@jsecurity101 @_xpn_ Exactly this! The ROI on c2 detections is super low. You need a lot of data, a lot of time and detection effort, and still are guaranteed to miss a lot of things. Detecting bad behavior has a waaay bigger ROI.

RT @WWHackinFest: Sponsor Spotlight | @falconforceteam We would like to thank FalconForce for being a Silver Sponsor for Deadwood 2023! Ch…

@Flangvik @HackingLZ Congrats man! Epic car 😎

Having an implant running undetected on an edr protected machine is all cool, but detecting TAs is just ~20% about detecting their implant. Detecting the stuff they do with their implant is what matters way more. Local priv esc, cred dumping, lateral movement, etc. Just saying 🤷‍♂️

@N7WEra @Jean_Maes_1994 🤷‍♂️ Tl;dr very low tax rates for expats.

@GayzeMay I’m still waiting for @KLM to respond. Same ‘no response’ on social media…

@KwyjiboUK @UK_Daniel_Card @LisaForteUK @AppSecBloke @brechtcastel does this kind of magic as well.

@pati_gallardo Build a random go project as lib and statically link into your project? 🤷‍♂️😋

@yarden_shafir Red and black trees with a few green nodes?

Does anyone have a working .NET core gadget for a deserializing vulnerability with The documented .NET framework gadgets don’t work in core. #SharingIsCaring

@ChenCravat / Raymond Chen is a genius! Every time i encounter something weird in windows, he has documented it 10+ years ago 🤷‍♂️😎

RT @falconforceteam: It’s #FalconFriday and summer is here! Take a refreshing dive into our newest blog, where we will shed some light on h…

@n0x08 It’s more nuanced! Dependens on country/airport. Amsterdam allows you to leave everything in your bag. While many other eu airports require you to take stuff out. US is famous for shoes off, but was flying from SAN recently, and was allowed to leave liquids in the bag go figure🤷‍♂️

@alisaesage Just wanted to say thanks for offering 10 spots for free for those who’re not fortunate enough to have an employer pay for it.

@chvancooten @olafhartong @DebugPrivilege @DebugPrivilege no pressure…👀👀 when do you want to drop by? We’ll still off you a drink if you don’t want to share - promise!

Does anyone know what the status is of API Monitor? Is in dead? Will it ever get an update or be open sourced? I have so many usecases and/or feature requests…🤯 Cc: @rohitab

@chvancooten @olafhartong @DebugPrivilege Awesome! Can you forward me the invite as well, so I can make sure to be there? 😋 (i.e. when do you want to drop by?)

@tijshofmans @defcon Check! Ik ben er + nog stapel collega’s.