Or how many incidents have occurred when in fact there were no detection rules activated to detect any !

number of vulnerabilities patched when in fact the scanner wasn’t functioning.. Properly so the number is not accurate 🫢 and list goes on of issues

I do consider myself highly qualified for the job of cybersecurity operations manager but i always get hit by audits because the way I look to it is that i see operational issues and I fix them but to the audits they want lets say

Totally agree

And just when we think we’re ahead,

Suddenly, all our efforts feel like they’re unseen, and we’re back to square one.

Every time I feel like I’m making progress whether by implementing a new solution or improving a process I get hit by regulatory checks that expose fundamental gaps.

You’re welcome

Yeah I did install it on my pc its easy to setup 👍🏼

11. CDK
- Escapes Docker via `mount-cgroup` and deploys crypto miners.

12. LockBit 3.0 Builder
- Custom `LB3.exe` drops ransom notes linking to `t.me/You_Dun`.

13. Telegram & Redis
- Telegram channel `You_Dun` for victim shaming.

→ [The DFIR Report](thedfirreport.com)