Greg Lesnewich
@greg-l.bsky.social
oh great, now I’m on bluesky
What if he got extradited from a neighboring nation? Would same punishment apply?
November 9, 2025 at 11:46 PM
What if he got extradited from a neighboring nation? Would same punishment apply?
but DPRK ops are so nascent, would there be enough intelligence gain to put Hyok on like house arrest (with no internet) for cooperation? I don’t think you could safely flip him in place because any scent of disloyalty would get met with the business end of a Hwasong
November 9, 2025 at 8:55 PM
but DPRK ops are so nascent, would there be enough intelligence gain to put Hyok on like house arrest (with no internet) for cooperation? I don’t think you could safely flip him in place because any scent of disloyalty would get met with the business end of a Hwasong
I think you mean "A little TA453, a little TA450, a lot TA455"
November 5, 2025 at 5:04 PM
I think you mean "A little TA453, a little TA450, a lot TA455"
These posts convinced me to pull the trigger on this bad boy:
November 2, 2025 at 11:21 PM
These posts convinced me to pull the trigger on this bad boy:
If you pay enough, I hear they’ll give you a tour of an nuclear enrichment site, maybe even a ride on an ICBM
October 23, 2025 at 11:16 PM
If you pay enough, I hear they’ll give you a tour of an nuclear enrichment site, maybe even a ride on an ICBM
Reposted by Greg Lesnewich
The tool has been released in the Proofpoint Emerging Threats public #GitHub for other defenders to leverage.
Learn more about it here: brnw.ch/21wWSH0
#PDF #threatdetection #cyberthreat
Learn more about it here: brnw.ch/21wWSH0
#PDF #threatdetection #cyberthreat
Proofpoint releases innovative detections for threat hunting: PDF Object Hashing | Proofpoint US
Key findings Proofpoint created a new open-source tool for creating threat detection rules based on unique characteristics in PDFs called “PDF Object Hashing”. This technique can
brnw.ch
October 23, 2025 at 6:05 PM
The tool has been released in the Proofpoint Emerging Threats public #GitHub for other defenders to leverage.
Learn more about it here: brnw.ch/21wWSH0
#PDF #threatdetection #cyberthreat
Learn more about it here: brnw.ch/21wWSH0
#PDF #threatdetection #cyberthreat
Reposted by Greg Lesnewich
What Athens was to Ancient Greece, NJ is to America
October 20, 2025 at 12:38 AM
What Athens was to Ancient Greece, NJ is to America
same here
Tho I was given mercy due to the box mysteriously already having been opened and raided prior to my discovery of its location
Tho I was given mercy due to the box mysteriously already having been opened and raided prior to my discovery of its location
October 17, 2025 at 5:46 AM
same here
Tho I was given mercy due to the box mysteriously already having been opened and raided prior to my discovery of its location
Tho I was given mercy due to the box mysteriously already having been opened and raided prior to my discovery of its location
That’s some wisdom on a Thursday night brother man
October 16, 2025 at 10:33 PM
That’s some wisdom on a Thursday night brother man
I’m envious of folks that can take social media breaks, so i am happy and envious of them
October 16, 2025 at 10:27 PM
I’m envious of folks that can take social media breaks, so i am happy and envious of them
Reposted by Greg Lesnewich
In C YARA the grammar requires the stuff after the "of" to be a string set (string identifiers or string identifiers with wildcards). YARA-X just takes a tuple of boolean expressions.
This is incredibly useful. You can now say things like:
2 of ($a, pe.exports("foo"), pe.imphash() == "pants")
This is incredibly useful. You can now say things like:
2 of ($a, pe.exports("foo"), pe.imphash() == "pants")
October 16, 2025 at 5:48 PM
In C YARA the grammar requires the stuff after the "of" to be a string set (string identifiers or string identifiers with wildcards). YARA-X just takes a tuple of boolean expressions.
This is incredibly useful. You can now say things like:
2 of ($a, pe.exports("foo"), pe.imphash() == "pants")
This is incredibly useful. You can now say things like:
2 of ($a, pe.exports("foo"), pe.imphash() == "pants")