇 techcommunity.microsoft.com/t5/ask-the-dir…
Starting a new repo with some basics on securing MS related stuff. First thing: RDP github.com/cfalta/msbits/…
Active Directory Hardening Series - Part 5 – Enforcing LDAP Channel Binding - Microsoft Community Hub techcommunity.microsoft.com/t5/core-infras…
Starting a new repo with some basics on securing MS related stuff. First thing: RDP github.com/cfalta/msbits/…
Every. Damn. Time. Why, 𝕏? Why???
Listing all processes keeping particular file open is not a trivial task but since Vista we have a special syscall parameter for such purpose. Microsoft says "reserved for system use" but I was brave enough to wrap it into PowerShell function. Enjoy! github.com/gtworek/PSBits…
Finally releasing the tool! The Offline SAM Editor is here for IT pros, researchers, and security enthusiasts who want to access and edit SAM databases from offline OS disks. Source code included. Get your access: payments.gtworek.com/buy/54d82b09-4…
Coming soon to your toolbox 😎
@EricaZelic @ChadWst Get a partition you two 😉
Can someone skilled please do a comic on this for the next sysadmins day 😂 perfect love story
@EricaZelic Find yourself someone the way Exchange needs Active Directory :D
@ChadWst @EricaZelic Made my day 😂 the most perfect nerdy love story of all time
Great read if you’re into Kerberos. Its interesting how you can find the ideas behind things like FAST or Cred Guard in this paper.
@DebugPrivilege Nothing can compete with a great cup of coffee in the morning :) enjoy!
💥 Windows TCP/IP RCE Vulnerability 💥 CVSS 9.8 💥 Microsoft just released patches for end-of-life Windows 2008 Need I say more? CVE-2024-38063 msrc.microsoft.com/update-guide/v…
Justin Elze @HackingLZ
72K Followers 5K Following CTO @TrustedSec | Former Optiv/SecureWorks/Accuvant Labs/Redspin | Race cars
Grzegorz Tworek @0gtweet
38K Followers 2K Following My own research, unless stated otherwise. Not necessarily "safe when taken as directed". GIT d- s+: a+ C++++ !U !L !M w++++$ b++++ G-
LuemmelSec @theluemmel
8K Followers 596 Following I speak BloodHound. Husband, Father, IT-Guy, Security-Noob Blog: https://t.co/PXB35KEqs6 GitHub: https://t.co/Unp9jZOpBn
DebugPrivilege @DebugPrivilege
41K Followers 2K Following Not active anymore on X. Problem solver with a passion for troubleshooting complex issues.
sn🥶vvcr💥sh @snovvcrash
12K Followers 497 Following Sr. Penetration Tester / Red Team Operator @ptswarm :: Author of the Pentester’s Promiscuous Notebook :: He/him :: Tweets’re my pwn 🐣
Filip Dragovic @filip_dragovic
7K Followers 1K Following My research unless stated otherwise. My opinions are my own and do not represent the views of my employer. Red Team @MDSecLabs
Nathan McNulty @NathanMcNulty
19K Followers 1K Following Loves Jesus, loves others | Husband, father of 4, security solutions architect, love to learn and teach | Microsoft MVP | @TribeOfHackers | 🦋@nathanmcnulty.com
Matt Zorich @reprise_99
15K Followers 2K Following @Microsoft Security | https://t.co/HWozKuixTi | Tweets are my own | 🇦🇺
Shai @shailaron
8 Followers 131 Following Security Researcher, Identity & Authentication nerd | Opinions are my own.
Robogator @Robogator_adm
53 Followers 445 Following Free script based native automation for Windows ✨ Best experience to store, find & execute scripts 💻 Use C#, PS, Python to automate anything 🤖
Hossam @0xHossam
1K Followers 2K Following AdvSim / Red Team @CyShieldCompany /\ interested in malware, ad, red team, windows security research and wanna be red team ninja
matthew ink @matthewink1
0 Followers 207 Following
Johnny @Luckyrocky2028
251 Followers 7K Following Stay Hungry, Stay Foolish. Only those who are self-disciplined can attain true freedom.｜No Politics.
BlueChipDeals🇺🇸 @Horajou1325847
55 Followers 2K Following 15-30% Monthly | 2 High-Conviction Stocks.Short-Term Gains: 15-20% in Days/Weeks.DM "JOIN" for WhatsApp Alerts. Live Trade Signals • Market Analysis
duskxy @duskxy
35 Followers 1K Following
Mahmoud Sherif @Mahmoudp90
341 Followers 2K Following Penetration Tester💻 | Don’t tell people your plans. Show them your results.
Steven Lowson @StevoLowson
585 Followers 2K Following Security Ninja I like to break things 🤓. All tweets/opinions are my own.
Anshuman Srivastava @TweetAnshumaan
333 Followers 6K Following Networking + Cyber Security - Firewalls + Ethical Hacking & Penetration Testing Enthusiast
Scorpiobaobao @Scorpiobaobao1
4 Followers 548 Following
Shussed @Shussed165909
77 Followers 7K Following
sec mon @smonsec
0 Followers 2 Following
Rachel Wang @RachelWang9722
115 Followers 4K Following
windshock @windshockr
26 Followers 271 Following 🛡️ Security automation | 🔍 Vuln analysis | 🚀 Shift-left & data-driven security | 📎 CVE/CWE contributor | 🌐 https://t.co/KwxHn5VLIw
Brian Gehrke @H0bb3s
738 Followers 3K Following
Tomer Eizenberg @EizenbergT47800
3 Followers 327 Following
klm @klmxtom
4 Followers 443 Following
David Sheryn @david_sheryn
477 Followers 2K Following Information Security and Business Risk for over 25 years; Flying. Opinions are my own -- likes and retweets are not endorsements.
H @Br1Br11
115 Followers 3K Following
André @klist_sessions
67 Followers 1K Following eJPT, eCDFP. Blue team - Following #infosec twitter.
HuK @HuK2005
18 Followers 822 Following
Massimiliano Rizzi @mrizzi2
286 Followers 2K Following Hoping for the best, prepared for the worst | IT Professional | NASCAR addicted |
Juerg Koller @juergkoller
2K Followers 4K Following Senior Expert Endpoint Consultant at baseVISION AG, ConfigMgr Architect, Father of 2
Dexter @Am_dexter
1K Followers 2K Following Cyber Security | #pentesting #cybersecurity #infosec #CTI
MaYil @mayl8822
85 Followers 4K Following
Leo Nelson @LeoNel
2K Followers 3K Following CISO at @VillanovaU. Former Falcon, Owl, Prof. All tweets are my own and typically focus on technology, usability, accessibility, security and privacy. 🇺🇸
远山 @cloud728838
103 Followers 1K Following
Chad 🪐👽 🚀 @ChadWst
2K Followers 5K Following IT Pro, Identity nerd, GenX’er, who loves - Tech, Security, Sports, Science, Music, golf, poker, fitness @hornets @commanders @mets @canes @goheels #UAPs🛸
Amit Rastogi @AmitRas51770412
9 Followers 446 Following Principal Engineer, Cybersecurity, Gen AI, Agentic AI
C:\hristian Mehlmauer @firefart
3K Followers 3K Following I hacked the planet - opinions are my own - Mastodon: https://t.co/FTAelGh7DO
CrystaChapko @chapko30584
71 Followers 3K Following
Advik @Ad_vi_k
71 Followers 4K Following
RichardKurz30 @RKurz30
31 Followers 862 Following
Ori Biran @ori_biran26
0 Followers 28 Following
rimonyonatan @rimonchello
2 Followers 133 Following
Abhishek kumar jha @abhishekmdb
3K Followers 2K Following Infosec, SEO, Founder (@techworm_in) (@emulatorclub)
CurbYourName @lp_1055
2 Followers 265 Following
T B @nb_38
9 Followers 237 Following
Naman Devnani @naman_devnani
260 Followers 7K Following CyberOps | Security R&D | IT/OT Security | Bug Hunter | CTF Player | Cyber Warfare | AI | All-Source Intelligence | STEAM & Emerging Technologies
1xd_542586 @testtwit123fd
300 Followers 5K Following Head of Threat Intelligence Team | Security Analyst | APT | AI Application | Malware Analysis | Global Security Market&Product, call me 1xd.
Hdys0un @David67847724
100 Followers 1K Following CTF player | Security Researcher | Red team | Web3
thec0nci3rge @thec0nci3rge
198 Followers 366 Following Explorer of ADDS & Azure realms | one domain at a time |🇪🇺| https://t.co/CP8IFT6zlG
Monik Ramos @MonikRG77
175 Followers 1K Following Computer engineer working as a team leader of an offensive security team
Blaze @Blaze65770750
1 Followers 282 Following
Florian Roth ⚡️ @cyb3rops
223K Followers 3K Following Head of Research @nextronsystems #DFIR #YARA #Sigma | detection engineer | creator of @thor_scanner, Aurora, Sigma, LOKI, YARA-Forge | always busy ⌚️🐇 | vi/vim
vx-underground @vxunderground
445K Followers 372 Following The largest collection of malware source code, samples, and papers on the internet. Password: infected
Justin Elze @HackingLZ
72K Followers 5K Following CTO @TrustedSec | Former Optiv/SecureWorks/Accuvant Labs/Redspin | Race cars
Grzegorz Tworek @0gtweet
38K Followers 2K Following My own research, unless stated otherwise. Not necessarily "safe when taken as directed". GIT d- s+: a+ C++++ !U !L !M w++++$ b++++ G-
SwiftOnSecurity @SwiftOnSecurity
414K Followers 9K Following computer security person. former helpdesk.
Dirk-jan @_dirkjan
30K Followers 208 Following Hacker at @OutsiderSec. Researches AD and Azure (AD) security. Likes to play around with Python and write tools that make work easier.
n00py @n00py1
14K Followers 967 Following Retweeter of InfoSec/Offsec/Pentest/Red Team. Occasional blogger/Independent security research.
Will Dormann is on Ma... @wdormann
27K Followers 1K Following I play with vulnerabilities and exploits. I used to be here on Twitter but now I'm here: @[email protected] https://t.co/hXggdAVkSQ
LuemmelSec @theluemmel
8K Followers 596 Following I speak BloodHound. Husband, Father, IT-Guy, Security-Noob Blog: https://t.co/PXB35KEqs6 GitHub: https://t.co/Unp9jZOpBn
chompie @chompie1337
90K Followers 1K Following hacker, exploit developer/weird machine mechanic head of X-Force Offensive Research (XOR) @IBM
DebugPrivilege @DebugPrivilege
41K Followers 2K Following Not active anymore on X. Problem solver with a passion for troubleshooting complex issues.
Charlie Bromberg « ... @_nwodtuhs
16K Followers 667 Following Trying to hack the way we hack things 🏴☠️
sn🥶vvcr💥sh @snovvcrash
12K Followers 497 Following Sr. Penetration Tester / Red Team Operator @ptswarm :: Author of the Pentester’s Promiscuous Notebook :: He/him :: Tweets’re my pwn 🐣
Dave Kennedy @HackingDave
232K Followers 6K Following Founder @Binary_Defense @TrustedSec Co-Owner https://t.co/NUvgPUifL0. @WeHackHealth Pod. God + Family/Hacker/CSO/USMC/Intel/Fitness. Make the world a better place.
DirectoryRanger @DirectoryRanger
37K Followers 105 Following This account assembles and disseminates information related to Active Directory and Windows security.
Fabian Bader @fabian_bader
10K Followers 901 Following #Security #Azure #AAD #MDE #M365 #AD #PKI #XDR #EntraID Microsoft MVP Tweets and opinions are my own @[email protected]
Andrea P @decoder_it
9K Followers 323 Following Security Consultant @semperistech . Independent Security Researcher. Cyclist & Scubadiver. MSRC MVR 2022. "So di non sapere"
Vincent Yiu @vysecurity
32K Followers 380 Following Director of Red Team, Offensive Security, Agentic AI. Helping organizations safeguard their businesses from the bad guys.
Simone Margaritelli @evilsocket
48K Followers 2K Following Music, cybersecurity, open source and AI • Author of bettercap, pwnagotchi, opensnitch, bleah, legba and a few other things. Chief Architect @ 🥷
Chad 🪐👽 🚀 @ChadWst
2K Followers 5K Following IT Pro, Identity nerd, GenX’er, who loves - Tech, Security, Sports, Science, Music, golf, poker, fitness @hornets @commanders @mets @canes @goheels #UAPs🛸
WallPapers 🔥 @Papers_app
1.2M Followers 251 Following Discover a curated collection of stunning wallpapers and exclusive Wallpapers with Papers Wallpapers
C:\hristian Mehlmauer @firefart
3K Followers 3K Following I hacked the planet - opinions are my own - Mastodon: https://t.co/FTAelGh7DO
Tim Medin @TimMedin
18K Followers 595 Following Kerberoast Guy • @RedSiege CEO • IANS Faculty • Former SANS SEC560 Author, Senior Instructor • Packers Owner #GoPackGo • Work Req: https://t.co/ALJldLMDfZ
VMRay @vmray
4K Followers 2K Following Sandboxing reinvented for the threats of today - and tomorrow. | Imprint: https://t.co/yZtPfo2ySF
ACE Responder @ACEResponder
18K Followers 227 Following Practice threat hunting & detection engineering in a real SIEM with real attacks. Join us and become the best.
Martin Haunschmid | @... @0xntrm
654 Followers 431 Following 👾 Pentesting 👾IT Security Consulting 👾 OSCP/OSWE
Marcus Wadsak 🌞 @MarcusWadsak
58K Followers 2K Following ORF-Wetter / European Climate Pact Ambassador / Founding Member: Climate without Borders
Mathias Fuchs @mathias_fuchs
3K Followers 948 Following Something with IR and Intelligence @InfoGuardAG, Certified Instructor and author @SANSInstitute (@SANSEMEA), Former Principal IR Consultant @Mandiant
John Hubbard @SecHubb
7K Followers 902 Following Cyber Defense Author & Instructor @SANSInstitute - SEC450/LDR551 | https://t.co/6NusGJa7bk
CERT Orange Cyberdefe... @CERTCyberdef
10K Followers 433 Following First Private CERT in Europe. Tweets are about vulnerability and cyber threats. Corporate account: @OrangeCyberDef / @OrangeCyberFR GPG KeyID: 0xBD54B276
MalDev Academy @MalDevAcademy
20K Followers 8 Following Providing specialized, module-based security training and resources designed for cyber security professionals
Dlive @D1iv3
2K Followers 1K Following Security Researcher. 2022 MSRC MVR. Windows Active Directory Security / Cloud Security / Web Security. Tweets are my own.
Dave W Plummer @davepl1968
107K Followers 88 Following Hi! I'm Dave Plummer. You might remember me from such Windows components as Task Manager, Windows Pinball, Calc, ZIPFolders, Product Activation, etc. Cheers!
thec0nci3rge @thec0nci3rge
198 Followers 366 Following Explorer of ADDS & Azure realms | one domain at a time |🇪🇺| https://t.co/CP8IFT6zlG
Erich Fenninger @erichfenninger
3K Followers 505 Following Direktor der Volkshilfe Österreich | Eine gerechte Welt ist möglich!
Aurélien Chalot @Defte_
4K Followers 487 Following Hacker, sysadmin and security researcher @OrangeCyberdef 💻 Calisthenic enthousiast 💪 and wannabe philosopher https://t.co/SqDDhIGGGh 📖 🔥 Hide&Sec 🔥
SysReptor @SysReptor
549 Followers 97 Following #Pentest #Reporting made easy: Design in HTML, Write in Markdown, Render to PDF. Self-hosted or Cloud. For Pentesters. By Pentesters. 💚
InfoSec Artist @infosecart
3K Followers 350 Following Drawing all of your favorite #infosec personalities and topics. Donations/Tips are never required but always appreciated ✍️
Johannes Kopf @JohannesKopf
20K Followers 384 Following Wegen eines Waschbeckens nicht mehr da. Man findet mich auf bluesky. Vorstandsvorsitzender des AMS Österreich, twitterte privat.
SANS Institute @SANSInstitute
193K Followers 412 Following SANS is the most trusted and by far the largest source for information & cyber security training, certification and research in the world.
CISA Cyber @CISACyber
301K Followers 71 Following Part of @CISAgov, we respond to major incidents, analyze threats, and exchange critical cybersecurity information with partners around the world.
Tsurugi Linux @tsurugi_linux
5K Followers 7 Following Official Twitter account of TSURUGI Linux.TSURUGI is a free Linux distro designed for DFIR, OSINT investigations,malware analysis and computer vision activities
MISP (@misp@misp-comm... @MISPProject
22K Followers 93 Following MISP - Threat Sharing. An open source software and standards to share, create and validate threatintel and intelligence. Mastodon @[email protected]
13Cubed @13CubedDFIR
8K Followers 0 Following The official account for 13Cubed. Follow @davisrichardg for my personal account.
Eric Zimmerman @EricRZimmerman
19K Followers 990 Following KAPE, EZTools, forensics, X-Ways. Certified SANS instructor. FFL Please consider supporting me: https://t.co/pIjxED3CMx
Daniel Landau @LandauDaniel
28K Followers 5K Following gute Kindergärten & Schulen fordern. Dabei keine Ruhe geben - tachles reden! Nun auch unter https://t.co/U6CIbOTjcY
Michael Landau @mlcaritas
12K Followers 1K Following Präsident @CaritasEuropa | Caritas, Soziales, Umwelt und andere Themen | Zusammenhalt & Zuversicht! | Retweets müssen nicht meine Meinung sein.
Cybereason @cybereason
16K Followers 1K Following We Are The Defenders. We end cyber attacks on the endpoint, across the enterprise, to everywhere the battle is being waged.
Jack Rhysider 🏴... @JackRhysider
172K Followers 4K Following Creator of @DarknetDiaries and @LOWpodcast. Tell me a good hacker story. 💻🔦⤵️🐰🕳️ Discord: https://t.co/qxanMuIy7u
Sam Erde @SamErde
3K Followers 2K Following PowerShell MVP that is passionate about helping others succeed with Active Directory, Entra ID, Defender XDR, and Microsoft 365. Always learning! ✝️👨👩👧👦☕
The Citizen Lab @citizenlab
118K Followers 1K Following Academic research unit at @UofT investigating novel threats to democracy, human rights, and global security in the digital ecosystem.
Andrew @4ndr3w6S
3K Followers 3K Following Detection Engineering @HuntressLabs | Prev. Practice Lead, TAC (Purple Team) @TrustedSec | @SpursOfficial Super Fan - COYS!
Jon DiMaggio @Jon__DiMaggio
9K Followers 890 Following Bad guy chaser, writer/author, espionage & ransomware SME. Sometimes I harass my dog. He is the brains behind these projects and opinions are his.
Firewalla @FirewallaLLC
3K Followers 11 Following We make easy-to-use cyber security products integrated with parental control and privacy protection for smart homes and small businesses.
Ashton Rodenhiser @MindsEyeCCF
2K Followers 700 Following Author: Beginners Guide to Sketchnoting. Professional live illustrator. Mom of 3. Rural living and nature lover.You might like
