Practical Allowlisting and execution control that works.
Adelaide, South Australia
Joined May 2014
- Tweets248
- Following20
- Followers674
- Likes224
Airlock Digital retweeted
I've put up a blog on the DigiCert incident as well as the Microsoft definition false positive. This includes some analysis and VT links to samples that have actually been signed by the compromised certificates. airlockdigital.com/airlock-b…
Airlock Digital retweeted
Video showing how @AirlockDigital prevents TTPs such as the DLL search order used to load an attacker controlled DLL into a trusted application from the compromised CPU-Z website last week.
airlockdigital.com/airlock-b…
Airlock Digital retweeted
Signature-based control breaks down with agentic AI.
Block one path → it tries another. Different method. Same outcome.
That’s why control needs to be on the endpoint - and focus on capability AND execution.
My blog (with videos) here:
airlockdigital.com/airlock-b…
Excited to attend our first #FalConEurope, meeting our existing partners and customers in the region and showing the @CrowdStrike community how we make allowlisting achievable.
🤝 Our partner ecosystem is at the forefront of #cybersecurity, and our partners play a major role in #FalConEurope.
👏 Thank you to all Gold sponsors of Fal.Con Europe, including:
▶ @1Password
▶ @AcalvioTech
▶ @Accenture
▶ @AirlockDigital
▶️ @Cloudflare
▶ @Commvault
▶️ @EYnews
▶ @gytpol
▶ @hunters_ai
▶ @NagomiSecurity
▶ @NETbuilderLTD
▶ @ninjaone
▶ @obsidiansec
▶ @preludeorg
▶ @SaltSecurity
▶ @tines_hq
▶ @torq_io
▶ @WestconComstor
🔗 Meet and network directly with our sponsors in The Hub at Fal.Con Europe: crowdstrike.com/events/fal-c…
Airlock Digital retweeted
Thanks to our Fal.Con 2020 #cybersecurity conference Silver sponsors! @Googlecloud, @Safeguard_Cyber, @AcalvioTech, @CDWCorp, @TrueFort, @Mimecast, @Optiv, @AirlockDigital, @DomainTools, @AttivoNetworks and @DLTSolutions bit.ly/30t1XeX #FalConExperience
Airlock Digital retweeted
airlockdigital.com/airlock-b…
@AirlockDigital customer guidance for AnyDesk incident. TBS hashes and compromised file metadata included. – at Adelaide, South Australia
Airlock Digital retweeted
And if you have budget, @AirlockDigital is even better!
Airlock Digital retweeted
I've created a few tools to help with onboarding and maintaining an @AirlockDigital instance, mainly to do with bulk adding rules, and comparing your current rule set to historic executions (to see if you missed anything)
github.com/wipash/airlock-on…
Airlock Digital retweeted
@AirlockDigital has agents for Linux and Mac. Allowlisting is traditionally difficult on Linux because files aren’t signed, we created a mapping between yum/apt databases to provide publisher trust on Linux. We have drivers for older kernels, and driverless using fanotify api. – at Adelaide, South Australia
Airlock Digital retweeted
Love reading new @AirlockDigital case studies as they are published. EQT is North America's largest natural gas producer. Many more in the pipeline - airlockdigital.com/airlock-d…
Airlock Digital retweeted
The “Allowlist Auditor” from @AirlockDigital is great to highlight the current state of allowlisting on endpoints. Includes tests for execution (exe, dll, PS1, CPL and others) in common locations, and an audit for existing allowlisting solutions. airlockdigital.com/applicati…
Airlock Digital retweeted
Fantastic to see public recognition of @AirlockDigital as the #1 popular listing in the @CrowdStrike marketplace marketplace.crowdstrike.com/
We are less than a week away September 18 through September 21, we will be present at CrowdStrike's Fal.Con 2023 as a Gold Sponsor. Join us at Caesars Palace in Las Vegas, to get more details about our allowlisting platform.
Airlock Digital retweeted
Blog writeup of what we know airlockdigital.com/microsoft…
Come say Hi tomorrow at the Blackhat expo hall tomorrow. Home of the offical @riskybusiness sticker 😂
Airlock Digital retweeted
Used our slot on @riskydotbiz news with
@campuscodi to deep dive the vulnerable driver landscape, Microsoft security boundaries, byovd, loldrivers and why/which actors benefit from their use. Interested in community feedback. Listen here: overcast.fm/+5Sl_Orswc?fbcli…
Airlock Digital retweeted
Discussed attackers' temptation to use custom code, lateral movement and living off the land in an allowlisting context with Patrick and @c0tts on this weeks @riskybusiness podcast. overcast.fm/+It0j4EJEU
Airlock Digital retweeted
Excited to have our first customer case study published! Most @AirlockDigital customers find us through word of mouth, but it's amazing when we when we can publicly share their success: portal.airlockdigital.com/hu…
Airlock Digital retweeted
Boarding the big flight to RSA in SFO. Looking forward to catching up with customers and partners. We’ll have six @AirlockDigital team members mincing about the conference. Also look forward to putting some Twitter names to faces!
