#CHCon2025
I got caught up with other priorities but now I'm back for the final bit of #CHCon2025 #CHCon

And they had cotton candy, shaved ice, and popcorn!
October 31, 2025 at 2:30 AM
October 31, 2025 at 4:03 AM
October 29, 2025 at 7:53 PM
Its @kevinnz.bsky.social & Dan kicking things off - CHCon # 10
#CHCon2025
October 29, 2025 at 8:09 PM
It's all about the community.

Nothing happens without everyone here in the room.

#CHCon2025
October 29, 2025 at 8:38 PM
Toni got wrangled into the first CHCon, wrangled students into attending and training, and met a lot of awesome people
#CHCon2025
October 29, 2025 at 8:23 PM
Then in 2021 the burnout came.

Toni had everything she wanted but had spent too much time burning the candle at both ends.

But the con had lots of little clues (and lots of drinking)

#CHCon2025
October 29, 2025 at 8:35 PM
Now it's Bernie talking about finding her cyber stalker
#CHCon2025
October 29, 2025 at 10:05 PM
There are horrendous ideas getting traction.

They are advocating violence against scapegoat groups.

#CHCon2025 #CHCon
October 29, 2025 at 10:31 PM
Threat Modelling Hidden Harms:

We need a team of diverse perspectives, which is more difficult in the current climate.

#CHCon2025 #CHCon
October 29, 2025 at 10:39 PM
Wtf Christchurch, you can’t use contactless payments on public transport? Is this the 1900’s? #chcon2025
October 29, 2025 at 8:04 PM
Keep evidence and collect it from the beginning

#CHCon2025
October 29, 2025 at 10:18 PM
Lets disable it. But what if we forget?
#CHCon2025 #CHCon
October 29, 2025 at 11:07 PM
How do we stop defenders from detecting compromise?
@mangopdf.bsky.social #CHCon2025 #CHCon
October 30, 2025 at 3:30 AM
Where do we start?

Just start talking! Encouraging people to talk to the security team!

How do you engage with security that isn't a ticketing system.
#CHCon2025 #CHCon
October 31, 2025 at 2:51 AM
Wazuh developers are thinking about this
#CHCon2025 #CHCon
October 31, 2025 at 3:48 AM
What on earth is going on here?

Why is it using RPC? Now anything can talk to it...

Surely it must be secured? Right?

#CHCon2025 #CHCon
October 29, 2025 at 11:09 PM
Use gifs and animation
#CHCon2025 #CHCon
October 30, 2025 at 2:52 AM
How do we get persistence?
@mangopdf.bsky.social #CHCon2025 #CHCon
October 30, 2025 at 3:27 AM
RMA endpoints were safe but case details and user data endpoints...

Uh oh...

#CHCon2025 #CHCon
October 29, 2025 at 11:20 PM
What is #CHCon2025?
October 29, 2025 at 8:10 PM
The CHCon CTF
#CHCon2025
October 29, 2025 at 8:14 PM
October 29, 2025 at 9:19 PM
Tools of the trade
#CHCon2025 #CHCon
October 29, 2025 at 11:05 PM
So Denis watches this talk:

And threat actor one used EDR as their C&C

DENIS WANTS

#CHCon2025 #CHCon
October 31, 2025 at 3:33 AM