Hey all, in a bit over a month we will teach our training again in Vegas. There are still seats available, would love to see you join!

There are 36 tickets left for DEATHCon online, and through some bizarre coincidence, also 36 tickets left for the Seattle site. For having an advertising budget of $0, it's kinda crazy how the tickets go so fast

There are just two tickets left for DEATHCon online. I wonder who will get the last one?

I've just resolved all broken API endpoints in DefenderHarvester. Most endpoints were changed on the backend, the downside of tapping into unofficial API's I guess :D Also, added an option to retrieve all configured suppression rules. github.com/olafhartong/De…

There's a cool and badass cybersecurity conference taking place in Amsterdam, the Netherlands on September 5th. It is called OrangeCon Tickets are cheaper for students. We weren't paid to bring attention to this conference, but we wish we were. orangecon.nl

Had a lot of fun talking with Olaf Hartong on macOS Primary Refresh Tokens at TROOPERS Conference a few weeks ago. If you want to know about PRTv3, PRTv4 or want your head to buzz with token flows, you can read our story book at dirkjanm.io/talks or at troopers.de/troopers24/tal…

Code is here: github.com/t94j0/adexplor…

I've published the beta of PingCastle 3.3 here: github.com/vletoux/pingca… I'll be busy with the Olympics in Paris (starting next week), so i recommend you test it ASAP. Reminder: once the officiel version is released, no fix ! You'll have to wait for the next release ...

Today, we introduce the Reply URL Brute tool that enumerates single and multitenant #Azure applications without user interaction. The tool helps blue teams exploring and enumerating the attack surface that multitenant applications have in a tenant. falconforce.nl/automating-enu…

We've released Process Monitor 2.0 for Linux with broader distro support and Sysmon v15.15 with bugfixes. Get the tools at sysinternals.com. See what's new on the Sysinternals Blog: techcommunity.microsoft.com/t5/sysinternal…

Check out Olaf Hartong's #SOCON2024 talk and learn about FalconHound, a multi-tool designed to augment BloodHound’s capabilities. Watch the full talk at ghst.ly/4bTIk0X. View all presentations from SO-CON 2024 ➡️ ghst.ly/socon24-playli…

Just had a great dinner with Cas van Cooten and Jean sadly we forgot to take a pic (not like you care) 😎 Look familiar Melvin langvik ? 😆 we did miss you klez

New blog: Persisting on Entra ID applications and User Managed Identities with Federated Credentials. In this blog we set up our own IdP with roadtools, allowing us to authenticate to apps and user managed identities with federated credentials 😀 dirkjanm.io/persisting-wit…

🚀Excited to release the new version of BadZure at Black Hat .🚀Rewritten in Python and powered by Terraform, BadZure lets you populate #EntraID tenants and create attack paths for security exploration. 🔗 github.com/mvelazc0/BadZu… 📺 youtube.com/watch?v=IzurUr… #AzureAD

APT email phishing clustering analysis with language models and deep learning by Sanne 🔥

I had the great fortune to share a great tool called TIM at @BlackHat Arsenal - and I wanted to share it here with the InfoSec Twitterverse too! TIM (no, it doesn't stand for anything) is a fantastic alternative interface to work with ADX/KQL-accessible data.

Nine new functions in BARK: Get-AllEntraRoles Enable-EntraRole Get-EntraDeviceRegisteredUsers Get-IntuneManagedDevices Get-IntuneRoleDefinitions New-EntraIDAbuseTestUsers New-EntraIDAbuseTestSPs New-IntuneAbuseTestUsers New-MSGraphAppRoleTestSPs github.com/BloodHoundAD/B…

This Thursday will be the first edition of OrangeCon! I'll be there with Olaf Hartong for a book reading event on macOS Primary Refresh Tokens! See you there? 😁

🍊#OrangeCon is SOLD OUT! 🍊 But don't worry — Track 1 will be LIVESTREAMED! 🎥 Can’t make it in person? Squeeze in some time and catch all the juicy #cybersecurity insights online: youtube.com/live/A0omwHdoL…

Had a great day at the first @OrangCon_nl and loved it. Very smooth event with an amazing vibe and great content. Huge props to the team and all the volunteers for making it a memorable event! Try to be there next year, I’m sure I will be.