Jamie Levy π¦
gleeda@infosec.exchange
<p><span class="h-card" translate="no"><a href="https://infosec.exchange/@volatility" class="u-url mention">@<span>volatility</span></a></span> Core Dev | Art of Memory Forensics co-author | <a href="https://infosec.exchange/tags/DFIR" class="mention hashtag" rel="tag">#<span>DFIR</span></a> trainer and enthusiast | Director of Adversary Tactics at <span class="h-card" translate="no"><a href="https://infosec.exchange/@huntress" class="u-url mention">@<span>huntress</span></a></span></p>
Posts
-
View post
Watching Andrew (Spike) Brandt (@threatresearch) from @huntress talking about the various Remote Management Tools (RMMs) that attackers abuse these days at booth 1845 #blackhat2026
-
View post
@xabean @threatresearch @huntress youβre too kind Richard π
-
View post
We&#39;ve seen quite a few of these phishing kits popping up lately. Here&#39;s some insight into one called Knight Office. Analysis by Andrea Hatcher, @threatresearch @tanner and @LindseyODWelch from @huntress https://www.huntress.com/blog/inside-knight-office-m365-aitm-attack
-
View post
NEW RMM TRADECRAFT: In the last few weeks Huntress has observed a notable pattern across multiple customer environments: rogue ScreenConnect clients repeatedly spawning the Windows Script Host to execute a series of four Visual Basic Script files. https://www.huntress.com/blog/rogue-screenconnect-installations
-
View post
Weβre hiring a technical writer for my team here at @huntress in case anyone is interested! Feel free to reach out with questions π #cti #dfir https://job-boards.greenhouse.io/huntress/jobs/6351695003
-
View post
Itβs raining, and feeding time, so what do we do? Sheep and goat dance set!!! π£π₯ turn up the volume! ππ Have a good weekend!
-
View post
The @huntress 2025 Threat Report is now live and it is a doozy!!! Make sure to check out the great work that @Laughing_Mantis and team have done πand gain insights into whatβs going on from our view!! π₯³ππ₯³ππ₯³π https://www.huntress.com/resources/2025-cyber-threat-report #cti #dfir