Tech, security, and other random things. @msftsecurity researcher. Creator and former lead of @mitreattack. Tweets are my own.
- Tweets 131
- Following 346
- Followers 3,025
- Likes 948
💯% MITRE coverage! I'm on top of my game! #igotfullattackcoverage attack.mitre.org/full-covera…
1
1
12
581
#attackgpt what EDR vendor is going to win the next round of evals?
1
9
1,586
#attackgpt If I connect you with CALDERA will it create skynet?
1
5
913
#attackgpt what's the best way to defend against malicious GPT bots?
2
3
1,213
#attackgpt I just got a call from the IRS saying I have to fill out some form to get an updated return. What should I do?
1
2
921
#attackgpt what's this MITRE matrix thing and how many of them do I need to solve cyber security forever?
1
3
1,932
Hey @Fortinet please, please, please run stuff like this by someone at @MITREattack before publishing. There's so much wrong with it fortinet.com/blog/industry-t…
4
7
37
16,258
I heard the 100th person to send @_whatshisface a vishing contribution will get a special ATT&CK prize
Really loving the smishing, vishing, quishing, and thrunting (!?!???) suggestions we've been getting left and right lately!
1
2
Blake Strom retweeted
*tomorrow* @Cyb3rWard0g, @OzSoprin and I are giving an open SANS webinar on “Defending your cloud against AD FS attacks”.
Join us if you want to learn more about AD FS attacks, and watch @Cyb3rWard0g live demo!
Join world-class defenders Dana Baril, Roberto Rodriguez, and Oz Soprin—researchers who responded to the #NOBELIUM nation-state attack—to learn how to defend your cloud against AD FS attacks. Register for the December 8 SANS webinar: msft.it/6017kNE3S #InfoSec
ALT Text reads, "Defending your cloud against A D F S attacks. Wednesday, December 8 2021, 10:30 A M E S T."
12
57
Another great effort from @Cyb3rWard0g to help the others learn about and assess the security their cloud environments!
Today, Microsoft is open sourcing Cloud Katana, a cloud-native serverless application built on the top of Azure Functions to assess security controls in the cloud and hybrid cloud environments. Read about the design principles and learn how to deploy: msft.it/6011n46MT
3
16
Awesome to see this work finally come out. It's been a long time overdue to give everyone the tools to define their own content within ATT&CK and help the contribution process
For years ATT&CK Navigator has enabled users to annotate and make ATT&CK their own. Today, the Center for Threat Informed Defense released another piece of the toolkit, which lets users create and share their own techniques. Check out ATT&CK Workbench at medium.com/mitre-engenuity/a…
6
Blake Strom retweeted
Join ATT&CK's @jamieantisocial & @msftsecurity's @stromcoffee keynote this Fri (6/4) 9AM ET at the FREE @SANSInstitute #CloudSecNextSummit where they'll discuss how we can understand, track, & defend against the recent #NOBELIUM/G0016 SolarWinds activity. sans.org/event/cloudsecnext-…
10
27
Blake Strom retweeted
At next week's #CloudSecNextSummit, don't miss Day 2 Keynote speakers!
@jamieantisocial & @stromcoffee will share how the adversaries pivoted to Microsoft Azure cloud environments after gaining access via the initial supply-chain vector | View Agenda: sans.org/u/1acC
2
2
I'm super excited to be speaking with @jamieantisocial in a couple weeks at the SANS CloudSecNext summit!
We're excited to announce the #CloudSecNextSummit Day 2 Keynote speakers!
@jamieantisocial & @stromcoffee will share how the adversaries pivoted to Microsoft Azure cloud environments after gaining access via the initial supply-chain vector | View Agenda: sans.org/u/1acC
4
10
I had some hands-on with SimuLand over the past couple weeks and can say it's a super useful resource to learn about cloud techniques. Well done @Cyb3rWard0g!
It's time to go to SimuLand! 🎠🎡🎢
But it isn't a new vacation theme park hot spot, it's a new open-source initiative that will help you deploy a lab environment to reproduce real attack scenarios to test your security defenses.
Get the details: msft.it/6017VxcHv
1
1
5
Our team is hiring! If you have experience hunting threats in the cloud, then let us know if you're interested careers.microsoft.com/us/en/…
6
6
Our team is hiring in the Vancouver, BC area! If working with a huge amount of data to find badness across the M365 security suite sounds fascinating, then come talk to us careers.microsoft.com/us/en/…
5
9
Super excited to see sub-techniques officially go live! Congrats @MITREattack team!
Subs have launched! After 3 months in beta, ATT&CK with Sub-Techniques (with some small fixes) has become... ATT&CK (attack.mitre.org/resources/u…). We've published a new blog post (medium.com/mitre-attack/atta…) that includes updates to our crosswalk format and describes what's changed.
1
40
After a bit of a break I'm happy to announce that I joined @msftsecurity as a researcher on the @MicrosoftMTP team! I'll be working across teams/platforms to find new ways of countering threats... maybe with a little ATT&CK sprinkled in as well😄
24
10
203