Phill Moore @phillmoore X Profile

Phill Moore

@phillmoore

Followers

9K

Following

7K

Media

414

Statuses

7K

This Week in 4n6 // ThinkDFIR // SANS // CyberCX (DFIR) https://t.co/vLyL2sxTuy I might not know much, but I do know how to Google Tweets are mine

Sydney, Australia

Joined March 2009

Don't wanna be here? Send us removal request.

Phill Moore

@phillmoore

2 days

Week 34 - 2025 #DFIR.

thisweekin4n6.com

Learn Scattered Spider’s Updated TTPs & How to Defend Against ThemIn this webinar, Permiso’s CTO and Head of P0 Labs Threat Research will discuss:- How Scattered Spider’s methods have evolved o…

0

12

20

Phill Moore

@phillmoore

9 days

Week 33 - 2025 #DFIR.

thisweekin4n6.com

Download Permiso’s CISO Guide to Detecting & Preventing Identity Attacks. The guide breaks down:- The top identity-based attack vectors across SaaS, PaaS, IaaS, and IdPs- Real-world b…

0

20

33

Grok

@grok

6 days

What do you want to know?.

538

334

2K

Phill Moore

@phillmoore

16 days

Week 32 - 2025 #DFIR.

thisweekin4n6.com

Download Permiso’s CISO Guide to Detecting & Preventing Identity Attacks. The guide breaks down:- The top identity-based attack vectors across SaaS, PaaS, IaaS, and IdPs- Real-world b…

0

15

29

Phill Moore

@phillmoore

23 days

Week 31 - 2025 #DFIR.

thisweekin4n6.com

Download Permiso’s CISO Guide to Detecting & Preventing Identity Attacks. The guide breaks down:- The top identity-based attack vectors across SaaS, PaaS, IaaS, and IdPs- Real-world b…

0

14

29

Phill Moore

@phillmoore

29 days

Sometimes Windows and PE Version information don’t get along #DFIR.

thinkdfir.com

As part of some research I’m doing into Amcache (more on that another time), I went about exploring Windows PE version information and how Windows see’s it. This came about because I th…

0

5

15

Phill Moore

@phillmoore

30 days

Week 30 - 2025 #DFIR.

thisweekin4n6.com

Use the discount code thisweekin4n6 for 15% off any class at Cyber5w.Use the code PM15 or click this link for 15% your next Hexordia classTakes a class with me! Akash Patel Who’s Using a Proxy or V…

0

17

25

Phill Moore

@phillmoore

1 month

RT @sansforensics: 🔥 Train at your own pace and save!. Get 25% off any 4–6 day #DFIR OnDemand course through July 31 with code DFIRhot25.→….

0

3

0

Phill Moore

@phillmoore

1 month

Week 29 - 2025 #DFIR.

thisweekin4n6.com

Use the discount code thisweekin4n6 for 15% off any class at Cyber5w.Use the code PM15 or click this link for 15% your next Hexordia classTakes a class with me! Christopher Eng at Ogmini Fun CVE on…

0

15

23

Phill Moore

@phillmoore

1 month

Week 28 - 2025 #DFIR.

thisweekin4n6.com

Use the discount code thisweekin4n6 for 15% off any class at Cyber5w.Use the code PM15 or click this link for 15% your next Hexordia classTakes a class with me! AbdulRhman AlfaifiExploring Windows …

0

19

31

Phill Moore

@phillmoore

2 months

Week 27 - 2025 #DFIR.

thisweekin4n6.com

Use the discount code thisweekin4n6 for 15% off any class at Cyber5w.Use the code PM15 or click this link for 15% your next Hexordia classTakes a class with me! Akash PatelJump List Changes in Wind…

0

16

28

Phill Moore

@phillmoore

2 months

Week 26 - 2025 #DFIR.

thisweekin4n6.com

Use the discount code thisweekin4n6 for 15% off any class at Cyber5w.Use the code PM15 or click this link for 15% your next Hexordia classTakes a class with me! Akash PatelForensic Differences Betw…

0

16

25

Phill Moore

@phillmoore

2 months

Week 25 - 2025 #DFIR.

thisweekin4n6.com

Use the discount code thisweekin4n6 for 15% off any class at Cyber5w.Use the code PM15 or click this link for 15% your next Hexordia classTakes a class with me! Akash PatelDigging into Google Analy…

0

14

27

Phill Moore

@phillmoore

2 months

Have been going down a lot of #DFIR rabbit holes lately; outside of a couple papers from a decade ago, has anyone done any research into linking the IconCache.db file to the icon caches in the appdata Explorer folder?.

0

2

Phill Moore

@phillmoore

2 months

Week 24 - 2025 #DFIR.

thisweekin4n6.com

Use the discount code thisweekin4n6 for 15% off any class at Cyber5w.Use the code PM15 or click this link for 15% your next Hexordia classTakes a class with me! ThinkDFIRCached screenshots on Windo…

0

16

31

Phill Moore

@phillmoore

3 months

Week 23 - 2025 #DFIR.

thisweekin4n6.com

Use the discount code thisweekin4n6 for 15% off any class at Cyber5w.Use the code PM15 or click this link for 15% your next Hexordia classTakes a class with me! Akash Patel Where Do We Begin? A Net…

0

13

27

Phill Moore

@phillmoore

3 months

Week 22 - 2025 #DFIR.

thisweekin4n6.com

Use the discount code thisweekin4n6 for 15% off any class at Cyber5w.Use the code PM15 or click this link for 15% your next Hexordia classTakes a class with me! Akash PatelMaster Wireshark tool Lik…

0

17

30

Phill Moore

@phillmoore

3 months

Week 21 - 2025 #DFIR.

thisweekin4n6.com

Use the discount code thisweekin4n6 for 15% off any class at Cyber5w.Use the code PM15 or click this link for 15% your next Hexordia classTakes a class with me! Akash PatelForensic Analysis of SQLi…

0

22

37

Phill Moore

@phillmoore

3 months

Week 20 - 2025 #DFIR.

thisweekin4n6.com

Use the discount code thisweekin4n6 for 15% off any class at Cyber5w.Use the code PM15 or click this link for 15% your next Hexordia classTakes a class with me! Akash Patel Proxies in DFIR– Deep Di…

0

19

31

Phill Moore

@phillmoore

3 months

Airlines charging extra for carry on that exceeds 7kg makes zero sense. Wife just got charged basically the same as her flight for being a few kg over. not impressed Jetstar. .

0

2

Phill Moore

@phillmoore

4 months

Week 19 - 2025 #DFIR.

thisweekin4n6.com

Use the discount code thisweekin4n6 for 15% off any class at Cyber5w.Use the code PM15 or click this link for 15% your next Hexordia classTakes a class with me! Akash Patel Linux File System Analys…

0

10

28