
Full-time Christian, husband, dad of 4, nerd @CounterHackSec; Certified @SANSInstitute instructor; Cyber Soldier; GSE #259
Maine, USA
Joined July 2014
- Tweets4.4K
- Following864
- Followers2.2K
- Likes22.5K
Pinned Tweet
Hey military hackers! Interested in finding some good DoD bugs for @DC3VDP, but you haven't gotten Burp working with your CAC? This is the thread for you!
Start by installing the DoD root certs and ActivClient. Hints for these prerequisites at militarycac.com/ 1/7
Chris Elgee retweeted
Today at noon EDT I'm launching a book I've been working on for 20 months: Dynamic Incident Response, an iterative IR framework designed for how security teams actually work. Free in all formats.
Join me for the launch today: sans.org/engage/dynamic-inci…
🤖 Made with AI
Today and tomorrow, we're welcoming all @SANS_EDU students to a private beta of the next, as-yet unreleased, NetWars! Stay tuned, NetWars fans - it's coming...
Want base64, wc, sort, and tee in your Windows CLI? You can have them *now* as MS-signed, Rust binaries! Run as Administrator:
PS> winget install Microsoft.Coreutils
Chris Elgee retweeted
No fluff. No vendor decks.
Just real attack paths, real techniques, real lessons. Join the talks!
HTH Con 2026 → 2026.hthackers.com/
#HTH2026
Chris Elgee retweeted
.@joswr1ght just announced a 720-page modern incident response book. 18 months in the making. The first comprehensive update to foundational IR frameworks since 2001. Released to the community for free. “Someone asked me, ‘Do you like writing?’ I say, ‘No, I like having written.’ That’s a different thing altogether. But I wrote this book because I kept seeing the same problems over and over again.” This is what giving back looks like.
➡️ Details in the RSAC deep dive: go.sans.org/nTAdXo
@OneRSAC | #RSAC #Cybersecurtiy #ThreatIntel #IncidentResponse
Chris Elgee retweeted
🚨 CFP OPEN 🚨
HTH 2026 | June 3–5 | Columbus, OH
Theme: Spaceballs.
Ludicrous speed engaged. 🛸
Technical. Hands-on. No vendor fluff.
Got scar tissue to share? Submit it.
🗓️ Deadline: March 6
👉 Proposal link: hthackers.com/cfp
Chris Elgee retweeted
So, the @SANSOffensive Holiday Hack Challenge 2025 closing ceremonies and winner announcements just dropped on YouTube! Congrats to all the winners!!! Check it out here: youtube.com/watch?v=m1g9gwFq…
OK fam, it's time to update the NetWars playlist! What should we add? All songs must be clean, peppy, and must SLAP. 🎸 Current playlist:
open.spotify.com/playlist/1J…
We'll be retiring the Wreck-It Ralph songs as those were imported for Core 10's theme.
Be sure to catch this week's @SANSInstitute Internet Storm Center Podcast for a quick chat about this year's Holiday Hack Challenge!
<sigh> Always blinking.
Say it ain't so, @dunkindonuts ! Don't take away the butternut! #SaveTheButternut
Don't know who needs to hear this, but PCAPs during sensitive operations can be a big help. This is wonky, but it shows while saving network traffic. Enjoy!
sudo tcpdump -i eth0 -w - -U host my.target.host | tee mytarget.pcap | tcpdump -r - -nnX
Chris Elgee retweeted
So, here's the deal--If you're a pen tester who says, "I don't pen test for AI injection flaws," it's like saying that you don't test for SQLi, or XSS, or command injection. You are missing the boat on some of the most important vulns today. It's like saying in 2004, "We don't test SQLi or XSS." You've gotta test for it. NOW.
Chris Elgee retweeted
Alright @KringleCon #HolidayHack #CTF fans, are you ready?! It's launching soon, and I was able to spend a day with the @CounterHackSec elves as they put their final touches on this year's game! To celebrate I am releasing my CheatSheet earlier than ever:
bit.ly/HolidayHack2025
























