TreyCraf7

I've had a concerning trend start to pop up during Purple Team Engagements, where analysts tell us, "The AI said everything is fine." That sentence is a huge problem. Seeing Teams devolve from Hunters to Prompters won't lead to anything good.. So I wrote a quick post on how teams are trading instinct for prompts, and what it's costing them. 🔗 scythe.io/scythe-labs/bu… #cybersecurity #ThreatHunting #purpleteam

Let’s go @TCraf7 @abhijithbr @AdversaryVillag @scythe_io

Come say hi @ICS_Village! Villages in Moscone South 🦄⚡

Re: LiteLLM.... Called it. 2026 is definitely going to be the year of Supply Chain Attacks. x.com/LiteLLM/status…

@OneRSAC kicked off yesterday and the SCYTHE team is at Moscone Center through the 26th. @brysonbort, @Marc_R_Brown, @TCraf7 and @FilipiPires are on the ground talking threat emulation, detection engineering, and purple team ops. The hallway convos at this one hit different. Come talk to us👇 scythe.io/meet-the-team #RSAC2026 #ThreatEmulation #PurpleTeam

Why yes, I {first_name} will indeed be at RSA.. 🤦‍♂️🦄

Landing today and will be out here until Thursday! If you are at @OneRSAC let me know, would love to meet up. cc: @mox_five

@FilipiPires @brysonbort @brysonbort @FilipiPires 3 makes a herd right? What say you @scythe_io ?

Hey sir @brysonbort .. Not exactly like you. 🤣🤣 🦄🦄 See you soon in San Francisco 🫡🫡 🦄🦄🦄

Seya soon @OneRSAC

When was the last time you actually emulated a threat actor end to end? Our Lead Adversary Emulation Engineer and Lead of SCYTHE Labs, Trey Bilbrey, is leading a hands-on session at RSAC where attendees will work through the full threat emulation lifecycle. Pick from a set of real threat actors, develop an emulation plan from actionable threat intelligence, and kick off your campaign in a domain ready for exploitation. March 25 | 3:30 – 4:30 PM Full schedule and registration: hubs.ly/Q047yMlr0 #RSAC #ThreatEmulation

Thread: How real adversaries are using C2 in 2026 (From building @scythe_io + watching nation-state/red team playbooks)  Spoiler: It's not just fancy Cobalt Strike beacons anymore. 🦄 1/10

APT28 doesn't care that your lab worked last quarter. At @OneRSAC, @FilipiPires, our Head of Technical Advocacy and Founder of @cross_intel, is leading a hands-on session reconstructing APT28's BadPaw/MeowMeow kill chain and turning it into a repeatable emulation campaign in SCYTHE. March 26 | 11:00 AM Full schedule and registration: hubs.ly/Q047JSZS0 #RSAC #APT28

Our sixth annual #UniCon2026 is on National Unicorn Day. A free virtual conference on blue red and purple teaming. 🦄

Ready to be the person on the right? We've all been there... leadership is confident the defenses are solid while you're quietly thinking about every detection gap, untested control, and TTP you've never validated against. That gut feeling isn't paranoia. It's experience. UniCon is where red teamers, detection engineers, and purple team operators dig into what your security stack actually stops and what it doesn't. Register now and turn that gut feeling into proof: hubs.ly/Q046ydPR0 #Unicon2026 #ThreatEmulation

@brysonbort's 10th talk at @OneRSAC as a Top-Rated speaker two years running. He's joining @MalwareJake to dig into how LLMs and automated agents are reshaping offensive security and rapid vulnerability discovery. Mon 3/23 | 2:20 PM PDT hubs.ly/Q046y2bd0 #OffensiveSecurity

Schedule is live for Adversary Village at RSAC 2026! Full Schedule of our hands-on activities and interactive sessions at @OneRSAC 2026 can be found here: adversaryvillage.org/adversary-even… Detailed info on sessions, activities and speakers: adversaryvillage.org/adversary-even… #RSAC #PowerOfCommunity

the best detections target what an adversary can 𝗻𝗼𝘁 change about a behavior. iimp0ster.github.io/detection-chok…

Avast, and stay vigilant, mates! ⚓️🏴‍☠️ Get Tickets Now! bsidestampa.net/tickets #BSidesTampa2026 #UnluckyBsidesTampa #Friday13 hashtag#Cybersecurity

Hands-on session: Be The Threat: Threat Emulation Exercises Join @TCraf7, Adversary Emulation Engineer at @scythe_io, at Adversary Village during @RSAC 2026. Adversary Village Room 204, Moscone South,March 25th, 03:30 - 04:30 adversaryvillage.org/adversary-even…

Hey guys, I'm doing a thing! Don't miss the 13th year of @BSidesTampa 🏴‍☠️