wessorh

@danirabbit@mastodon.online gardening. just go outside -- then you can talk about the weather

@stroz@infosec.exchange are you giving a jab to the cyber security industry and their threats?

@still@infosec.exchange take a look at https://plan10.org/ when we use math to do detection it can be fast and efficient

@micahflee@infosec.exchange I live in Oakland, do you have a link to learn more about the group?

@patrickcmiller@infosec.exchange I read your article and thought we might enjoy a conversation on clustering. I've been using a technique to fingerprint malware and I'd like to try it with what you saw. Could you share the hashes, or possably share the samples. thanks, -rick

@micahflee@infosec.exchange where/when does you fiction writes meet, I'd like to learn more

@sambowne@infosec.exchange yes, AI creates all the FP that endpoint security alert on. yes these companies are super smart, but AI...

@corq@infosec.exchange Untrue. Check out instant Malware Signatures https://cyberwarhead.com/2026/07/01/extending-yara-clamav-and-zeek-with-instant-holloman-fingerprints/

I'm still waiting for the information security industry to pivot from the FUD cycle. Why is everyone using Fear to motivate?

@Sempf@infosec.exchange Some places you just can't grow tomatoes, find what works in your location.

@zak@infosec.exchange try Wekiva Springs they are usually very cold

@gadi@infosec.exchange What I found super impressive this week is all the EDR tools that were completely reversed and unpacked with open weight LLMs and if that isn't hard to accomplish then the shields are down and everyone still thinks they are working

@nixCraft@mastodon.social I've been working on a system to detect simular things, It works for malware and spam, would you like some help detecting the bots? I'd be happy to see if it would work you can read some about it at https://cyberwarhead.com or https://plan10.org/

@monitorsg@infosec.exchange include "holloman" rule hash_fb1db11a8c87 { meta: description = "Hash fb1db11a8c8794c9649cbb2277deda6596f946fb5adfd9d6be005b8a28088486" sha256 = "fb1db11a8c8794c9649cbb2277deda6596f946fb5adfd9d6be005b8a28088486" sha1 = "da42210a05eaae079285c3db244074f4a8fb4549" md5 = "909055f515c9fa397b5d97341b5c39fd" fingerprint = "27405a5800074d530000040500000000" tag = "Malicious" condition: holloman.cluster_id == "h.27405a5800074d530000040500000000" }

How are the EDR companies responding to this?