Detection Engineering, MARE & Honeypots 🍯 | Incident Detection Engineer @blumirasec | she/her
Michigan
Joined June 2017
- Tweets587
- Following1.5K
- Followers379
- Likes10.3K
Its official! I'm thrilled to start my next opportunity as a SecOps Analyst at @blumirasec, a cloud SIEM startup based in #annarbor. I get to work with a strong team including @InfoSystir, @laskow26, and @WReyor, doing what I love most: log analysis and defensive security.
Microsoft released their final public report on Solorigate. Confirms source code access including," small subset[s] of Azure components (subsets of service, security, identity),... Intune components, [and] ... Exchange components." msrc-blog.microsoft.com/2021…
Wish you could do something similar with your scanner at home? Me too, last year I made a short imagescan script to automate scanning so all you need to do is turn the pages. 📚✨ Works with Epson scanners, not sure about other brands. gist.github.com/malwaremily/…
At the Internet Archive, this is how we digitize a book.
We never destroy a book by cutting off its binding.
Instead, we digitize it the hard way--one page at a time.
#digitalbooks
Today the US Senate Homeland Security committee meets to examine cyber threats during the COVID-19 pandemic: youtu.be/j_Ec_nvtsek
The Senate is currently hearing arguments on the Trump administration's plan to limit Census count of undocumented persons: youtu.be/ePChyVCpI6A
1
Today the US Supreme Court will hear its first big Computer Fraud and Abuse Act case (c.1986), VanBuren vs. The United States, involving a police officer who, "used his access to a police license plate database to search for an acquaintance in exchange for cash." 1/3
1
This will establish a precedence for unauthorized computer access and define a grey are in which good-faith security researchers operate, especially as it relates to access permissions and confidentiality. techcrunch.com/2020/11/29/su… 2/3
1
Backing up DVDs using a CLI tool `dvdbackup` for the first time. Exploring what other options are out there like using `ffmpeg`, `dd`, or similar. dvdbackup takes about 10 minutes or so, which is do-able but not great. I'd like to preserve the menu and special features, etc.
ALT Linux terminal command: dvdbackup -i /dev/dvd -o ~ -M
1
Tried Parsec last night to remotely access my Windows machine from a Linux machine-- it works well! I'll be using Parsec to run VMs on a resource-rich system and develop in another room with my favorite laptop. I can even share screens via browser link. 👍 🖥️🌐💻
We've been busy this week! New additions to Teams, multiple improvements across the board, a bunch of bug fixes, and loads more: parsecgaming.com/changelog/
2
I'm speaking tonight on 'Automating Malware Labs with Vagrant!' I'll go over the steps I took to build my lab, show you how to use the lab, and review pain points and warnings.
📢Tomorrow @ 7pm EST will be @MiSec's second Ann Arbor chapter meeting!
🗣️@droidmlwr will be presenting "Automating Malware Labs with Vagrant"
🔗misec.us/event/misec-ann-arb…
#infosec #misec #AnnArbor
1
lmao
You’re unable to view this Post because this account owner limits who can view their Posts. Learn more
Oh neat! Here is a bash one-liner to quickly download a series of PDFs you're interested in.
wget jstor.org/stable/pdf/{$end_range..$start_range}.pdf
You can search all open access content on JSTOR without a login - there's more than 6,000 ebooks and over 150 journals: jstor.org/open/
hell yes 2021 Defensive Security Handbook v2
👏👏
Since it's #WorldBookDay I have a recommendation
It's 50% off right now!!!
amazon.com/Defensive-Securit…
@synackpse and I are due for an update, so maybe in 2021 you'll get a version 2 :D
I do this with my research servers-- it helps track changes to projects b/c each server iteration usually means I've changed something enough to warrant a rebuild. Even if I don't use a box for a long time when I see the number suffix it'll jog my memory of the changes over time.
A tip it's taken me a lifetime to figure out: name your servers with two-digit suffixes ('web01', 'web02', etc.) Three digits if you need them. When you replace a server, increment the number. Don't re-use any numbers. This really helps to simplify fleet management.
TIL there is an open source digital forensics conference 😍 October 15-17, 2019 Herndon, VA osdfcon.org
TIL about @TrendMicroRSRCH's Threat Enclopedia. Its worth checking out-- I thought the search function was a bit clunky but the information on the landing page is useful for your blue team arsenal.🖤 trendmicro.com/vinfo/us/thre…
1
2