Murphy the Malware Lab
@MalwareLabMurph
Followers
92
Following
514
Media
150
Statuses
896
Insight from a cybersecurity professional and his faithful Chocolate Labrador. Opinions presented here do not reflect the views of any company or client.
North Carolina, USA
Joined May 2021
Hello World! I decided to start this Twitter account to keep up with current cybersecurity research, analysis, and threat intelligence, as well as interact with other professionals in the field. I’ll do my best to signal-boost posts that I feel will benefit the community!
0
1
3
Microsoft announced today that it will integrate Sysmon natively into Windows 11 and Windows Server 2025 next year, making it unnecessary to deploy the standalone Sysinternals tools. https://t.co/aomlKYXm5Q
bleepingcomputer.com
Microsoft announced today that it will integrate Sysmon natively into Windows 11 and Windows Server 2025 next year, making it unnecessary to deploy the standalone Sysinternals tools.
19
71
327
Apparently I’ve avoided this app to the point where it no longer is confident I’m a human… or perhaps my alter-ego is more convincing than I realized? 🤖🐶
0
0
0
People know me for strong opinions on offensive security, threat intel, malware devs, C2 frameworks. Now it’s time to piss off the defenders. Process Creation logs (Event ID 4688) are the only sane answer here. Not DNS query logs. Not PCAPs. Not network logs with login events
Alright threat hunters of the world, I’ve taken away your telemetry from your fancy security tools, so no firewall data, no Defender/AV data, nothing from your EDR. What non security specific logs are you using to find an adversary in your environment and why?
29
57
539
I’m still here!!! The burnout has been real, but every now and then I see a glimmer of light when somebody asks me about a real cybersecurity topic. 😌
0
0
0
Trying to do my obligatory semi-regular login and doom scrolling… this place still as toxic as i remember? ☠️
0
0
0
Microsoft Threat Intelligence Center discovered an active and successful device code phishing campaign by a threat actor we track as Storm-2372. Storm-2372’s targets include governments, NGOs, IT services and technology, defense, telecoms, health, higher education, and energy/oil
microsoft.com
Microsoft Threat Intelligence Center discovered an active and successful device code phishing campaign by a threat actor we track as Storm-2372. Our ongoing investigation indicates that this campaign...
5
161
497
ICYMI: Trump administration axed all advisory committee members in DHS, including the people that make up the Cybersecurity and Infrastructure Security Agency's (CISA) Cyber Safety Review Board (CSRB).
1
10
13
We're just two weeks away from the SANS CTI Summit, one of my favorite conferences of the year! I've seen several presentation drafts, and they are 🔥. Register today to join Live Online (free!) or in-person in Alexandria, VA! ➡️ Register: https://t.co/uBkLbdD167
@sansforensics
1
14
45
Admittedly I’ve been quiet on here lately due to general holiday hectic household, but I always recommend and make it a point to complete this challenge every December!
#AdventOfCyber is HERE! 🚨🎅 🔗 https://t.co/N37yYGq4Gb Take on daily beginner-friendly challenges throughout December to be in with the chance of winning from our $100,000 prize draw 🎁🎄
0
0
1
#AdventOfCyber is HERE! 🚨🎅 🔗 https://t.co/N37yYGq4Gb Take on daily beginner-friendly challenges throughout December to be in with the chance of winning from our $100,000 prize draw 🎁🎄
8
75
296
BEN SAID I COULD DO A GIVEAWAY TOO 🥳 HackingHub Black Friday deal: https://t.co/Uf3mW11mcR $39 for lifetime access ♾️ OR $19 for a month trial ⏰ AND I can match his giveaway-- 2️⃣ WINNERS (1 each) - Full cert bundle - Lifetime access To enter: ↪️ retweet and reply w/ 🦃
397
378
628
📢 The Github Infosec Black Friday 2024 edtion is out!! Already some good deals here 👇 https://t.co/1QwI2QCygb
2
40
83
Very cool! Excited to explore this further at work!
I created the first draft of a website for the EDR telemetry project to help people quickly compare vendor telemetry visibility. What do you think about it? Are there any specific features you want to see for the website? Built with ChatGPT 4o with canvas (wanted to test it
0
0
1
Topic that arose while discussing Kindergarten career day: anybody have experience/resources on how to explain InfoSec to children? Would be intrigued to see any resources/talks… otherwise I may just need to make my own… 🤔
0
0
0
What people often overlook in #DetectionEngineering is that there’s no "one-size-fits-all" rule to detect a threat. It depends on your goals. How specific should the rule be? Are you tracking a threat actor, detecting the tool/malware, or focusing on the technique? Should it be
7
126
521
If your family hasn’t received a phone call from “family” saying they’ve “been in an accident and need money for bail”, they likely will in the next few years. This AI voice clone scam is so easy to make and I’ve had folks left and right telling me they’re getting these calls.
Today, my dad got a phone call no parent ever wants to get. He heard me tell him I was in a serious car accident, injured, and under arrest for a DUI and I needed $30,000 to be bailed out of jail. But it wasn't me. There was no accident. It was an AI scam.
24
416
1K
This is a great read! I’m always interested to read into detection strategies for Linux compared to Windows.
🚀Just published a new blog post comparing telemetry on Linux vs. Windows! Dive into the differences in how these platforms handle telemetry for incident response operations. 🔍 It provides answers to the below questions and many more: •Why is Windows telemetry easier to
0
0
1
🎉GIVEAWAY⭐️ I am giving away 1 print copy and 5 e-book copies of Mastering AWS Security! 🛡️☁️ 📚Book: https://t.co/rOBKdVpqWS Enter before Tuesday, September 03, 2024 at 6PM EST by following, commenting, and RT! @PacktPublishing Author: https://t.co/3y0tADBpGw
125
161
445
Also, happy to say that the account’s namesake has been doing his best therapy dog impression while I recover. 😏🐶
0
0
0
