T.J. (@TimDotZero) header
T.J. (@TimDotZero) profile picture

T.J.

@TimDotZero

Elastic Platform Engineer @BHinfoSecurity | DFIR + Tech + Music + Coffee | @timdotzero@infosec.exchange (opinions expressed are my own)

 Texas, USA
Joined March 2019
  • Tweets940
  • Following753
  • Followers389
375Media
Photo by T.J. (@TimDotZero)Photo by T.J. (@TimDotZero)Photo by T.J. (@TimDotZero)Photo by T.J. (@TimDotZero)Photo by T.J. (@TimDotZero)Photo by T.J. (@TimDotZero)Photo by T.J. (@TimDotZero)Photo by T.J. (@TimDotZero)Photo by T.J. (@TimDotZero)Photo by T.J. (@TimDotZero)
i don't post much here these days, but this one feels worth sharing to the #DFIR community @eric_capuano has been working on this side project, almost at MVP 🌈 so if you work in forensics and want super timelines on macOS... THOON!
Image from Whitney Champion 🍪🚀 bluesky @whit.zip (@shortxstack)
2
2
23
2,352
God I hate the fact that Threat + Hunting is being called "Thrunting." And we now have Threat + Hunters who are "Thrunters." This is all I can see when I see these terms...
40
12
6
213
13,845
Workshop happening THIS THURSDAY: ✔️ Pay What You Can ✔️ Collaborative interaction with instructor & fellow students ✔️ Access to course slides for future reference ✔️ Tips, tools, & techniques that can be applied immediately antisyphontraining.com/produ…
Image from Antisyphon Training (@Antisy_Training)
5
13
402
Something to look forward to this Friday: Foundations of Network Forensics & Analysis with Troy Wojewoda! This workshop is 4 hours long and includes hands-on labs. It's the perfect way to fit a bit of training into your workweek. Registration & details: antisyphontraining.com/cours…
Image from Antisyphon Training (@Antisy_Training)
4
10
459
Hey folks! THURSDAY - BHIS Webcast Join us for a free one-hour webcast with the Black Hills Information Security (BHIS) ANTISOC Continuous Penetration Testing team. Learn how we test our client's security daily and take home tools and techniques to try yourself. Isn’t this just a Red Team? It’s complicated. We'll explain. Our goal: help you think like the threats you're up against. Thursday, July 24th - 1:00 PM EDT Register (Zoom): events.zoom.us/ev/AtOpqfQYqF… Show up early for Pre-Show Banter! and Hack It! FRIDAY - @Antisy_Training PWYC Workshop Something to look forward to this Friday: Foundations of Network Forensics & Analysis with Troy Wojewoda! This Pay-Forward-What-You-Can workshop is 4 hours long and includes hands-on labs. It's the perfect way to fit a bit of training into your workweek. Registration & more info: antisyphontraining.com/cours…
Image from Black Hills Information Security (@BHinfoSecurity)
Image from Black Hills Information Security (@BHinfoSecurity)
3
8
899
It's dangerous to go alone, here... take this knowledge with you. Joseph joined us last week to share what he's discovered and learned about the Dark Web, so you never ever ever have to go there for yourself! No slide deck for this one so just sit back and enjoy - youtube.com/watch?v=TphMQAyC…
Image from Black Hills Information Security (@BHinfoSecurity)
4
7
1,144
If you're looking to get into SOC work, specifically Detection Engineering, I'm running a Pay-What-You-Can Detection Engineering workshop on March 7th: antisyphontraining.com/cours…
Workshop: SOC Detection Engineering Crash Course - Antisyphon Training

Workshop: SOC Detection Engineering Crash Course - Antisyphon Training

In this course, you will build a live detection engineering lab from scratch, ingest real logs, and research adversary techniques mapped to MITRE ATT&CK. You won't just write rules; you will validate...

antisyphontraining.com
2
7
196
First Hackin’ Fest in the bag! Denver was a blast. Can’t wait for the next one!! 🏔️@BHinfoSecurity @WWHackinFest
Image from T.J. (@TimDotZero)
Image from T.J. (@TimDotZero)
Image from T.J. (@TimDotZero)
2
2
21
1,687
INFOSEC CONTENT CREATORS! Do you have a YouTube channel, Twitch stream, blog, magazine, or anything else where you share your knowledge and insights on cybersecurity, please drop the link in the comments. We want to help you find more people to help. We're all in this together!
147
92
2
472
55,520
Ever wanted to run Nuclei scans at scale without relying on Nuclei Cloud? Now you can! Ralph May joined us for a free one-hour BHIS webcast and taught us about the power of Nuclei scans and their incredible value for security teams. But that was just the beginning. Ralph introduced Orbit, a tool that makes this vision a reality, and showcased its features with a live demo Watch the full webcast here - youtube.com/live/cdZXHd28Uog Tools: Orbit Scanner - orbitscanner.io/
Image from Black Hills Information Security (@BHinfoSecurity)
1
15
1
42
4,658
Only thing I hate worst than a DNS issue is an NTP issue
1
75
"In addition to being common, access control vulnerabilities are often high impact when exploited..." Read more: blackhillsinfosec.com/findin… Finding Access Control Vulnerabilities with Autorize by: Craig Vincent Published: 11/21/2024
Finding Access Control Vulnerabilities with Autorize - Black Hills Information Security, Inc.

Finding Access Control Vulnerabilities with Autorize - Black Hills Information Security, Inc.

In the most recent revision of the OWASP Top 10, Broken Access Controls leapt from fifth to first.1 OWASP describes an access control as something that “enforces policy such that […]

blackhillsinfosec.com
1
4
12
1,405
"Did you learn the standard formula? Cyber risk = Threat x Vulnerability x Consequence" Read more: blackhillsinfosec.com/cyber-… Cyber Risk Lessons We Can Learn From Hurricane Preparedness by: Kelli Tarala Published: 11/14/2024

Cyber Risk Lessons We Can Learn From Hurricane Preparedness - Black Hills Information Security, Inc.

Risk is real. To better understand cybersecurity risk, let’s compare cyber risks to risks in the natural world from hurricanes. We can learn lessons from hurricanes and unnamed storms in […]

blackhillsinfosec.com
2
5
1,262
Blue teamers — sometimes we can lose sight of Active Directory. I mean, it just works in the background, right? Active Directory is crucial to Windows networks and a perfect target for bad actors. Dive into this article to learn common active directory pitfalls and how to avoid getting your day ruined. Read this article and more educational content for free in PROMPT# SOC Issue - promptzine.com/soc-issue-art… Resources on Active Directory: Fun with Office Macros youtube.com/live/cfKDnxeoTuQ… From Zero to Hero: Beginner’s Guide to Active Directory youtube.com/live/XwOV7HpVLEA… New Methods to Attack & Defend Active Directory youtube.com/live/rSgj-oMxG0g… Your Active Directory Active Defense ADAD Primer youtu.be/TA5G2tOrVAo?si=089C… Weaponizing Active Directory youtu.be/vLWGJ3f3-gI?si=cfPm… Active Directory Best Practices That Frustrate Pentesters youtu.be/SdNPUhzYTUc?si=jPPg… Blogs - blackhillsinfosec.com/tag/ac…
Image from Black Hills Information Security (@BHinfoSecurity)
Image from Black Hills Information Security (@BHinfoSecurity)
14
1
68
7,567
Day 347 of 366 Days of Cyber! Want to take what you learned from yesterday post further? Antisyphon Training has got you covered -antisyphontraining.com/cours… If you'd like more helpful educational content, check out the Infosec Survival Guide: GREEN BOOK - blackhillsinfosec.com/prompt…
Image from Black Hills Information Security (@BHinfoSecurity)
1
3
838
If you're an educator, please reach out to the Black Hill's team about sending you copies of the guide for free to help in your efforts to raise up the next generation of infosec professionals. blackhillsinfosec.com/contac…
Contact Us - Black Hills Information Security

Contact Us - Black Hills Information Security

Black Hills Information Security

blackhillsinfosec.com
Black Hills Information Security (@BHinfoSecurity) profile pictureBlack Hills Information Security
@BHinfoSecurity4 Dec 2024
Digital Forensics is a science and art! In the Yellow Volume of our Infosec Survival Guide, Blake Regan @Zer0C00L, breaks down the art of digital forensics, career paths you can take to becoming a digital forensics investigator, and resources to help you in your career! Resources: Blue Team Tactics by Blake regan - blueteamtactics.net Attack Tactics 6: Return of the Blue Team - youtu.be/c7x5JsR16Qw Blue Team Summit - youtube.com/playlist?list=PL… A Blue Team's Perspective on Red Team Hack Tools - youtu.be/0mIN2OU5hQE blackhillsinfosec.com/blog/ Open-Source Tools: Forensic Tool Kit (FTK) Imager - exterro.com/forensic-toolkit Autopsy Forensics Suite - autopsy.com Volatility (memory analysis) - volatilityfoundation.org Zimmerman Tools - ericzimmerman.github.io/#lin… Wireshark - wireshark.org iLEAPP and aLEAPP - github.com/abrignoni/iLEAPP github.com/abrignoni/aLEAPP Klogg - klogg.filimonov.dev If you'd like more helpful educational content, check out the Infosec Survival Guide: GREEN BOOK - blackhillsinfosec.com/prompt…
Image from Black Hills Information Security (@BHinfoSecurity)
Image from Black Hills Information Security (@BHinfoSecurity)
1
13
43
5,323
listening to one of the sharpest minds in our space, @Recon_InfoSec's @whoisAndrewCook, drop wisdom bombs at @BSidesAustin 🥹🔥🙌 "proactive defense: building effective threat hunts with AI and human expertise"
Image from Whitney Champion 🍪🚀 bluesky @whit.zip (@shortxstack)
Image from Whitney Champion 🍪🚀 bluesky @whit.zip (@shortxstack)
Image from Whitney Champion 🍪🚀 bluesky @whit.zip (@shortxstack)
Image from Whitney Champion 🍪🚀 bluesky @whit.zip (@shortxstack)
1
1
13
1,071
What is SQL and why is it worth learning? Come join a former SQL-hater to learn the capabilities of the universal data query language and how you can use it for more than just databases. Join us for a free one-hour Black Hills Information Security (BHIS) webcast with Security Analyst - @EthanRobish , about Intro to Data Analytics using SQL. Thursday, November 21st — 1:00 PM EST (UTC -5) Register here: events.zoom.us/ev/Ah6OIaoU5h… Ethan will cover a broad swath of both introductory and advanced SQL features. If you're looking to push beyond the boundaries of spreadsheets or command-line kung fu this webcast is for you. By attending, you'll gain an understanding of the types of problems that SQL excels at along with examples using DuckDB, a modern Swiss army knife of data analytics. Show up early for the pre-show banter! John & Ethan #webcast #SQL
Image from Black Hills Information Security (@BHinfoSecurity)
2
3
858
Free workshop: “Advanced Email Threat Hunting w/ Detection as Code” by Michael Robertson @Recon_InfoSec Buy conference tix by EOD 11/22 to receive email when wksh reg opens—1st come, 1st served bsidesaustin.com/schedule @SecurityBSides @BSidesSATX @AustinISSA @dc512 @LASCONATX
BSides Austin free workshop: “Advanced Email Threat Hunting w/ Detection as Code” by Michael Robertson Event dates: December 5-6, 2024 https://bsidesaustin.com/schedule

ALT BSides Austin free workshop: “Advanced Email Threat Hunting w/ Detection as Code” by Michael Robertson Event dates: December 5-6, 2024 https://bsidesaustin.com/schedule

15
19
1,844
We're excited to announce the release of ProcDump 1.0 for Mac. ProcDump functionality is now available on Windows, Linux, and macOS. Get the tools at sysinternals.com. See what's new on the Sysinternals Blog: techcommunity.microsoft.com/…
Sysinternals - Sysinternals

Sysinternals - Sysinternals

Library, learning resources, downloads, support, and community. Evaluate and find out how to install, deploy, and maintain Windows with Sysinternals utilities.

learn.microsoft.com
43
4
121
7,919
Load more