Kileen / is on Nostr

"4d7282d4ed74440e2ef337ae98ccc8b1d28e3caccfb2006d1766abf5de8ef3a2aa527bd7f554908654dceff44c9b9c07d31cfe7460fa308ecd6aa8721c910dcc"

Last Notes

2024-12-25 15:59:16

- reply

@nprofile…fle4 Thank you for sharing. I can understand this as well, with this also being a reality in my past. Be well & here to listen and not judge.

2024-12-19 02:24:19

- reply

@nprofile…fle4 @nprofile…2dqz this is one of my complaints with Crowdstrike giving APTs action figures.

2024-12-04 02:53:21

- reply

@nprofile…5k2y I wish I could make the recommendations at the bottom part of a quiz for all incoming and returning students who are attending courses after they graduate high school. Thanks for sharing!

2024-11-27 03:20:09

- reply

@nprofile…fle4 the bar is stupidly low.

2024-11-26 17:15:12

- reply

@nprofile…fle4 if I have time I’d like to setup and get more familiar with OpenBAS as well. https://github.com/OpenBAS-Platform/openbas/

2024-11-26 06:54:33

- reply

@nprofile…fle4 I’d be willing to test Sliver as a C2, but will need to look at some evasion tactics since I don’t exactly live in that arena as much as others do. I’d like to, but there’s other IT housecleaning stuff I’m involved with right now.

2024-11-26 06:52:31

- reply

@nprofile…fle4 I’d be nice if we had paid for a real Breach & Attack Simulation tool to test the breadth of all the other products being tested, but that’s unfortunately not the case. If I have time I might look into tying OpenBAS into it somehow.

2024-11-26 06:15:02

- reply

@nprofile…fle4 using Ludus to spin up a test environment. Caldera on Linux as a C2 into the test AD environment with additional logging with elastic agents plus sysmon config to ELK. I wanted to try Sliver, but might not have the time between other stuff at work. Would love some expertise as long as the tests are repeatable.

2024-11-26 06:10:55

- reply

@nprofile…fle4 one of the vendors has signature findings for everything in AtomicRedTeam. I’m using Ludus (https://docs.ludus.cloud/docs/intro/) to spin up a safe environment (mainly for AD - thanks to BadBlood for lots of AD objects!). I’m including a macOS & Linux RHEL host as well for testing and having logging sent via elastic agents to an ELK instance with an added sysmon config. My plan is to use Caldera on a Linux host as a C2, so the tests are able to be repeated. I haven’t found the time to spin up or test Sliver, but this’ll be for more than one EDR vendor. Happy to discuss or get ideas, but the testing will need to happen soon.

2024-11-26 05:50:30

I’m about to do some testing with EDRs and interested from mostly a #blueteam perspective what they’ll miss. I heard the vendor who had a hard dive in July of this year misses PUPs the most and their “Complete” isn’t great at remediating all the webshells. Anyone want to share some pointers? I’m logging with ELK & Sysmon, but curious about blind spots.

2024-11-17 02:30:19

- reply

@nprofile…fle4 it makes the password change process when a company has a breach and they just so happened to store passwords in plain text instead of salting + hashing them (and incurring the small cost of the computational overhead), not to mention being responsible for the information users are trusting those companies with, it’ll help with the response. I was proud of my retired parent also talking with their friends about using a password manager. It’s a big win! Signal is next!

2024-11-14 02:41:52

- reply

@npub17yf…cuaz Success! I was pretty proud of getting my parents and in-laws to start using a password manager.

2024-11-06 02:42:00

- reply

@npub17yf…cuaz I’m so glad I have it set to NOT autoplay YouTube videos!!

2024-09-10 21:36:02

- reply

@npub1vcl…k6t3 any idea what kind of cameras these are?!

2024-08-30 03:45:33

If you have a TP-LINK device, be on the lookout for a patch. https://vulners.com/nvd/NVD:CVE-2024-42815

2024-07-20 14:40:58

- reply

@npub1vcl…k6t3 I still find this severely lacking (compared to xz utils).