@rag_sec

Long before time had a name, the First Spookjitsu Master created Rag using four surveillance agencies. | Co-Founder, ConInt & NoPainOnlyPlane | CTI/OSINT

 Pale Blue Dot
Joined June 2018
  • Tweets35
  • Following2.4K
  • Followers4.6K
Rag retweeted
Karan@0xDISRELSep 9
hey folks, after 6 years my tenure as a CTI analyst at big 4 has come to an end! i learned a lot and worked with the best, but time for new horizons! currently looking for roles in NA/Canada. please retweet for reach and DM me if you have any leads 😇🙏
1
14
1
40
3,969
Something I've been working on just landed upstream in MISP: HUNT-EX and four companion threat-hunt-* objects. First open standard for sharing threat hunts between organisations. Not just what the hunt turned up. The hunt itself.
1
1
5
715
more replies
Example. A peer shares a hunt for suspicious OAuth consent grants against Entra. You filter your MISP for: telemetry="identity" AND outcome="hypothesis-confirmed-malicious" AND query-language="sigma" Every hunt in your community you can actually run, in one query.
1
97
Huge thanks to the @MISPProject maintainers for the fast review and merge, and to the ISAC members who tested the approach along the way. If you run MISP, it'll be there on your next sync. github.com/MISP/misp-taxonom…
74
Load more