David Folsom
@moslof.bsky.social
Family man and Army Veteran. Long time IT tinkerer with a passion for solving problems and teaching others.
#HBV #HoneyBadgerVanguard #RedTeam #DarkKittens
#HBV #HoneyBadgerVanguard #RedTeam #DarkKittens
Built this into HBV’s HoneyTrails — toggleable persona drops that mimic style and intent without verbatim TTP copying.
Measuring believability is the hard part: what one metric do you trust when judging a decoy?
@raphaelmudge.bsky.social
#HBV #HoneyTrails
Measuring believability is the hard part: what one metric do you trust when judging a decoy?
@raphaelmudge.bsky.social
#HBV #HoneyTrails
September 27, 2025 at 7:14 PM
Built this into HBV’s HoneyTrails — toggleable persona drops that mimic style and intent without verbatim TTP copying.
Measuring believability is the hard part: what one metric do you trust when judging a decoy?
@raphaelmudge.bsky.social
#HBV #HoneyTrails
Measuring believability is the hard part: what one metric do you trust when judging a decoy?
@raphaelmudge.bsky.social
#HBV #HoneyTrails
Model:
1.Plant believable artifacts — timestamps, user-behavior, tool-usage.
2.Make trails plausible to humans and timelines (logs, pivot maps).
3.Keep a separate, ultra-low-noise channel for real access & exfiltration.
Result:
Defenders fixate on the decoy; you buy operational tempo.
#Tradecraft
1.Plant believable artifacts — timestamps, user-behavior, tool-usage.
2.Make trails plausible to humans and timelines (logs, pivot maps).
3.Keep a separate, ultra-low-noise channel for real access & exfiltration.
Result:
Defenders fixate on the decoy; you buy operational tempo.
#Tradecraft
September 27, 2025 at 7:06 PM
Model:
1.Plant believable artifacts — timestamps, user-behavior, tool-usage.
2.Make trails plausible to humans and timelines (logs, pivot maps).
3.Keep a separate, ultra-low-noise channel for real access & exfiltration.
Result:
Defenders fixate on the decoy; you buy operational tempo.
#Tradecraft
1.Plant believable artifacts — timestamps, user-behavior, tool-usage.
2.Make trails plausible to humans and timelines (logs, pivot maps).
3.Keep a separate, ultra-low-noise channel for real access & exfiltration.
Result:
Defenders fixate on the decoy; you buy operational tempo.
#Tradecraft
On “stealth”: it isn’t just hiding — it’s narrative control. If defenders believe the story you plant, they’ll spend cycles chasing it. Curious how the community balances plausible noise vs operational fidelity. #RedTeam #AdversaryEmulation #HBV
September 27, 2025 at 6:58 PM
On “stealth”: it isn’t just hiding — it’s narrative control. If defenders believe the story you plant, they’ll spend cycles chasing it. Curious how the community balances plausible noise vs operational fidelity. #RedTeam #AdversaryEmulation #HBV
Anyone else have an alter-ego?
September 24, 2025 at 11:06 PM
Anyone else have an alter-ego?