Ivan Burke
@cuchulainza.bsky.social
Drinker of coffee and maker of CTFs
🚨 IT’S TOMORROW! 🚨
Join us for an electrifying talk on WiFi Attacks by David & Jason. at our next 0xCoffee PTA meetup!
Reminder: 0xCoffee PTA is now a regular hangout-same time, same place, every second Tuesday of the month.
🗓 Next meetup:
📅 Tuesday, 8 April 2025
⏰ 7 PM – 9 PM
📍 Rock@88 Moreleta
Join us for an electrifying talk on WiFi Attacks by David & Jason. at our next 0xCoffee PTA meetup!
Reminder: 0xCoffee PTA is now a regular hangout-same time, same place, every second Tuesday of the month.
🗓 Next meetup:
📅 Tuesday, 8 April 2025
⏰ 7 PM – 9 PM
📍 Rock@88 Moreleta
April 7, 2025 at 9:55 AM
🚨 IT’S TOMORROW! 🚨
Join us for an electrifying talk on WiFi Attacks by David & Jason. at our next 0xCoffee PTA meetup!
Reminder: 0xCoffee PTA is now a regular hangout-same time, same place, every second Tuesday of the month.
🗓 Next meetup:
📅 Tuesday, 8 April 2025
⏰ 7 PM – 9 PM
📍 Rock@88 Moreleta
Join us for an electrifying talk on WiFi Attacks by David & Jason. at our next 0xCoffee PTA meetup!
Reminder: 0xCoffee PTA is now a regular hangout-same time, same place, every second Tuesday of the month.
🗓 Next meetup:
📅 Tuesday, 8 April 2025
⏰ 7 PM – 9 PM
📍 Rock@88 Moreleta
Reposted by Ivan Burke
Investigation Scenario 🔎
An employee was terminated for moonlighting with a competitor. While reviewing their Windows laptop, you find Slack is installed.
What do you look for to investigate their Slack use and if an incident occurred?
#InvestigationPath #DFIR #SOC
An employee was terminated for moonlighting with a competitor. While reviewing their Windows laptop, you find Slack is installed.
What do you look for to investigate their Slack use and if an incident occurred?
#InvestigationPath #DFIR #SOC
December 10, 2024 at 2:59 PM
Investigation Scenario 🔎
An employee was terminated for moonlighting with a competitor. While reviewing their Windows laptop, you find Slack is installed.
What do you look for to investigate their Slack use and if an incident occurred?
#InvestigationPath #DFIR #SOC
An employee was terminated for moonlighting with a competitor. While reviewing their Windows laptop, you find Slack is installed.
What do you look for to investigate their Slack use and if an incident occurred?
#InvestigationPath #DFIR #SOC
Reposted by Ivan Burke
Microsoft's first post on Bluesky and it's full of bliss
December 6, 2024 at 2:58 AM
Microsoft's first post on Bluesky and it's full of bliss
The SANReN CSC challenge was a massive success this year thanks to Dendrite Cyber security, @mathworks.bsky.social , @ocd-cert.bsky.social.
A special thanks to @pawnstarza.bsky.social from Elastic for joining in the fun and teaching the students how to pick locks.
A special thanks to @pawnstarza.bsky.social from Elastic for joining in the fun and teaching the students how to pick locks.
December 6, 2024 at 4:03 AM
The SANReN CSC challenge was a massive success this year thanks to Dendrite Cyber security, @mathworks.bsky.social , @ocd-cert.bsky.social.
A special thanks to @pawnstarza.bsky.social from Elastic for joining in the fun and teaching the students how to pick locks.
A special thanks to @pawnstarza.bsky.social from Elastic for joining in the fun and teaching the students how to pick locks.
Reposted by Ivan Burke
Investigation Scenario 🔎
You received the depicted Suricata alert related to Impacket usage.
What do you look for to investigate whether an incident occurred and its extent?
#InvestigationPath #DFIR #SOC
You received the depicted Suricata alert related to Impacket usage.
What do you look for to investigate whether an incident occurred and its extent?
#InvestigationPath #DFIR #SOC
![alert tcp any any -> any [139,445] (msg:"ET CURRENT_EVENTS [Fireeye] M.HackTool.SMB.Impacket-Obfuscation.[Service Names] M9"; content:"|ff 53 4d 42|"; offset:4; depth:4; content:"|57 00 69 00 6e 00 64 00 6f 00 77 00 73 00 20 00 20 00 55 00 70 00 64 00 61 00 74 00 65|"; distance:0; fast_pattern; reference:url,github.com/fireeye/red_team_tool_countermeasures; classtype:trojan-activity; sid:2031308; rev:2; metadata:affected_product Windows_XP_Vista_7_8_10_Server_32_64_Bit, attack_target Client_Endpoint, created_at 2020_12_08, deployment Perimeter, signature_severity Major, updated_at 2020_12_08;)](https://cdn.bsky.app/img/feed_thumbnail/plain/did:plc:vofpn6dsqirtoehz64g4pac4/bafkreicwqg3qzrryi3qrqzkusjqy5weapxs7c2wc3imusdwx2xdr5ggt5m@jpeg)
November 26, 2024 at 3:00 PM
Investigation Scenario 🔎
You received the depicted Suricata alert related to Impacket usage.
What do you look for to investigate whether an incident occurred and its extent?
#InvestigationPath #DFIR #SOC
You received the depicted Suricata alert related to Impacket usage.
What do you look for to investigate whether an incident occurred and its extent?
#InvestigationPath #DFIR #SOC
For all those that are attending BSides Cape Town
CHALLENGE DROP #1
Surprise! Our first, introductory CTF "Event Horizon" presented by TryHackMe, is live!
Stretch your fingers, sign up on the TryHackMe website & get cracking.
Join in the challenge here:
tryhackme.com/jr/beyondthe...
CHALLENGE DROP #1
Surprise! Our first, introductory CTF "Event Horizon" presented by TryHackMe, is live!
Stretch your fingers, sign up on the TryHackMe website & get cracking.
Join in the challenge here:
tryhackme.com/jr/beyondthe...
TryHackMe | Cyber Security Training
An online platform for learning and teaching cyber security, all through your browser.
tryhackme.com
November 22, 2024 at 12:01 PM
For all those that are attending BSides Cape Town
CHALLENGE DROP #1
Surprise! Our first, introductory CTF "Event Horizon" presented by TryHackMe, is live!
Stretch your fingers, sign up on the TryHackMe website & get cracking.
Join in the challenge here:
tryhackme.com/jr/beyondthe...
CHALLENGE DROP #1
Surprise! Our first, introductory CTF "Event Horizon" presented by TryHackMe, is live!
Stretch your fingers, sign up on the TryHackMe website & get cracking.
Join in the challenge here:
tryhackme.com/jr/beyondthe...
Reposted by Ivan Burke
Good morning world ☀️
November 22, 2024 at 8:55 AM
Good morning world ☀️
This sound is etched into my memory for the rest of time
November 22, 2024 at 11:52 AM
This sound is etched into my memory for the rest of time
It has been a crazy year thus far, but luckily, I had my faithful Spark next to me all the way.
He went through a rough patch where one of his back vertebrae was replaced this year. But he has made a full recovery and is able to walk and chase dassies again.
He went through a rough patch where one of his back vertebrae was replaced this year. But he has made a full recovery and is able to walk and chase dassies again.
November 21, 2024 at 5:12 AM
It has been a crazy year thus far, but luckily, I had my faithful Spark next to me all the way.
He went through a rough patch where one of his back vertebrae was replaced this year. But he has made a full recovery and is able to walk and chase dassies again.
He went through a rough patch where one of his back vertebrae was replaced this year. But he has made a full recovery and is able to walk and chase dassies again.
Reposted by Ivan Burke
Reposted by Ivan Burke
November 14, 2024 at 3:54 AM