GW2Dave
@gw2dave.bsky.social
Cavs, Browns, GW2, Warhammer, IASIP and InfoSec/NetSec sometimes.
“I need an Advil, a roll of duct tape, a pack of peanuts, and four beers.” - Frank Reynolds
“I need an Advil, a roll of duct tape, a pack of peanuts, and four beers.” - Frank Reynolds
Reposted by GW2Dave
Reposted by GW2Dave
Asian grocery stores are a lifeline to the communities they serve. But store owners say the prospect of sweeping tariffs are threatening their ability to stock up on goods and keep prices affordable.
Asian grocery stores, a lifeline for immigrants, brace for steep new tariffs
Asian grocery stores are a lifeline to the communities they serve. But store owners say the prospect of sweeping tariffs are threatening their ability to stock up on goods and keep prices affordable.
www.npr.org
April 8, 2025 at 11:47 AM
Asian grocery stores are a lifeline to the communities they serve. But store owners say the prospect of sweeping tariffs are threatening their ability to stock up on goods and keep prices affordable.
Reposted by GW2Dave
For those of you who want to learn and run #PacketCaptures, make sure you check out tcpdump101.com to help build the command syntax for a variety of platforms. It's 100% client-side so feel free to download it and run it offline without needing a server. #HappyPacketHunting
tcpdump101.com - Build Packet Captures Online
Build PCaps for: tcpdump, Fortigate, Check Point 'fw monitor' and Cisco ASA.
tcpdump101.com
January 28, 2025 at 4:09 PM
For those of you who want to learn and run #PacketCaptures, make sure you check out tcpdump101.com to help build the command syntax for a variety of platforms. It's 100% client-side so feel free to download it and run it offline without needing a server. #HappyPacketHunting
Reposted by GW2Dave
==Training Lesson==
INVESTIGATION NARRATIVE: SSH Kill la Killed 🧵
My job is to solve the Weird Problems as the Final escalation tier. I do this with generalist knowledge and practical experience.
New InfoSec/IT entrants often ask what this looks like in practice. Follow below.
INVESTIGATION NARRATIVE: SSH Kill la Killed 🧵
My job is to solve the Weird Problems as the Final escalation tier. I do this with generalist knowledge and practical experience.
New InfoSec/IT entrants often ask what this looks like in practice. Follow below.
January 11, 2025 at 7:12 PM
==Training Lesson==
INVESTIGATION NARRATIVE: SSH Kill la Killed 🧵
My job is to solve the Weird Problems as the Final escalation tier. I do this with generalist knowledge and practical experience.
New InfoSec/IT entrants often ask what this looks like in practice. Follow below.
INVESTIGATION NARRATIVE: SSH Kill la Killed 🧵
My job is to solve the Weird Problems as the Final escalation tier. I do this with generalist knowledge and practical experience.
New InfoSec/IT entrants often ask what this looks like in practice. Follow below.
Reposted by GW2Dave
True luxury is found in the simplest moments.
December 18, 2024 at 8:59 PM
True luxury is found in the simplest moments.
Reposted by GW2Dave
FBI Warns iPhone, Android Users of Text Risks — The FBI issues security alerts for text communications on smartphones amid potential cyber threats.
https://www.al.com/news/2024/12/fbi-warning-alert-for-iphone-android-text-users.html
https://www.al.com/news/2024/12/fbi-warning-alert-for-iphone-android-text-users.html
December 6, 2024 at 6:05 AM
FBI Warns iPhone, Android Users of Text Risks — The FBI issues security alerts for text communications on smartphones amid potential cyber threats.
https://www.al.com/news/2024/12/fbi-warning-alert-for-iphone-android-text-users.html
https://www.al.com/news/2024/12/fbi-warning-alert-for-iphone-android-text-users.html
Reposted by GW2Dave
it's zine sale time!
from now until the end of the day on Friday, all my PDF zines are 50% off with the discount code WIZARDPDF
print zines are 30% off with code WIZARDPRINT
wizardzines.com
from now until the end of the day on Friday, all my PDF zines are 50% off with the discount code WIZARDPDF
print zines are 30% off with code WIZARDPRINT
wizardzines.com
November 29, 2024 at 1:51 AM
it's zine sale time!
from now until the end of the day on Friday, all my PDF zines are 50% off with the discount code WIZARDPDF
print zines are 30% off with code WIZARDPRINT
wizardzines.com
from now until the end of the day on Friday, all my PDF zines are 50% off with the discount code WIZARDPDF
print zines are 30% off with code WIZARDPRINT
wizardzines.com
Reposted by GW2Dave
Investigation Scenario 🔎
You received the depicted Suricata alert related to Impacket usage.
What do you look for to investigate whether an incident occurred and its extent?
#InvestigationPath #DFIR #SOC
You received the depicted Suricata alert related to Impacket usage.
What do you look for to investigate whether an incident occurred and its extent?
#InvestigationPath #DFIR #SOC
![alert tcp any any -> any [139,445] (msg:"ET CURRENT_EVENTS [Fireeye] M.HackTool.SMB.Impacket-Obfuscation.[Service Names] M9"; content:"|ff 53 4d 42|"; offset:4; depth:4; content:"|57 00 69 00 6e 00 64 00 6f 00 77 00 73 00 20 00 20 00 55 00 70 00 64 00 61 00 74 00 65|"; distance:0; fast_pattern; reference:url,github.com/fireeye/red_team_tool_countermeasures; classtype:trojan-activity; sid:2031308; rev:2; metadata:affected_product Windows_XP_Vista_7_8_10_Server_32_64_Bit, attack_target Client_Endpoint, created_at 2020_12_08, deployment Perimeter, signature_severity Major, updated_at 2020_12_08;)](https://cdn.bsky.app/img/feed_thumbnail/plain/did:plc:vofpn6dsqirtoehz64g4pac4/bafkreicwqg3qzrryi3qrqzkusjqy5weapxs7c2wc3imusdwx2xdr5ggt5m@jpeg)
November 26, 2024 at 3:00 PM
Investigation Scenario 🔎
You received the depicted Suricata alert related to Impacket usage.
What do you look for to investigate whether an incident occurred and its extent?
#InvestigationPath #DFIR #SOC
You received the depicted Suricata alert related to Impacket usage.
What do you look for to investigate whether an incident occurred and its extent?
#InvestigationPath #DFIR #SOC
Reposted by GW2Dave
Did you know if you do the command shutdown -t 0 -sg, it will shutdown your PC, but also preserve the apps you'd had open before shutting down, so when you boot your PC back up it will open them again? 👀
November 20, 2024 at 3:07 PM
Did you know if you do the command shutdown -t 0 -sg, it will shutdown your PC, but also preserve the apps you'd had open before shutting down, so when you boot your PC back up it will open them again? 👀
Reposted by GW2Dave
The postgame It’s Always Gameday in Cleveland pod is out where we tried to talk as little about that debacle as possible
Listen: podcasts.apple.com/us/podcast/i...
Watch: youtu.be/e1o0q6zQcDA
Listen: podcasts.apple.com/us/podcast/i...
Watch: youtu.be/e1o0q6zQcDA
November 18, 2024 at 2:11 AM
The postgame It’s Always Gameday in Cleveland pod is out where we tried to talk as little about that debacle as possible
Listen: podcasts.apple.com/us/podcast/i...
Watch: youtu.be/e1o0q6zQcDA
Listen: podcasts.apple.com/us/podcast/i...
Watch: youtu.be/e1o0q6zQcDA
Reposted by GW2Dave
If you are in cybersecurity repost this so we can all follow each other 😬
November 15, 2024 at 4:53 PM
If you are in cybersecurity repost this so we can all follow each other 😬
Reposted by GW2Dave
Amazon and PBS have formed a partnership that will see around 150 local PBS member stations available for free through the Prime Video app, as well as feeds of PBS Kids and two new PBS FAST channels, PBS Drama and PBS Documentaries. A Reading Rainbow pop-up channel is coming soon.
Amazon inks deal to stream local PBS member stations through Prime Video
The public broadcaster is also launching two new FAST channels exclusively through Prime Video, and will debut pop-up streams over time.
thedesk.net
November 15, 2024 at 5:01 PM
Amazon and PBS have formed a partnership that will see around 150 local PBS member stations available for free through the Prime Video app, as well as feeds of PBS Kids and two new PBS FAST channels, PBS Drama and PBS Documentaries. A Reading Rainbow pop-up channel is coming soon.
Reposted by GW2Dave
Bluesky is built to make social more like the Web again, so we will never suppress links. Link to your writing, your art, your personal site — this is the social internet, designed from the ground up to be open and interoperable.
Hard to describe as a journalist how grateful I am to have a text-based app that does not suppress hyperlinks. I don’t know if people realize exactly how hostile the corporate internet has gotten toward news.
November 12, 2024 at 5:16 AM
Bluesky is built to make social more like the Web again, so we will never suppress links. Link to your writing, your art, your personal site — this is the social internet, designed from the ground up to be open and interoperable.
