CoFounder & Chief Research Officer at @AirlockDigital. Practical Execution Control & Allowlisting.
Adelaide, Australia
Joined June 2009
- Tweets1.5K
- Following1.6K
- Followers1.1K
- Likes1.8K
Another fantastic @defcon talk from Bruce Schneier. youtube.com/watch?v=eEBv0STi…
Daniel Schell retweeted
interesting... a car is just a concept. looking at the "physics" stats bare like this is interesting. very intriguing spline reference + momentum control system instead of tire physics
It's essentially a brick running on vaguely invisible rail
Someone had to do it. Real macro allowlisting, coming soon to @AirlockDigital.
Really enjoyed watching Cliff Stoll's Defcon talk.
youtube.com/watch?v=656058Jx…
Get his book if you haven't read it: amazon.com.au/Cuckoos-Egg-Cl…
Me right now.
Big @AirlockDigital announcement for Blackhat having added in-line Agentic AI control and steering - It was a big push to get it ready for @Blackhat. Very proud of the team. Check out the clip below - visit us at the booth to check it out!
Big @AirlockDigital announcement for Blackhat having added in-line Agentic AI control and steering - It was a big push to get it ready for @Blackhat. Very proud of the team. Check out the clip below - visit us at the booth to check it out!
Enjoyed conversation on @riskybiz discussing the implications of research in reversing EDR definitions with LLMs. Showout @HackingLZ / @_xpn_ for great research. Listen here: risky.biz/RBNEWSSI137/
What's New in @AirlockDigital v7. Application context is a new feature which is pretty cool - building an application catalog of even internal applications and automatic trust recommendations to build policies faster. Elevation control too.
Very happy with the v7 launch of @AirlockDigital.
Proud of new feature with "App context" being able to enumerate applications (without definitions!) gives such great visibility of what is running in your environment. Allowlisting thinks in files, but we like to think in Apps.
Looking forward to presenting at the AUSCert conference tomorrow on the Gold Coast main stage. Putting together a high level talk about denying attackers moves to win the game in-line with the conference theme has been fun.
Daniel Schell retweeted
#JDOWNLOADER compromised installers
One dev answers questions and provides updates 👍, and shared compromised installers #happyhunting
#threathunt
↘️
reddit.com/r/jdownloader/com…
No detections on this one pretending to be mstsc.exe and signed by "Tencent Technology (Shenzhen)".
virustotal.com/gui/file/8bfb…
I've put up a blog on the DigiCert incident as well as the Microsoft definition false positive. This includes some analysis and VT links to samples that have actually been signed by the compromised certificates. airlockdigital.com/airlock-b…
I've put up a blog on the DigiCert incident as well as the Microsoft definition false positive. This includes some analysis and VT links to samples that have actually been signed by the compromised certificates. airlockdigital.com/airlock-b…
Does anyone know what source of malware samples for the path D:\auto_black_abuse is to VT? Is this a vendor sample share feed?
Daniel Schell retweeted
why is she inside of a installshield installer
Ambassador Gingrich is pleased to lead the delegation from Switzerland and Liechtenstein to the SelectUSA Investment Summit, May 3-6, in National Harbor, Maryland. Apply now:
ow.ly/s4E950YOvTo