Andrew Cook (@whoisAndrewCook) profile picture

Andrew Cook

@whoisAndrewCook

Finding and stopping threats one day at a time, @Recon_InfoSec SecOps. Threat Hunting. Incident Response.

 Austin, TX
reconinfosec.com
Joined February 2009
  • Tweets20
  • Following155
  • Followers144
5Media
Photo by Andrew Cook (@whoisAndrewCook)Photo by Andrew Cook (@whoisAndrewCook)Photo by Andrew Cook (@whoisAndrewCook)Photo by Andrew Cook (@whoisAndrewCook)Photo by Andrew Cook (@whoisAndrewCook)
Join now! Not recorded and @rj_chap will be dropping some ransomware knowledge bombs!
Recon InfoSec (@Recon_InfoSec) profile pictureRecon InfoSec@Recon_InfoSec27 Oct 2022
Join us TODAY @ 12:30pm CT (in 2 hrs!) for THURSDAY DEFENSIVE! Today's guest: @rj_chap, chatting about Ransomware. reconis.co/3SHqPYs #infosec #thursdaydefensive
2
3
Python 3.11 is out! 🎉 This is one of the most exciting releases in a while, including significant speed upgrades and better error messages. Here's what's new:
93
2,070
203
13,241
As we watch Basic Auth in O365 finally start to die off, I find myself reflecting on how ridiculously long we've lived with MFA Bypass as a thing. Those incident & pentest findings were brutal for orgs that thought their heroic efforts to roll out MFA had done some good.
2
I can hear my high school physics teacher sigh every time
Image from Andrew Cook (@whoisAndrewCook)
3
I thought "hey, maybe #Linux🐧is ready for regular people" and got my wife all set up👍 Two weeks later she's stuck in a black initramfs boot loop and I'm scrolling linux forums like it's 2007 to intone the right CLI-magic to fix the thing👎 Guess I'll try again in 3 more yrs🤷
1
6
Starting now! Not recorded, so be there or be square! #infosec #blueteam
Recon InfoSec (@Recon_InfoSec) profile pictureRecon InfoSec@Recon_InfoSec20 Oct 2022
Join us TODAY @ 12:30pm CT (in 2 hrs!) for THURSDAY DEFENSIVE! Today's guest: @_bromiley of @limacharlieio chatting about #DFIR , Blue Team, Defense, Giving Bad Guys Headaches. reconis.co/3rfZMIk #infosec #thursdaydefensive
Join us TODAY @ 12:30pm CT (in 2 hrs!) for THURSDAY DEFENSIVE! Today's guest: @_bromiley of @limacharlieio chatting about #DFIR , Blue Team, Defense, Giving Bad Guys Headaches. reconis.co/3rfZMIk #infosec #thursdaydefensive
8
3
8
First one to tell me how @OpenAI will replace my #infosec job wins my eternal gratitude. I've got a mortgage to pay and food to eat.
Andrew Cook (@whoisAndrewCook) profile pictureAndrew Cook@whoisAndrewCook20 Oct 2022
Replying to @JimmyVo
@JimmyVo you gave me an idea....will @OpenAI be writing our threat detections next? Here's a first attempt without any special training data; it seems to get the gist of it. Will we someday skip this human-centric step completely? #Blueteam #BlueteamAI
Image from Andrew Cook (@whoisAndrewCook)
1
2
Aachccccccucjrdciiindrlhrkrtifidrvdcdiltgrteuhoooo! Gesundheit! If you suffer from chronic #Yubisneeze, ask your doctor if Swapping Slots™ is right for you: support.yubico.com/hc/en-us/… @Yubico
3
2
🦖Day 29 of the @velocidex #velociraptor #ArtifactsOfAutumn series Artifact: 'Exchange[.]Windows[.]Registry[.]NetshHelperDLLs' Author: @eric_capuano Link: docs.velociraptor.app/exchan…
Image from Wes Lambert (@therealwlambert)
1
6
8
Messing around with @OpenAI looking for some interesting #BlueTeam use cases is like playing two truths and a lie: shocking accuracy followed complete fiction. Here's the (slightly modified) 2021 Kesaya attack as analyzed by a robot. Any lies? Try it out! beta.openai.com/playground/p…
Image from Andrew Cook (@whoisAndrewCook)
2
3
10
figuring out what all this twitter buzz is all about
1
Load more