@ChrisDeLeon I just want everything to be perfect on the first try. It shouldn't be that hard...
English
BZH
107 posts
BZH
@bzhinfosec
Former pentester @intrinsec, now incident response @awscloud. Tweets erratically.
Vancouver, British Columbia Katılım Mart 2015
460 Takip Edilen89 Takipçiler
I'm hiring Security Engineers in Seattle (amazon.jobs/en/jobs/143287…) and Vancouver (amazon.jobs/en/jobs/143292…). We're automating incident response @awscloud. Looking for candidates from all sorts of backgrounds. We have interesting problems and interesting people trying to solve them
English
BZH retweetledi
I would like everyone who follows me to do this one thing. DM someone who follows you, but you have never interacted with. Wish them a happy holidays and ask them how they are doing. Do this one thing for me. Please and Thank you 🙏.
GIF
English
🧐 Opened EDR console
➡️ Searched "mimikatz"
😅 Added "threat hunting" to LinkedIn profile
English
BZH retweetledi
BZH retweetledi
We've completed the rollout of TLS1.3 across Amazon CloudFront. It's now available and on for all CloudFront customers with no action or settings needed. Enjoy! aws.amazon.com/about-aws/what…
English
BZH retweetledi
You can now get access to the DNS logs of the VPC DNS resolver! Previously only GuardDuty had access to those.
aws.amazon.com/blogs/aws/log-…
English
BZH retweetledi
Want to bring your #DFIR skills to a great team in a challenging environment? Take a look right over there! ⤵️
Nicolas Bareil@nbareil
I think we spent more time adding #Yara click-baits than working on the actual description of the job but here it is: We have 3 open positions in Airbus CERT pastebin.com/hqt4mqhX #DFIR #Toulouse #Forensic #DetectionEngineering #Malware
English
BZH retweetledi
Updates to the security pillar of the AWS Well-Architected Framework: go.aws/2ZgP0UQ
English
BZH retweetledi
If you're looking into ETW for #DFIR purposes, you'll probably like feeding them into your Splunk SIEM.
Bonus round: you don't need to destroy your license consumption! You can define granular filters on providers, event IDs and more.
Enjoy!
Sylvain Peyrefitte@citronneur
Love ETW but can't afford #Splunk *and* Defender ATP at the same time? Take a look at our ETW Splunk Forwarder add-on! Set up the providers you want, add some filtering and voilà! github.com/airbus-cert/Sp… By the way, we're hiring! #DFIR #ETW #Windows
English
BZH retweetledi
Almost one year ago after attending re:Inforce, I wanted there to be a cloud security conference that was independent of the cloud providers. I'm so excited that this is actually happening tomorrow as fwdcloudsec.org after so many hours by the organizers and speakers.
English
BZH retweetledi
Plug: Google's IR+Forensics teams have a new blog osdfir.blogspot.com (contributors welcome!) and have done two Forensic Lunches with @HECFBlog on the Google team's open source Forensics Tools (youtube.com/watch?v=0yMGXl…) & how to do Incident Management (youtube.com/watch?v=hhUQcU…)
YouTube
YouTube
English
BZH retweetledi
AWS Lambda + Amazon EFS – You can now use a shared file system from your Lambda functions! Here’s my post ✍️ buff.ly/3d2KSLO #AWS #Serverless #Storage
English
BZH retweetledi
BZH retweetledi
We're excited to release TerraGoat, a vulnerable-by-design training tool for #Terraform! 🐐
📑 Read more about why we built TerraGoat: bridge.dev/2XdwAlz
⭐ Check it out on GitHub: bridge.dev/3bLgOUt
English
People interested in Cloud Security should definitely attend this!
Amazon Science@AmazonScience
On May 28 we'll be hosting a live Q&A with @MarcJBrooker, senior principal engineer at @awscloud, about Firecracker, an open source virtualization technology. He'll explain why it was built and how it's used inside AWS Lambda. Register here: amazon.science/videos-webinar… #AmazonScience
English
BZH retweetledi
BZH retweetledi
With Windows 10 20H1 (2004) almost out the door, I've updated the system call tables on my blog and on GitHub. Delta-wise, this seems to be the biggest Windows 10 update yet: +7 syscalls in ntoskrnl and +64,-6 in win32k.sys github.com/j00ru/windows-…
English
BZH retweetledi
Intel with all the melt/spec/leak mitigations, the bare-bones syscall cost went from ~70ns to about ~350ns.
It's crazy. I think we lost 10 years of system call performance.
English