Shanna Niggans 🦄
@fancy_4n6
Followers
4,181
Following
2,006
Media
2,869
Statuses
18,963
Digital forensics & incident response #DFIR + #CTI | Horse and Dog mum | Co-host @ComfyConAU | Work @Cosiveco | RB/SCP for @BlackHatEvents & @BSidesMelbourne
Bediagal country (Australia)
Joined March 2010
Don't wanna be here?
Send us removal request.
Explore trending content on Musk Viewer
DEAR MYLOVE LINGORM
• 1093114 Tweets
#Narin
• 182672 Tweets
CHARLOTTE X TIKTOKLIVE99
• 95920 Tweets
#光る君へ
• 81106 Tweets
#FinalMGSBR2025xENGFA
• 55726 Tweets
#レカぺだけ歩こうJO1
• 50736 Tweets
プロジェクトKV
• 42665 Tweets
Zapatero
• 39756 Tweets
İdam
• 24826 Tweets
#鉄腕DASH
• 21083 Tweets
SUNa ALL KAIRAIN
• 19876 Tweets
ポルノグラフィティ
• 19227 Tweets
#ブラックペアン
• 16583 Tweets
#にじカラオケ祭
• 12652 Tweets
Edmundo
• 10498 Tweets
源氏物語
• 10225 Tweets
Kostic
• 10082 Tweets
One of my tangents today during my workshop referred to the fact that PowerShell v2 was still enabled in Windows systems and can be used to bypass eventlogging by threat actors. Disable it.
#DFIR
#CyberSecurity
#CyberTip
14
153
679
I am quite often asked if there are sites, training, and/or books that I would recommend to get into DFIR and of course, continue to learn. So I have created a sub-page Resources with my recommendations. I will continue to update this page over time.
4
85
253
I went and got myself a new car this weekend.
I am going through a separation (which is taking a lot longer than I really want), but in it, he is taking the Tesla so I went and got myself a new toy.
18
0
129
Conference etiquette. Well, maybe just social etiquette.
I heard about and saw a couple of things I want to just point out that I really don't think are acceptable ways to interact with speakers at a conference.
1/4
🧵👇
1. Asking someone their citizenship status.
13
33
120
So, I used to think that
#ThreatIntel
was the pointy tip of a mature SOC capability. Now I'm starting to believe it really should be at the bottom end. Threat intelligence and
#ThreatModelling
. Figuring out what you are protecting (
#AssetManagement
), where they are located and
17
18
96
Doing some
@PentesterLab
: "One quick way to find passwords is to search for the following mistake: people typing their password in their shell instead of the password prompt. By doing that, their password will be available in the history files."
Attackers also make this mistake
3
9
80
Sharing
@fr0gger_
's infographic on Remote Desktop Protocol
#BestPractice
. So many
#ransomware
#DFIR
engagements I have worked on,
#RDP
was the initial access vector (right
@4n6Bexaminer
?). Commonly with weak passwords 😱.
Check out his advice👇and use it🏁
4
26
76
Our barrier to entry in this industry is already too high.
Stop being dick heads, stop asking women personal details that have NOTHING to do with their talk (and i suggest you go and apologies) and even then if they say its OK, its still not OK to do it.
4/4
3
1
73
"How we choose to look at the world is going to influence what we see."
7
0
60
Occasionally, there are photos of myself I actually like.
6
0
63
Holidays start now, less infosec and more partying content (sorry, not sorry).
Happy Christmas, holidays, etc etc
9
0
57
Presented to 462 people today, all virtual so I was presenting to myself essentially. But I think it might be the largest audience I've presented to, does it count??
16
0
52
Yesterday (Friday) i updated my LinkedIn and made it official. I have started my own company and will be looking to delivery IR and forensics services to Australian businesses :) It was a surprisingly easy decision
#cacciacyber
#cacciacybersecurity
#huntorbehunted
10
6
54
Do you ever feel like how much you do, there is still so much more to do and you are so so so far away from your goals?
#dfirlyfe
19
3
50
Words cannot express my feelings tonight, 2 days of con and talks and support and lovely people. Im smiling and happy and so fullfilled. What an amazing community we have and i appreciate every day the part i get to play. Happy isolation to everyone, cherish this time together
3
4
52
This is a great post on where to start and what to focus on. "A strategy to land your first pentest job" by
@PentesterLab
4
17
50
Thankyou to everyone in the class today, such a wonderful group and was a pleasure. Thanks
@BSidesMelbourne
for a great venue and my wonderful co hosts!
5
2
50
It was linkedin official yesterday and now its twitter official. Im pretty excited by this role, it means that i can review, implement and ensure that we are doing everything we can to be the best company, not only at what we do, but how we do it.
#Trust
#ActiveDefence
We value trust so highly, we've appointed a Chief Trust Officer.
Congratulations to Shanna Daly (
@fancy_4n6
). We look forward to seeing you grow this role. A Chief Trust Officer makes sure a business makes ethical decisions, acts with integrity & protects customer information.
4
1
29
12
0
48
@novallkhan
A VP in my old company asked me if I was colleagues wife (standing next to him at a work gathering).
0
4
45
Holy Moly!! CSO Publishers Award, Security Champion ,The One to Watch, IT Security Barrier Breaker, and Unsung Hero Award : Shanna Daly
12
3
46
2. Asking someone their "real name".
3. Approaching a speaker with hostility after they have done their talk.
- You may not agree with what they say and that's ok.
- You may not like their topic.
- You may not be interested in what they have to say.
That's all perfectly OK
2/4
2
1
46
I think one of the most wonderful people in infosec (in the world actually) is
@pink_tangent
and she recently put some suggestions to a conference organiser to instead stop asking other women to ask women to submit and maybe look internally. I will elaborate more:
1/9
2
15
47
One of the most popular of
@fr0gger_
's
#infographics
is this
#Log
Parsing
#Cheatsheet
.
Very helpful to have on hand when analysing large sets of log data.
#dfir
#SocAnalysts
#LogTools
#Grep
Sharing
@fr0gger_
's infographic on Remote Desktop Protocol
#BestPractice
. So many
#ransomware
#DFIR
engagements I have worked on,
#RDP
was the initial access vector (right
@4n6Bexaminer
?). Commonly with weak passwords 😱.
Check out his advice👇and use it🏁
4
26
76
2
16
44
Day 1 of my Intro to Digital Forensics course complete with 28 incredible women attending
@0xCC_sh
today and tomorrow.
1
3
46
But unless you have something constructive to say, then please keep it to yourself. Aggressively targetting speakers about their topic you don't agree with or don't like continues to create a barrier for people to want to get up and share their thoughts and research.
3/4
1
1
45
0
4
39
This is my
#autopsy
#forensics
install and tips list for my
#DFIR
analysis system.
Does anyone have other tips to share?
1
8
43
Drum roll … the moment you’ve all been eagerly waiting for …
#cacciacyber
will become a part of
@paraflare_cyber
as of today, we will run the
#DFIR
consulting business and continue to grow the
#CyberSecurity
industry here in Australia
#GameOn
10
6
42
A very important setting change for any DFIR analyst workstation.
3
1
41
Ok 2020, i got this. Day 1 includes setting up my sit/stand desk I've had for 6 months! Procrastination I'm gonna conquer you this year!
7
2
35
So i made a post based on my
#Cybercon2023
presentation in Canberra - Using
@docintelapp
and
@MISPProject
. Its going to be a series, part 1 is out -
Feedback welcome!
4
12
40
We're placing bets on how many drinks it will take for us to agree on when the next
@ComfyConAU
will be.
8
1
37
Today is my first day with
@cosiveco
for a bit of a change of direction for a while.
Was as great few years with
@ParaFlare_Cyber
and the reins of the DFIR team have been given over to
@4n6Bexaminer
to continue to grow and evolve the team and consulting practice.
3
0
38
TIL that
#Ghidra
has some training under GhidraDocs/GhidraClass and someone has helpfully served them available online for me -
1
15
33
Today has felt a little bit shit, i posted earlier today and deleted it. I am a little affected today by the data leaks happening here in Australia (not personally but emotionally).
8
0
35
We got some new
@ParaFlare_Cyber
shirts for
@BSidesCbr
. Thanks a bunch to
@MissAndyL
for the wicked artwork!
7
2
33
We saw a need.
and filled it.
6
4
37
Squeee, this is going to be some fun!
@4n6Bexaminer
and I will be there and presenting and doing a tutorial!!!
#AusCERT2022
5
0
33
I'm gonna need some audience help to make it through this one
7
0
33
5. Linux basics for hackers
Cause I never feel like I'm good enough with Linux, there is always more I can learn. (Thanks to
@three_cube
)
4
5
35
Working on a ransomware case at the moment, super interesting and good to be able to get back into forensics and i did write my first little docker script to run log2timeilne, output to json, convert it to json log analytics likes and then i wrote a python script to load to azure
2
0
33
Could not be prouder of this wonderful lady at
#AusCERT2022
delivering her presentation of cybercrime
2
2
30
And quite honestly, if you as a conference organiser don't think its your responsibility, then don't count on me (or a lot of people) to attend or support.
If I want a sausage fest I'll go to the Munich Brauhaus.
9/9
5
2
30
Sometimes i think of myself as an introvert, like, i really am an introvert, but then also ....
6
0
28
Two exciting projects kicking off with my lawyer this week, one is a trademark application to ensure that fierce unicorn is mine, and two, which is far more exciting, a shareholder and partnership agreement as i will have someone joining me shortly!!!!
#cacciacyber
#GameOn
3
1
28
@chrissanders88
Legit had this in an investigation and turns out the guy had his slim mouse in his pocket (true story).
@4n6Bexaminer
4
0
29
The man who gave me my first chance and job in infosec died today :( he was a lovely person and saw something in me to take a chance. Ill be forever grateful. RIP Simon 💔
7
0
27
🚨"it’s important to know that it was and never should be about ratio nor balance, but the need to dig deep and understand what is causing under represented communities not to submit"
Literally no one wants to be a token speaker chosen to meet a quota.
2/9
1
5
28
I love when my watch tells me I just worked out when ive just been talking with my hands 😅
4
0
25
Big thanks to
@jacquiloustau
's mum for snapping this article of us in today's
@theage
newspaper!!! Legit stoke to be in print!!
4
2
28
@cyb3rops
It doesn't help not living in the EU. I'm considering never browsing the web again because of them.
2
0
25
My career advisors office at High School. pretty sure "Digital forensics and incident response professional" was not on the list of occupations they advised for me.
8
0
27
