🔥The 9th Round of Easy Loan, Earn $40 Reward is in progress❗️ ⏰ Promotion Period: January 15th - Feburary 15th, 2025 👉 Register now and check more details at gate.io/campaigns/358

Day 3️⃣0️⃣ of #100DaysofYARA: More spots where `file` deceives you in suspicious application bundles is .car files. 😢 This proprietary Apple format (that @timacfr reverse engeineered) stores images, PDFs, etc that you can look at with "assetutil -I" YARA: github.com/shellcromancer…

Day 5️⃣6️⃣ of #100DaysofYARA: Wrote a strings based rule to flag the macOS malware that Jamf shared last week - so far it matches n 17/32 of in VT, I'll update this rule file as I look into the other ones for a better detection! YARA: github.com/shellcromancer…

Listen to julie agnes 🌈 and Josh Liburdi talk at Satya Future of Security Operations user group event about how they've grown their security automation program over the past couple of years. Great perspective balancing company growth and data needs youtu.be/UtwmKJ6n5M4

We are excited to be recognized by Y Combinator as a top workplace! It's an honor to be listed as #5 for the top-rated private YC companies and #7 on their Breakthrough Companies list. Their support, especially from Anu Hariharan, has been instrumental in our success.

🌶️ Audit Logs Wall of Shame A list of vendors that don’t prioritize high-quality, widely-available audit logs for security and operations teams Hopefully it influences some companies in the right direction 👀 audit-logs.tax

We're so excited that you can now integrate GreyNoise with Substation (github.com/brexhq/substat…), an open source toolkit for creating highly configurable, no maintenance, and cost-efficient data pipelines. You & your GreyNoise API key can get started here: substation.readme.io/docs/http-proc…

The picture doesn’t do it justice but walking in and seeing 2.1k #womenincybsersecurity will never grow old. #WiCyS2023

thankful for #WiCyS2023 and seeing my mentees in person

25 days left until BSidesSF! Join us on April 22 & 23 for more than 100 stellar sessions, villages, and workshops. Register now! bsidessf.regfox.com/2023 #bsidessf2023 #infosec #cybersecurity

ARCHIVED: Jen Easterly knows what's up. Don't add an audit-logs.tax

Day 💯 of #100DaysofYARA: When started on Jan 1st I had no idea I was going to do any YARA rules in 2023 let along a 100 day streak🔥 There were lots of macOS/Mach-O rules, file fats, and more. Check out this summary post: shellcromancer.io/posts/100-days…

Panel Day! BSidesSF! Join Jessica Rozhin, julie agnes 🌈, Louis Barrett and I as we dive into how the shift to applying engineering principles to detection and response work is a no brainer - and the only way to scale. Detection as Code - 3:30 @ AMC 13!

🔎 Detection as Code: The Engineering-Focused Future of Detection and Response How teams are using engineering-first principles to build scaleable, noise-cutting threat detection programs that work BSidesSF panel with Jackie Bow, Jessica Rozhin, julie agnes 🌈, Louis Barrett 🧵

Check out the full lineup of talks for fwd:cloudsec 2023! fwdcloudsec.org/schedule.html Grab the final few tickets before we sell out: eventbrite.com/e/fwdcloudsec-… See you in Anaheim on June 12th!

Interested in interviewing in the Detection & Response field? I made an informational guide on how to approach interviewing to make all our lives easier ✨ medium.com/@julieasparks/…