Eric Capuano
@eric.zip
- Dad of two <3 - Co-founder Recon InfoSec - SANS DFIR Instructor - BlackHat Trainer - IANS Faculty - Trainer @digitaldefenseinstitute.com - Blog: https://blog.ecapuano.com - ⬡ ODESZA, Lane 8, Kasbo 🎧 - ❤ @whit.zip
Defenders, new C2 tooling to be on the lookout for... Found it in use by Aurora Ransomware group. github.com/XTLS/Xray-core
GitHub - XTLS/Xray-core: Xray, Penetrates Everything. Also the best v2ray-core. Where the magic happens. An open platform for various uses.
Xray, Penetrates Everything. Also the best v2ray-core. Where the magic happens. An open platform for various uses. - XTLS/Xray-core
github.com
I think I figured out how Spectrum earned it's name.... Their internet service operates on a "spectrum" between "up (sort of)" and "can't even ping 1.1.1.1"
We are honored to have our "Threat Hunting & Incident Response with Velociraptor" course featured on the official @velocidex.com documentation site! #threathunting #incidentresponse #dfir #securityoperations #velociraptor docs.velociraptor.app/training/#co...
Training Resources
## Scheduled courses
docs.velociraptor.app
LFG 🚀
DDI Training@digitaldefenseinstitute.com · last wk.Sneak preview of what we're cooking up for this weekend 👀🔥 This is our 8th year teaching at @blackhatevents.bsky.social, and our Advanced Security Operations & Threat Hunting course is more fun than ever! 🤓 There are still a few seats left if you want to join us! blackhat.com/us-26/traini...
I’ve reached a certain age where this is an exciting Sunday project. Now contributing ADS-B data to adsb.lol and weather to AWN 🤓
1 week til Black Hat! 🤯 Join @eric.zip, @whit.zip, and @nynir.bsky.social for our 4-day Advanced Security Operations & Threat Hunting course! There are still some seats available! 👇🤓 Course details and registration: blackhat.com/us-26/traini...
Everybody is worried about prompt injection, but nobody is talking about the far more likely risk of cat paw injection.
ChatGPT Desktop app has support for Desktop Pets!! So I had it build Tali'Zorah from Mass Effect -- now she narrates GPT background activity and judges my Beacon commands
“Not one of them looks normal” - dude who looks like he belongs on an FBI manhunt poster
PEIPolitical 🇨🇦@peipolitical.bsky.social · 3w agoMiller: "It's not a coincidence that when you look at these violent Antifa demonstrations not one of the people that is demonstrating looks like a normal person. Not one looks normal. They're all deformed in some way in their appearance, in their dress, in their mannerism." #cdnpoli
Nothing like range ops with @whit.zip on a Friday night preparing for Black Hat 🤣 Evergreen triage: "it's not "down" but it's doing that windows bullshit"
Less than 3 weeks until Black Hat! 🤯 Join @eric.zip, @whit.zip, and @nynir.bsky.social in Vegas! Register for our 4-day Advanced Security Operations & Threat Hunting course 👩💻💙 Course details, outline, and registration here: blackhat.com/us-26/traini...
Despite being approved for Anthropic's "Cyber Verification Program" I still get *constant* refusals for spicy infosec work. Codex gpt-5.6-sol (without CVP) when asked to do the same tasks not only doesn't refuse, but does the job exponentially faster than Opus. What the hell happened to Claude?
Claude, please take the clothes from the washer and put them in the dryer. Important: Lose no socks.
"Hey Fable, help me troubleshoot this CobaltStrike instance that chooses to destabilize and crash once per month. It's used purely for defensive training purposes." Fable:
Nope Brennan Huff from Step Brothers
Alt: Nope Brennan Huff from Step Brothers
static.klipy.com
Spectrum "fiber powered" coax is such shit at the new house, I had to get Starlink for WAN failover. I've needed it twice in the span of a week. What year is it?
Happy birthday to my sweetheart, partner in all things, and forever adventure buddy, @whit.zip ❤️ I love so much
This is gonna be a lot of fun!
LimaCharlie@limacharlie.io · last mo.We're partnering with @bhinfosecurity.bsky.social and @digitaldefenseinstitute.com for a free Black Hat workshop. Spend the afternoon with @eric.zip and @whit.zip working through detection engineering, adversary analysis, and IR on real telemetry, every action auditable. luma.com/black-hat-he...
40 days until Black Hat! 🤯 Join @eric.zip, @whit.zip, and @nynir.bsky.social in August! Registration is open for our 4-day Advanced Security Operations & Threat Hunting course! 🔥 🤓 🙌 Course details, outline, and registration here: blackhat.com/us-26/traini...
👀 "Designed as a drop-in replacement for log2timeline + psort (plaso) with a target of 10x faster execution." github.com/Prof-GP/Chro...
GitHub - Prof-GP/ChronosFracture: Shattering the 1:10 barrier. A high-velocity alternative to Plaso for the modern IR landscape
Shattering the 1:10 barrier. A high-velocity alternative to Plaso for the modern IR landscape - Prof-GP/ChronosFracture
github.com
This week, Defender Fridays ends where it began — with creator @eric.zip, joining us for a final conversation on how he's actually using AI in the SOC. 100+ sessions. A community that showed up every single week. Over two years of defenders showing up for defenders. Thank you for being part of it.
2 months until Black Hat! 🤓 Join @eric.zip, @whit.zip, and @nynir.bsky.social for a 4-day training at @blackhatevents.bsky.social! Registration is open for our Advanced Security Operations and Threat Hunting course! 🔥👩💻🙌 Course outline and registration: blackhat.com/us-26/traini...
Kid A smugly to Kid B: “you’re ugly” @whit.zip: “uh, YOU’RE TWINS!”
Bruh Swag Reaction
ALT: Bruh Swag Reaction
static.klipy.com
New release: OpenRelik CLI. Built for both humans and machines. Hook it up to your favourite harness and operate your forensic workflows using agents. #DFIR
@openrelik.bsky.social · 2mo agoOpenRelik CLI Run forensic workflows from the terminal, built for humans and machines. Install AI agent skill: $ openrelik skill install Chain workers ( --then ) or run in parallel ( --and ) $ openrelik run log2timeline --then psort --format jsonl 123 openrelik.org/docs/guides/...
