Security, appsec, recovering triathlete formerly on twitter at https://twitter.com/living_syn
livinginsyn.01 on signal
Security, appsec, recovering triathlete formerly on twitter at https://twitter.com/living_syn livinginsyn.01 on signal
I released v2.1.0 of RMML. The big changes in the past few days are:
- A full export of sigma rules for detections
- The addition of Jump Desktop signatures
Security, appsec, recovering triathlete formerly on twitter at https://twitter.com/living_syn livinginsyn.01 on signal
Someone wrote a cool blog post using RMML for building detections
Security, appsec, recovering triathlete formerly on twitter at https://twitter.com/living_syn livinginsyn.01 on signal
Interesting notes from the RMML traffic (https://github.com/LivingInSyn/RMML)
The most looked up RMMs are:
- AnyDesk (49)
- ngrok (20)
- GoToMyPC (14)
- TeamViewer (14)
- N-Able (12)
Security, appsec, recovering triathlete formerly on twitter at https://twitter.com/living_syn livinginsyn.01 on signal
I cut release v.1.5.0 of RMML (a list of RMMs designed to be used by security tools in an automated fashion) to include VSCode tunnels which are under use by threat actors
Security, appsec, recovering triathlete formerly on twitter at https://twitter.com/living_syn livinginsyn.01 on signal
Pushed v1.4.1 of RMML: https://github.com/LivingInSyn/RMML (a repository of RMM definitions designed to be used in automations)
Includes two new contributors and some updated definitions!
Security, appsec, recovering triathlete formerly on twitter at https://twitter.com/living_syn livinginsyn.01 on signal
I need @hushcon@infosec.exchange NYC to come back
Security, appsec, recovering triathlete formerly on twitter at https://twitter.com/living_syn livinginsyn.01 on signal
I've been doing this whole security engineering thing for a while now and somehow still fell into the 'client side security' trap. I should have known better but got down a rabbit hole. One of my employees called me out on it, and I appreciate it
Long story short, call out your boss when he's being an idiot (nicely)
Security, appsec, recovering triathlete formerly on twitter at https://twitter.com/living_syn livinginsyn.01 on signal
#nature squirrel eating a mushroom in a tree
Security, appsec, recovering triathlete formerly on twitter at https://twitter.com/living_syn livinginsyn.01 on signal