Zapa

@cR0w@infosec.exchange I forget they still exist. Jesus anything DHS touches turns to shit.

@reput_io@infosec.exchange PhantomGraph’s core design is to help analysts identify the signal from the noise of domain abuse, redirection, and captcha gating.

If I gave you a phishing email, how many of tools would open before you could produce IOCs, ATT&CK mappings, campaign relationships, blocklists, and report it? #infosec #threatintel #cybersecurity

Stardust

@cR0w@infosec.exchange my leadership has been pushing employees to create accounts as an “operational requirement.” I’ve been the only hold-out for fear of my personal information being required for an account, then this shit happens. Too perfect.

Man I’m getting rejection emails left and right for some very simple CTI roles.

RE: https://infosec.exchange/@trojanfoxtrot/116908993982110748 You only need one. PhantomGraph. Try it now for free at app.phantomgraph.io #cybersecurity #infosec #threatintel #cyberthreatintelligence #DEFCON

I will bitch slap you.

Don’t be embarrassed about using GenAI. But you should be embarrassed about using it without verifying its outputs. If you’re incapable of verifying its outputs, maybe you shouldn’t be using GenAI.

@Mara@hachyderm.io I literally just launched a website with Let’s Encrypt 😭

@reput_io@infosec.exchange the way PhantomGraph is doing it is by a deterministic combination based on preceding behaviors and not so reliant on the atomic observable indicator. Even if there are legit human verification gates in the click flow being abused by attacker infrastructure, the method of delivery, header info mismatch, lure language, and content will still and malicious; if the web page had already exhibited phishy behavior before the captcha, it will follow that thread and show the downloaded scripts too!

@cR0w@infosec.exchange same jobs keep getting reposted by the same companies on LinkedIn, too. I know it’s to stay on top of people’s algo’s but when a company’s entire CTI team is seemingly vacant, I start to wonder.

@cR0w@infosec.exchange Huntress, just saying.

@cR0w@infosec.exchange should we just keep applying lmao

@cR0w@infosec.exchange that’s light work for Sonnet. Don’t temp me lol

@da_667@infosec.exchange I just engrave them inside the housing/case.

@jerry@infosec.exchange dumb question but where is the about section?

@saltmyhash@infosec.exchange I’ve rewritten it (kept same format for years) and had some peers of mine review it for anything I may have missed. I received very good feedback and have been shooting my shots to very prominent companies. A few of them even required experience with GenAI legislature, Fortune 500s, and building/maturing and implementing whole CTI functions and teams. I might just need to go back and rewrite my resume or just stay where I am at, which is quite possibly a black mark on my resume based on what I’ve heard from people.

@threatresearch@infosec.exchange @huntress@infosec.exchange that’s what the Cyber Threat Alliance is for.

@gabrielesvelto@mas.to join a good union*

@xan@xantronix.social https://youtu.be/IxjZ04T6Boo?feature=shared