English
English Español Português Pусский Deutsch Français Itaaano Nederlands Polski Indonesia العربية ไทย Tiếng Việt Türkçe 繁體中文 简体中文 日本語 한국어
@phillmoore Profile picture

Phill Moore

@phillmoore

This Week in 4n6 // ThinkDFIR // SANS // CyberCX (DFIR) https://t.co/vLyL2sxTuy I might not know much, but I do know how to Google Tweets are mine

7KPosts 9KFollowers 3KFollowing
Similar User
Eric Zimmerman photo

@EricRZimmerman

Sarah Edwards 👩🏻‍💻🐈‍⬛ photo

@iamevltwin

DFIR Training photo

@DFIRTraining

Brian Carrier photo

@carrier4n6

Jessica Hyde photo

@B1N2H3X

13Cubed photo

@13CubedDFIR

Heather Mahalik Barnhart photo

@HeatherMahalik

Chad Tilbury photo

@chadtilbury

DFRWS photo

@DFRWS

Olaf Hartong photo

@olafhartong

Rob T. Lee photo

@robtlee

volatility photo

@volatility

Eric Capuano - Bsky: @eric.zip photo

@eric_capuano

Magnet Forensics photo

@MagnetForensics

X-Ways Software photo

@XWaysSoftware

phillmoore Profile Picture
Phill Moore
 @phillmoore
16 Nov

Kicking off day 6 for #FOR500!

Tweet Image 1
0
2
15
1
851
phillmoore Profile Picture
Phill Moore
 @phillmoore
31 Oct

.@mattiaep noticed something interesting in Win11 23H2 so I have documented it here: thinkdfir.com/2024/10/31/win… If you have access to a new version of Windows server, let us know whether WordWheelQuery has been removed from that too! #DFIR

0
4
17
8
916
Phill Moore Reposted
jeffmcjunkin Profile Picture
Jeff McJunkin
 @jeffmcjunkin
11 Oct

I *love* this Pyramid of Social Pains from @WadingThruLogs to help close out @WWHackinFest so well. Great job, Wade!

Tweet Image 1
3
15
70
12
4K
phillmoore Profile Picture
Phill Moore
 @phillmoore
14 Sep

Finished up an excellent @SANSAPAC #FOR500 class remotely to Tokyo! Congrats to the newest lethal forensicators! #DFIR

0
2
11
1
722
Phill Moore Reposted
HECFBlog Profile Picture
David Cowen
@HECFBlog
13 Sep

It's been a bit, how about a new blog post! hecfblog.com/2024/09/aws-cl… New version of the AWS Cloud Trail download tool written for FOR509. Lots of new features to make your life easier, let me know what you think! #for509 #cloudforensics #aws #cloudtrail #dfir

1
11
29
16
2K
Phill Moore Reposted
joshlemon Profile Picture
Josh Lemon
 @joshlemon
4 Sep

Join @phillmoore and me tomorrow as we host the FREE online @SANSAPAC #DFIR Summit. The talks look fantastic and range from #CloudForensics, #ICS, #ransomware, and #AutomotiveForensics, to name a few. 🗓 6th Sept - 8am SGT / 9am JST / 10am AEST 🔗 sans.org/cyber-security…

Tweet Image 1
0
3
8
1
997
Head of Research @nextronsystems #DFIR #YARA #Sigma | detection engineer | creator of @thor_scanner, Aurora, Sigma, LOKI, YARA-Forge | always busy ⌚️🐇

Florian Roth ⚡️

@cyb3rops
DFIR and Adversary Simulation | DFIR @ ProtonMail

Ali Hadi | B!n@ry

@binaryz0ne
The world's leading Digital Forensics and Incident Response provider. This feed updates you on latest DFIR news, events, and training.

SANS DFIR

@sansforensics
#DFIR & #BlueTeam | IR & Threat Detection | #OSINT enthusiast | waiting for HL3 | AWS CIRT - my views are my own

4n6lady

@4n6lady
founder & hacker @xintraorg ⚔️🖤 UwU

✞ inversecos

@inversecos
Ed.D. | Founder @networkdefense @RuralTechFund | Former @Mandiant, DoD | Author: Intrusion Detection Honeypots, Practical Packet Analysis, Applied NSM

Chris Sanders 🔎 🧠

@chrissanders88
Head of Investigations @InfoGuardAG https://t.co/A5lnFAu7eX

Stephan Berger

@malmoeb
Consultant for InfoSec Innovations | @SANSInstitute Principal Instructor | @IANS_Security Faculty | I like information security. How about you?

Mick Douglas 🇺🇦🌻

@bettersafetynet
Hacker/CTO @TrustedSec | Former Optiv/SecureWorks/Accuvant Labs/Redspin | Race cars

Justin Elze

@HackingLZ
Digital forensics and incident response. Ex-AFOSI, Mandiant, and CrowdStrike. SANS Institute Fellow and co-author of #FOR500 and #FOR508 courses.

Chad Tilbury

@chadtilbury
Sr. Threat Researcher @Microsoft, Malware Warlock, ThreatIntel, Python🧡 - Former @McAfee_labs, Goon @Defcon, Creator #UnprotectProject - Tweets = my own

Thomas Roccia 🤘

@fr0gger_
@TheDFIRReport | Tweeting and following mostly #ThreatIntel,#malware,#IR & #Threat_Hunting. Opinions are mine only! 🇬🇷🇨🇦

Kostas

@Kostastsale
Director of Intel at @redcanary. SANS Certified Instructor for FOR578: CTI. Senior Fellow at @CyberStatecraft. She/her. Mastodon: @likethecoins@infosec.exchange

Katie Nickels

@likethecoins
#DFIR, USMC vet, she/her

Jessica Hyde

@B1N2H3X
Head of Research and Discovery @Google Threat Intelligence. Leading multidisciplinary teams to defeat adversaries. Posts are attributable to me—not my employer.

Andrew Thompson

@ImposeCost
Curator of many stickers, somewhere amongst the 0's and 1's, @stark4n6

Kevin 🤖🕵️🍺

@KevinPagano3
👉 Learn #KQL for #ThreatHunting, #DetectionEngineering, and #DFIR at https://t.co/uAlYlXIpyV @BluRavenSec | Microsoft Security MVP | #DataScience

Mehmet Ergene

@Cyb3rMonk
Senior Dir of Community Engagement @cellebrite, @sansforensics Faculty Fellow & author #FOR585 #DFIR, wife, mama, author, researcher, and simply over-scheduled!

Heather Mahalik Barnhart

@HeatherMahalik
Director @limacharlieio | Founder @recon_infosec | SANS DFIR Instructor | IANS Faculty | https://t.co/yUXCSu2Yso | ⬡ ❤ @shortxstack

Eric Capuano - Bsky: @eric.zip

@eric_capuano
Founder @Intel_Ops_io Threat Intelligence, Adversary Infrastructure Hunting, Curated TI Feed (Coming Soon) https://t.co/vixTz8xKuF https://t.co/VQWaze6gaF

Michael Koczwara

@MichalKoczwara

lukasLUKCZ

@lukasLUKCZ

Andy Mark

@AndyMark331007
مهتم بدراسات الشرق الأوسط، أعمل على توثيق جرائم حزب الله وحماس وتحليل الفكر المتطرف بأسلوب علمي، مع تركيز على تعزيز الوعي بمخاطر هذه الجماعات

שחור ואור 💡-Dark and light

@ShadowsLumina
#SEND_ME_MALWARE DM for collaboration

Mirac Dasmine

@mirac_dasmine
#YOUNG #ACTIVE #STAND AGAINST CORRUPTION #VOICE OF POOR NEEDY PEOPLE.. ✌🏻#BORN FOR MY COUNTRY #DIE FOR MY COUNTRY.. 🇮🇳

Rishabh

@RishabhIndia18
💪💪💪💪💪💪💪💪

Sergio O Lafu

@lafu_o
Worldwide #OSINT Tools map Be a #hacker, not a criminal🏴‍☠️

Donald

@box_yes_osint

robbkrasnow

@robbkrasnow
Ciberanalista | Maestro del empane | #F1 #BlueTeam | Windows/OSX/Linux

Ordenador amistoso 🖥️🍦🧅

@ComputerViejo
Every day I write about #osint (Open Source Intelligence) tools and techniques. Also little bit about forensics and cybersecurity in general. Work in @netlas_io

Cyber Detective💙💛

@cyb_detective

Slavyan Nikolov

@Toxypro

DForens

@d_forens

Theythi

@TheythiLLn2
Although the past cannot be changed, the future can.

Krystal

@mpasoat6205
DFIR Nerd

RedShirtOne

@redshirtsecure1

Tom Goez

@tom_goez
Mum 💜 | Waiting Out The Wave | Entitled To Overcome | Computer Security...

Billie

@BillieGoatin

Gregory Fuentes

@GregoryFu45551

Tuelet

@TueletLQV88

Shuete

@ShuetesvR9zK

Andy Morales

@Andy2002a
I'm available for hookup.... and affordable price 😋😋😋😋

Jessika Jessika

@JessikaJ73376
New 2 Tucson well kinda

danieling235

@danieling235

ibrahem Youssef

@ibrahemYousse18
git gud at it

Shreethaar Arunagirinathan

@0x251e

nerdromancer

@nerdr0manc3r
OSCP | OSEP | CEH | CRTE | CRTP | CARTP | CISSP | CISM | AZ-500 | SC-100 | SC-200 Passionate cyber enthusiasts lost in space

Vidad

@DaddaDaud
💻

Ruairí Corrigan

@RuairiCorrigan
There is a pricass in every girl.

ke ke xi li

@kekexili779
Bio

Name cannot be blank

@threatsavant
Twists and turns! Those sleepless nights are all accompanied by crime novels. Whether warm or shocking

Barry

@Leah767zvcz

Ahmed Esmail

@Alhalal555
Crypto currency 💴🏎📉

Phil

@Uni_oftradeship

aikau

@aikauakia
Scio me nihil scire. #ThreatIntel/#CTI now; was #IncidentResponse/#IR. Humanities (AB Φ, Comm) grad, ex-seminarian (λόγος). Impostor Syndrome ∞. Opinions∴mine.

ac@t:~#

@iAngelus

Smeighn

@SmeighnIfZPFc
❌ 𝐍𝐎 𝐃𝐌𝐒 , ℛℯ𝓈𝓉𝒶𝓇𝓉 ℛℯ𝒻ℴ𝒸𝓊𝓈 ℛℯ 𝓇ℯ𝓅ℯ𝒶𝓉 𝒶𝓈 𝓂𝒶𝓃𝓎 𝓉𝒾𝓂ℯ𝓈 𝒶𝓈 𝓎ℴ𝓊 𝓃ℯℯ𝒹， 𝒿𝓊𝐬𝓉 𝒹ℴ𝓃𝓉 𝓆𝓊𝒾𝓉 #𝐌𝐀𝐆𝐀𝐓𝐑𝐔𝐌𝐏𝟐𝟎𝟐𝟒🇱🇷

No Yin No yang

@zila_4p
ی نویز تو کهکشون رادیو زمین! 🌍

danial

@dny_all
Wannabe cyber security researcher :)

0xCwrw

@0xCwrw
-Meme of the Bruno Mars- Inspired by #BrunoMars, we dedicate the BABY $BROMARS token to our community fans around the world.

BROMARS🚀✨️

@BroMarsGo
Information Security Analyst

Felipe

@Ph3lp5_0x
In real life, every great cause begins with faith and takes its first step.

Katherine

@MariaBenne27941
Cyber.Crime.Research.Share = udates on cybercrime/security, digital investigation/ forensics/evidence, digital surveillance/privacy

CCRS

@CCResearchShare
DFIR

Pyae Heinn Kyaw

@pyaeheinnkyaw

SHUBHAM GALHOTRA

@SHUBHAMGALHOTR2

Abhilash Katragadda

@AbhilashKatrag1

T

@b88qtj9yp2
Security Systems Senior Specialist، Cyber Intelligence Centres.

Ibrahim Maoodah ابراهيم بن معوضة

@IbrahimMaoodhah
Penetration Testing & Reverse Engineering. . . Phd, Msc (RHL), IEEE snr, CRTO, PNPT, CRTP

Call_gate

@_call_gate

Ramprasath Balakumaran

@RamprasathBala4
Head of Research @nextronsystems #DFIR #YARA #Sigma | detection engineer | creator of @thor_scanner, Aurora, Sigma, LOKI, YARA-Forge | always busy ⌚️🐇

Florian Roth ⚡️

@cyb3rops
DFIR and Adversary Simulation | DFIR @ ProtonMail

Ali Hadi | B!n@ry

@binaryz0ne
The world's leading Digital Forensics and Incident Response provider. This feed updates you on latest DFIR news, events, and training.

SANS DFIR

@sansforensics
#DFIR & #BlueTeam | IR & Threat Detection | #OSINT enthusiast | waiting for HL3 | AWS CIRT - my views are my own

4n6lady

@4n6lady
founder & hacker @xintraorg ⚔️🖤 UwU

✞ inversecos

@inversecos
Breaker of software | VP R&D @hunterstrategy | CTI/DFIR | @ians_security faculty | Bookings: jake at malwarejake dot com | GSE #150 | He/him

Jake Williams

@MalwareJake
Ed.D. | Founder @networkdefense @RuralTechFund | Former @Mandiant, DoD | Author: Intrusion Detection Honeypots, Practical Packet Analysis, Applied NSM

Chris Sanders 🔎 🧠

@chrissanders88
Head of Investigations @InfoGuardAG https://t.co/A5lnFAu7eX

Stephan Berger

@malmoeb
Founder @Binary_Defense @TrustedSec Co-Owner https://t.co/HQC75WhdJh. @WeHackHealth Podcast. Fam First/Hacker/CSO/USMC/Intel/Fitness. Motto: Make world a better place

Dave Kennedy

@HackingDave
My real name is: David Smith. I drink coffee.

mRr3b00t

@UK_Daniel_Card
Self-Claimed Security “Researcher” | Ex-MSFT | @XintraOrg lab contributor | Former Microsoft MVP | Interested in Security, Debugging, and Troubleshooting.

DebugPrivilege

@DebugPrivilege
Consultant for InfoSec Innovations | @SANSInstitute Principal Instructor | @IANS_Security Faculty | I like information security. How about you?

Mick Douglas 🇺🇦🌻

@bettersafetynet
Real Intrusions by Real Attackers, the Truth Behind the Intrusion. Services: https://t.co/XW613EKt2w

The DFIR Report

@TheDFIRReport
Hacker/CTO @TrustedSec | Former Optiv/SecureWorks/Accuvant Labs/Redspin | Race cars

Justin Elze

@HackingLZ
Digital forensics and incident response. Ex-AFOSI, Mandiant, and CrowdStrike. SANS Institute Fellow and co-author of #FOR500 and #FOR508 courses.

Chad Tilbury

@chadtilbury
Sr. Threat Researcher @Microsoft, Malware Warlock, ThreatIntel, Python🧡 - Former @McAfee_labs, Goon @Defcon, Creator #UnprotectProject - Tweets = my own

Thomas Roccia 🤘

@fr0gger_
@TheDFIRReport | Tweeting and following mostly #ThreatIntel,#malware,#IR & #Threat_Hunting. Opinions are mine only! 🇬🇷🇨🇦

Kostas

@Kostastsale
Director of Intel at @redcanary. SANS Certified Instructor for FOR578: CTI. Senior Fellow at @CyberStatecraft. She/her. Mastodon: @likethecoins@infosec.exchange

Katie Nickels

@likethecoins
#DFIR, USMC vet, she/her

Jessica Hyde

@B1N2H3X
Head of Research and Discovery @Google Threat Intelligence. Leading multidisciplinary teams to defeat adversaries. Posts are attributable to me—not my employer.

Andrew Thompson

@ImposeCost
Get notified when interesting APT/FIN indicators of compromise appear on https://t.co/Sb3PFMresB. A threat intelligence project by @craiu

Is Now on VT!

@Now_on_VT
Senior Analyst - Google Threat Intelligence Group Opinions attributable to me

Austin Larsen

@AustinLarsen_
Nextron Systems Threat Research Team

Nextron Research ⚡️

@nextronresearch
Security Ops @HuntressLabs | GCFA, GCFE, GCIA, GCIH | Python Security Researcher

Rem

@sudo_Rem
Director of TLP R3D Intelligence | Inventor of Endpoint Threat Intelligence Agent (GB2314601.2) | Curated Intel Member | Pioneering the Future of CTI

Chris Duggan

@TLP_R3D
Tech Lead, security intel @elastic @elasticseclabs via @endgameinc | security research | detection engineering | heavy weightlifter | always like my own tweets

Justin Ibarra

@br0k3ns0und
Cyber Threats: It Ends with Us! ⚔️ Watch 📺 https://t.co/zofSxbxVDA Follow 🥷 https://t.co/kGRIGi9ayg Read 📓 https://t.co/Q4AbyyDfjR

Magic Sword

@magicswordio
GCFA | PGP 2F93D5AF

Jean-Marc Albert

@WikiJM
Cybersecurity Dungeon Master | SANS Instructor | 15 GIAC Certifications, CISSP

Rich Greene

@Bl4ck_4rch
Work by day, play by night. Your perception is not my reality. My posts do not represent my employer(s).

IAM!ERICA

@EricaZelic
The official Threat Research and Operations arm of @lumentechco. Providing #ThreatIntelligence to help protect our customers and keep the internet clean.

Black Lotus Labs

@BlackLotusLabs
Threat Detection & Response. Interested in cyber security, tech and politics. Views are my own, unless retweeted.

Wietze

@Wietze
💼 Principal Security Engineer 💬 I tweet about Cloud Security and technical leadership ✍🏻 Subscribe to https://t.co/MR69KiF8RH 📚 https://t.co/TrQKzxfnYg is out now!

Marco Lancini

@lancinimarco
The best way to stay on top of the cloud security landscape without having to be overwhelmed by all the noise | Curated by @lancinimarco

CloudSecList

@CloudSecList
CTO #Cybersecurity at @Computacenter France | owner of https://t.co/mcCsqeRJaO | | Lecturer at @Ecole2600 🏴‍☠️ | #CiscoChampion | #VeeamVanguard

Julien | @jmousqueton.bsky.social

@JMousqueton
The Insider Threat Matrix™ is an open framework for computer-enabled insider threat investigations.

Insider Threat Matrix™

@ITMFramework
Malware researcher and Windows Internals lover🔬; X-Phile, Gillovny, Lostie

Artem I. Baranov

@artem_i_baranov
Product Manager @microsoft | Tweets my own Built → https://t.co/ujxKqxXjf2 • https://t.co/QbUp63ffXf • idPowerToys • Graph X-Ray • https://t.co/tSWrIw8Ajh Weekly newsletter → https://t.co/tPzAEl0Zuq

Merill Fernando

@merill
DE/TH @GoogleCloud @Mandiant Managed Defense | Google in the streets, Mandiant in the tweets | Thruntito ergo sum

Ryan Tomcik

@heferyzan
President & CEO CrowdStrike, Former CEO of Foundstone, Former CTO of McAfee, and author of Hacking Exposed

George Kurtz

@George_Kurtz
Offensive Security Consultant @RedSiege | Actual Vagabond | Ice Cream Lover | Semi-Pro Kickboxer | Cold Weather Avoider | Taller On The Internet

JMFD

@hackandbackpack
I design and build #SIEM content for a living. Editor at https://t.co/WIrKw7X1p5 #DetectionEngineering & Research, #ML #Stats x-Splunk

Alex Teixeira

@ateixei
Focus on Linux/Kubernetes Attack/Detection/Forensics/Incident Response/Threat Hunting. Active Defense. PurpleLabs Cyber Range. Learning hard every single day.

[email protected] / PurpleLabs / EDRmetry

@cr0nym
RooCon, a free one-day conference on cyber threat intelligence & attribution, is happening in Sydney on Nov 5th 2024.

RooCon

@RooCon_AU

claudiasquire

@c0rdial__
Cyber security and threat intelligence company

ClearSky Cyber Security

@ClearskySec
Symantec's researchers bring you the latest threat intelligence from the IT security world.

Threat Intelligence

@threatintel
Cyber guy. These are my personal tweets.

Rob Joyce

@RGB_Lights
Hudson Rock is a cybercrime intelligence company that helps protect against ransomware attacks, corporate espionage and network over-takes.

Hudson Rock

@RockHudsonRock
Coordinating 🇦🇺 cyber security policy, incident response capability & incident preparedness.

National Cyber Security Coordinator

@AUCyberSecCoord
Cybercrime & Hacktivism @RecordedFuture | @Georgetown, @AmericanU Alum. | @CuratedIntel Member | #ChiefsKingdom | Opinions are my own.

Alexander Leslie

@aejleslie
A branch of the @eSentire Threat Response Unit (TRU)

eSentire Threat Intel

@esthreat
qui fa lo que pot no esta obligat a mes | donate 💸 to g0njxa.eth 💖 | Bad student, enthusiast, defo not an expert DMs are open, feel free to reach! 😼☂️🟣

Who said what

@g0njxa
Microsoft Threat Intelligence Centre, deaf, BSL

丂卄ㄖᗪ卂几 - 👋 crack fingers

@therealshodan
Former attorney, current IT & infosec consultant in the 'Burgh. Happy to talk about password spraying one minute and constitutional law the next. Son of #wvu.

Brian in Pittsburgh

@arekfurt
VjFkMGFrNVhUWGRsU0VKU1lXczFiMVV3Wkhwa1p6MDk=

affje0x65 | Patrick

@affje0x65

IrishDeath

@IrishD34TH
Adversarial Simulation at IBM, tweets are mine etc.

Josh

@passthehashbrwn
Cybersecurity expert | CEO of @bluecapesec | Helping you master Digital Forensics & Incident Response (DFIR) | Creator of CyberLabHero | CISSP, GCFA, GCIH

Markus Schober

@mascho
I'm from the Internet and I'm here to help

adam_cyber

@Adam_Cyber
An automated malware unpacking service from OpenAnalysis Inc.

UNPACME

@unpacme
Threat Hunting | APT Tracking | Malware Analysis | Darkweb Monitoring "Unity is Strength"

Cyber Team

@Cyberteam008
Southern Oregon Based Security/InfoSec and Saxophone Maven. Cloud Security Instructor for @Antisy_Training. #datadog

Andrew Krug | re:Invent

@andrewkrug
🇩🇰 living in 🇩🇪 Senior IR dude doing stuff at @InfoGuardAG https://t.co/odU86jtnLL… @hackerkartellet.bsky.social

Asger.jpg

@hackerkartellet
https://t.co/aojFWxKETZ is a service that provides threat intelligence data about observed network scanning and cyber attacks.

Hunt.io

@Huntio
SOC Analyst @HuntressLabs

Josh

@xorJosh
Slayer of ransomware, lover of cats and polar bears. Not to be taken too seriously. All posts are my own.

Fabian Wosar

@fwosar

Willem Mouton

@_w_m__
Security researcher dedicated to pissing off the Gootloader Threat Actor. Tox Chat: 5E7FB4CA0D59F48504AEC72907D64D71D22A00C023E584276F91DB26C924ED64C6D7F19348D2

Gootloader

@Gootloader
Adversary Infrastructure Hunting & Training Curated Threat Intelligence Feed (Coming Soon) https://t.co/N9OKrTrvV0 https://t.co/3YFZfEbgpI

Intel-Ops

@Intel_Ops_io
United States Trends
Who to follow

Something went wrong.


Something went wrong.