Britton
LightNews LightNews
banner
brittonhayes.dev
Britton
@brittonhayes.dev
75 followers 140 following 32 posts
security engineer @notion.com
building things at https://github.com/brittonhayes
writing notes at https://brittonhayes.dev
Posts Replies Media Videos
brittonhayes.dev
I wonder how much of this I could build in Notion to make a little threat intel workspace

related campaigns, indicators, observables, tags all just become properties and then could use webhooks to send json off to other tools
a cybersecurity threat intelligence platform interface (YETI) displaying information about a threat actor named "Scattered Spider." Here's the key information shown: This is a profile page for a cybercriminal group called "Scattered Spider" that has been active since at least 2022. The group targets customer relationship management and business process outsourcing (BPO) firms, as well as telecommunications and technology companies. The threat actor has leveraged social engineering techniques and attempted to bypass endpoint security tools. The profile shows several external references including "mitre-attack" and multiple CrowdStrike reports from 2022-2023. The group's tactics include: - Exploitation for privilege escalation - Code signing - Multi-factor authentication request generation - Phishing for information - External remote services The profile was created on July 5, 2023, and the group appears to have an alias of "Roasted Oktapus." The interface includes navigation options at the top for search, observables, entities, indicators, automation, and admin functions, with editing capabilities for this threat actor profile.​​​​​​​​​​​​​​​​
March 26, 2025 at 2:57 PM
brittonhayes.dev
@netlify.com please please please can you give the PM team time and resources to make Decap CMS mobile responsive. I know you can do it.

github.com/decaporg/dec...
March 8, 2025 at 6:58 PM
brittonhayes.dev
February 28, 2025 at 9:42 AM
brittonhayes.dev
Nifty Notion formula to catch pages missing important properties like runbooks or MITRE tactics
Screenshot of a Notion database formula property that checks if the MITRE Tactic or Runbook are empty and lists those out as required fields.
February 27, 2025 at 12:46 AM
brittonhayes.dev
Tried the new @notion.com build with AI feature and made a space for the yarn stash. Got to skip all the setup. Less clicking, more untangling yarn and taking cute photos 🧶
February 14, 2025 at 3:23 AM
brittonhayes.dev
Here's some regex to stop people sending masked links that direct people to scam sites on your discord server. I've been seein it all over the place spike up with the holidays. Give the gift of regex to a discord admin in your life.

regex101.com/r/SnR2SH/1
Screenshot of a blocked Discord message. The user 'isendscamlinks' attempted to send a message containing 'steamcommunity.com/gift-card/35a76-ba23' at 11:58 AM. The message is marked as blocked with red error text stating 'This can't be posted because it contains content blocked by this server. This may also be viewed by server owners.' Below that is gray text reading 'Only you can see this' with clickable links for 'Dismiss message' and 'Learn more'. Screenshot of a Discord moderation rule configuration interface. The rule is titled 'Block Custom Words' and contains several sections. The main input field prompts 'Enter 1 or more words or phrases' with a 0/1000 character counter. Below this is a helper text explaining to separate words with commas or new lines and use asterisks for partial matching. There's an expandable section for 'Use regex patterns for advanced matching (optional)' which shows a regex pattern '\[.+?\]\(.+?\)' with a 1/10 counter. The interface notes that case-insensitive and global flags are applied by default. At the bottom is a collapsed section for 'Allow words and phrases (optional)'. The rule appears to be enabled as indicated by a green toggle switch in the top right.
December 25, 2024 at 8:19 PM
brittonhayes.dev
My new mini feature came out for Vector! You can now re-use VRL and break up big transforms in your observability pipelines as of 0.43.0! No more mega .vrl files yayyy!
vector.dev/releases/0.4...
A feature description of the new files property for a vector remap language remap transform. The files property enables code reuse and organization, improving the maintainability of VRL code.
December 5, 2024 at 5:00 PM