Chris Roffe @croffe

Making network detection, forensics, and response go brrrrrrrr. sentrywire.com Harrisburg, PA Joined February 2010

Tweets

5K
Followers

434
Following

1K
Likes

433

💻 Sherrod @sherrod_im

5 days ago

@klrgrz My 2019 stickers

0 1 15 325 0

View Details

Chris Roffe @croffe

2 weeks ago

@bettersafetynet Wind was on the list, yah?

0 0 1 7 0

View Details

Chris Roffe @croffe

2 weeks ago

@gabsmashh Growing apples during prohibition was not awesome when Cider was verboten. Farmers got creative ☹️

0 0 1 25 0

View Details

Lincoln in the Adirondacks ⛷️ @Riddle_Lincoln

3 weeks ago

Wildcat says they’re making a big investment in their snowmaking system. Good to see

4 1 15 1K 0

View Details

Chris Roffe @croffe

3 weeks ago

@bettersafetynet This sounds extremely surreal.

0 0 1 521 0

View Details

Chris Roffe @croffe

3 weeks ago

@sherrod_im

0 0 1 101 0

View Details

Chris Roffe @croffe

3 weeks ago

@_Lexa_v Neuro-optic 4lyfe.

0 0 0 11 0

View Details

Chris Roffe @croffe

3 weeks ago

@_Lexa_v True.

1 0 1 404 0

View Details

James Tate @JamesTate121

a month ago

The Obama presidential library really is stunning.

4K 3K 33K 4.7M 1K

162 686 34K 901K 432

View Details

Cybersecurity and Infrastructure Security Agency @CISAgov

2 months ago

Our newest BOD helps federal agencies realign vulnerability management and save resources to focus on what matters most. Clear priorities & actionable steps make measurable risk reduction possible, even against strong adversaries. go.dhs.gov/5cY

Axonius @AxoniusInc

2 months ago

The hardest question in federal cyber right now, framed by the government keynote from Nick Andersen (acting director of @CISAgov) at Axonius Adapt in Action DC 2026 this week. How do you measurably reduce risk with fewer resources, against a more capable adversary?

1 0 1 5K 0

1 7 24 5K 2

View Details

Chris Roffe @croffe

2 months ago

@shenetworks I recommended bash. You've already got Python and Go for the heavy lifting, being fast in a shell — log triage, pcap slicing, pipeline glue, remote box work. Every SOC, IR, and detection eng role is strengthened by it. If you’re in a windows shop; powershell.

0 0 2 88 0

View Details

We Assess and Draw Cats 🐾 @WeAssessCats

3 months ago

You're doing amazing sweetie Source: heidiwranglescats via Instagram

12 56 1K 38K 159

View Details

blackorbird @blackorbird

3 months ago

Exposing Russian Malicious Infrastructure: 1,250+ C2 Servers Mapped Across 165 Providers hunt.io/blog/russian-m…

1 17 59 5K 34

View Details

Sweep @0xSweep

3 months ago

Two guys ran an entire hacking operation in a PRISON for months In 2015, two prisoners in Ohio were assigned to a recycling program where they dismantled old computers Instead of scrapping the parts, they started stealing them Carried components over 1,100 feet past guards, metal detectors, and multiple security checkpoints Then built two working PCs and hid them behind a plywood board in the ceiling of a training room closet They ran cables from the ceiling into the prison's own network Stole login credentials from an employee by watching him type his password Set up Bitcoin wallets, Stripe accounts, bank accounts and credit card applications using another inmate's stolen identity Downloaded VPNs, the Tor browser, password cracking tools and what investigators called "a large hacker's toolkit" Created fake security passes to access restricted areas of the prison This entire operation ran for months They only got caught because one of the computers used so much bandwidth it triggered an automatic alert The Inspector General said it was "almost as if it's an episode of Hogan's Heroes" Two guys with recycled computer parts and a ceiling tile built a cybercrime operation inside a state prison

229 1K 10K 740K 2K

View Details

Chris Roffe @croffe

4 months ago

@bettersafetynet @AtomicGaryBusey Agree. The digital twin approach is a massive efficiency, definitely force multiplies existing staff. Saying it can/will reduce headcount is so mid.