1.
Dray Agha
@Purp1eW0lf
WMI lateral movement is all about child processes. Look for the following features of WmiPrvSE.exe children.
β’ Neβ¦ twitter.com/i/web/status/1β¦
β’ Neβ¦ twitter.com/i/web/status/1β¦
Retweet of status by @ACEResponder
2.
Dray Agha
@Purp1eW0lf
We are recruiting! Want to join our team as a Cyber Threat Intelligence Analyst? If you like threat intel anβ¦ twitter.com/i/web/status/1β¦
3.
4.
5.
6.
7.
Dray Agha
@Purp1eW0lf
There's a bypass to the fix to the bypass to the mitigation for ProxyNotShell / CVE-2022-41040. β¦ twitter.com/i/web/status/1β¦
Dray Agha
@Purp1eW0lf
Investigating an intrusion?
Start with the security solution on the machine. DON'T work hard to timeline the aβ¦ twitter.com/i/web/status/1β¦
Start with the security solution on the machine. DON'T work hard to timeline the aβ¦ twitter.com/i/web/status/1β¦
Dray Agha
@Purp1eW0lf
Exciting news - Iβm hiring for my team @SentinelOne! If you burn with passion for Digital Forensics, this might bβ¦ twitter.com/i/web/status/1β¦
Retweet of status by @JReisdorffer
Dray Agha
@Purp1eW0lf
I started a #Threat_hunting series. In this first post, I cover the basics, including:
What is threat hunting
β¦ twitter.com/i/web/status/1β¦
What is threat hunting
β¦ twitter.com/i/web/status/1β¦
Retweet of status by @Kostastsale
8.
9.
10.
11.
Dray Agha
@Purp1eW0lf
Job Alert
I'm hiring for an open position on my team. We're looking for a technical analyst who can help us reseaβ¦ twitter.com/i/web/status/1β¦
I'm hiring for an open position on my team. We're looking for a technical analyst who can help us reseaβ¦ twitter.com/i/web/status/1β¦
Dray Agha
@Purp1eW0lf
Defense evasion is a lot like a broad church.
...at least that's what @Purp1eW0lf on our ThreatOps team claims. β¦ twitter.com/i/web/status/1β¦
...at least that's what @Purp1eW0lf on our ThreatOps team claims. β¦ twitter.com/i/web/status/1β¦
Retweet of status by @HuntressLabs
Dray Agha
@Purp1eW0lf
Next week on CrackMapExec, a new option will be available pic.twitter.com/ME0VnXM6an
Dray Agha
@Purp1eW0lf
Probably the weirdest #LOLBin I have ever found...
wlrmdr.exe -s 3600 -f 0 -t Click me! -m To run calculator -aβ¦ twitter.com/i/web/status/1β¦
wlrmdr.exe -s 3600 -f 0 -t Click me! -m To run calculator -aβ¦ twitter.com/i/web/status/1β¦
...but wait! There's more!
1.
fakhright
@fakhright
astaghfirullah peng.krim guaaaaaaaa..............a *salto sambil solat*
