Janosch
@jkppr.bsky.social
DFIR and Timesketch for work, hiking and sailing as a hobby, thoughts are my own, not much more to say...
Reposted by Janosch
📣THREAD: It’s surprising to me that so many people were surprised to learn that Signal runs partly on AWS (something we can do because we use encryption to make sure no one but you–not AWS, not Signal, not anyone–can access your comms).
It’s also concerning. 1/
It’s also concerning. 1/
PSA: we're aware that Signal is down for some people. This appears to be related to a major AWS outage. Stand by.
October 27, 2025 at 10:38 AM
📣THREAD: It’s surprising to me that so many people were surprised to learn that Signal runs partly on AWS (something we can do because we use encryption to make sure no one but you–not AWS, not Signal, not anyone–can access your comms).
It’s also concerning. 1/
It’s also concerning. 1/
Reposted by Janosch
A threat actor (UNC6395) is accessing Salesforce accounts and data through the Salesloft Drift AI chat agent
cloud.google.com/blog/topics/...
cloud.google.com/blog/topics/...
Widespread Data Theft Targets Salesforce Instances via Salesloft Drift | Google Cloud Blog
A widespread data theft campaign targeting Salesforce instances via the Salesloft Drift third-party application.
cloud.google.com
August 26, 2025 at 5:19 PM
A threat actor (UNC6395) is accessing Salesforce accounts and data through the Salesloft Drift AI chat agent
cloud.google.com/blog/topics/...
cloud.google.com/blog/topics/...
Reposted by Janosch
A new Unfurl release (unfurl.link) is here! v2025.08 has:
🆔 Parsing more from TikTok IDs (millisecond timestamp, entity type (user account, device, live session, or video), and more). Thanks to Benjamin Steel for the paper arxiv.org/abs/2504.13279
📝 Full release notes: github.com/obsidianfore...
🆔 Parsing more from TikTok IDs (millisecond timestamp, entity type (user account, device, live session, or video), and more). Thanks to Benjamin Steel for the paper arxiv.org/abs/2504.13279
📝 Full release notes: github.com/obsidianfore...
August 11, 2025 at 3:17 PM
A new Unfurl release (unfurl.link) is here! v2025.08 has:
🆔 Parsing more from TikTok IDs (millisecond timestamp, entity type (user account, device, live session, or video), and more). Thanks to Benjamin Steel for the paper arxiv.org/abs/2504.13279
📝 Full release notes: github.com/obsidianfore...
🆔 Parsing more from TikTok IDs (millisecond timestamp, entity type (user account, device, live session, or video), and more). Thanks to Benjamin Steel for the paper arxiv.org/abs/2504.13279
📝 Full release notes: github.com/obsidianfore...
Heading to #BlackHat Arsenal in 2 weeks w/ @maartenvdantzig.bsky.social to demo our new AI investigation features in Timesketch! We've built a workflow that partners the analyst with AI to speed up investigations while keeping you in control.
Meet us on 📍Thurs, Aug 7, 1pm, at Arsenal Station 7
Meet us on 📍Thurs, Aug 7, 1pm, at Arsenal Station 7
Black Hat
Black Hat
www.blackhat.com
July 20, 2025 at 8:50 PM
Heading to #BlackHat Arsenal in 2 weeks w/ @maartenvdantzig.bsky.social to demo our new AI investigation features in Timesketch! We've built a workflow that partners the analyst with AI to speed up investigations while keeping you in control.
Meet us on 📍Thurs, Aug 7, 1pm, at Arsenal Station 7
Meet us on 📍Thurs, Aug 7, 1pm, at Arsenal Station 7
Reposted by Janosch
Using Timesketch for timeline analysis? We recently added a new feature: LLM summaries of up to 500 events in view. Example below uses Gemini Flash, but you can just as easily use a local Ollama model. Setup guide: timesketch.org/guides/user/...
June 19, 2025 at 6:01 PM
Using Timesketch for timeline analysis? We recently added a new feature: LLM summaries of up to 500 events in view. Example below uses Gemini Flash, but you can just as easily use a local Ollama model. Setup guide: timesketch.org/guides/user/...
Reposted by Janosch
Here are the slides/resources from our #SecurityFest talk on "Modernizing Incident Response Using Techniques that Scale"
Talk: www.youtube.com/live/Znl7TBF...
Talk: www.youtube.com/live/Znl7TBF...
Security Fest 2025 - Day 2
YouTube video by Security Fest
www.youtube.com
June 5, 2025 at 5:58 PM
Here are the slides/resources from our #SecurityFest talk on "Modernizing Incident Response Using Techniques that Scale"
Talk: www.youtube.com/live/Znl7TBF...
Talk: www.youtube.com/live/Znl7TBF...
Reposted by Janosch
Hey DFIR Peeps! I am hiring incident responders in two locations - Boulder, CO and Sunnyvale, CA. It'd be hard to find a bigger CSIRT with more scope and more interesting stuff to do than this one. :D
SVL: www.google.com/about...
BLD: www.google.com/about...
SVL: www.google.com/about...
BLD: www.google.com/about...
April 25, 2025 at 10:24 PM
Hey DFIR Peeps! I am hiring incident responders in two locations - Boulder, CO and Sunnyvale, CA. It'd be hard to find a bigger CSIRT with more scope and more interesting stuff to do than this one. :D
SVL: www.google.com/about...
BLD: www.google.com/about...
SVL: www.google.com/about...
BLD: www.google.com/about...
Reposted by Janosch
We have a new Timesketch release: github.com/google/times...
It includes AI / LLM things, new features, bugfixes and more. Check it out. #DFIR
It includes AI / LLM things, new features, bugfixes and more. Check it out. #DFIR
Release 20250408 · google/timesketch
What's Changed
✨ New Features & Major Enhancements
Core Functionality & API:
Add Support for Searching Processing Timelines by @jbaptperez in #3241
Add Timeline, SearchIndex and Datasource creati...
github.com
April 9, 2025 at 7:28 AM
We have a new Timesketch release: github.com/google/times...
It includes AI / LLM things, new features, bugfixes and more. Check it out. #DFIR
It includes AI / LLM things, new features, bugfixes and more. Check it out. #DFIR
Reposted by Janosch
What if the wise men kept walking after Jesus’s birth?
Watch the latest What If? video collaboration with MinuteEarth!
youtu.be/YL2VNtus4xk
Watch the latest What If? video collaboration with MinuteEarth!
youtu.be/YL2VNtus4xk
What if the wise men kept walking after Jesus’s birth?
YouTube video by xkcd's What If?
youtu.be
March 4, 2025 at 10:09 PM
What if the wise men kept walking after Jesus’s birth?
Watch the latest What If? video collaboration with MinuteEarth!
youtu.be/YL2VNtus4xk
Watch the latest What If? video collaboration with MinuteEarth!
youtu.be/YL2VNtus4xk
Reposted by Janosch
Hey #DFIR people! New #OpenRelik release just dropped. Some cool new features and a bunch of bug fixes.
New #OpenRelik release 0.5.0 is here with some cool new additions:
* Import files directly from Google Cloud Storage
* Updated AI summary visuals
* Glob filtering support when extracting archives
* BlockDevice support for mounting disk images and partitions
Changelog: openrelik.org/changelog/#050
* Import files directly from Google Cloud Storage
* Updated AI summary visuals
* Glob filtering support when extracting archives
* BlockDevice support for mounting disk images and partitions
Changelog: openrelik.org/changelog/#050
Changelog
0.5.0 ℹ️ We are moving to semantic versioning from this release in order to better track compatibility aross all components. Server
Added a health check endpoint for service monitoring. Implemented a ...
openrelik.org
February 26, 2025 at 4:32 PM
Hey #DFIR people! New #OpenRelik release just dropped. Some cool new features and a bunch of bug fixes.
Turren-Schönbüel Trail, my absolute favorite so far.
February 22, 2025 at 6:43 AM
Turren-Schönbüel Trail, my absolute favorite so far.
Snowshoeing at Weissenberge, Switzerland
February 2, 2025 at 5:40 PM
Snowshoeing at Weissenberge, Switzerland
Snowshoeing in a winter wonderland. [Furna, Switzerland]
January 25, 2025 at 7:39 PM
Snowshoeing in a winter wonderland. [Furna, Switzerland]
Reposted by Janosch
Project Zero is hiring 👀
No need to tell y'all that the team is awesome
No need to tell y'all that the team is awesome
Senior Security Engineer, Security Research — Google Careers
www.google.com
January 8, 2025 at 10:23 AM
Project Zero is hiring 👀
No need to tell y'all that the team is awesome
No need to tell y'all that the team is awesome
Reposted by Janosch
Exciting News🚀🎉:
Our @cyber5w.bsky.social Intro to DFIR Course is now FREE!🔍
Please read our announcement found below. The course will also be available for FREE @opensectraining.bsky.social very soon! #DFIR #infosec #cybersecurity #DigitalForensics
cyber5w.com/into-dfir.html
Our @cyber5w.bsky.social Intro to DFIR Course is now FREE!🔍
Please read our announcement found below. The course will also be available for FREE @opensectraining.bsky.social very soon! #DFIR #infosec #cybersecurity #DigitalForensics
cyber5w.com/into-dfir.html
January 7, 2025 at 1:43 AM
Exciting News🚀🎉:
Our @cyber5w.bsky.social Intro to DFIR Course is now FREE!🔍
Please read our announcement found below. The course will also be available for FREE @opensectraining.bsky.social very soon! #DFIR #infosec #cybersecurity #DigitalForensics
cyber5w.com/into-dfir.html
Our @cyber5w.bsky.social Intro to DFIR Course is now FREE!🔍
Please read our announcement found below. The course will also be available for FREE @opensectraining.bsky.social very soon! #DFIR #infosec #cybersecurity #DigitalForensics
cyber5w.com/into-dfir.html
Reposted by Janosch
🚀 New OpenRelik release
Role-based access control, folder sharing, database improvements, optimisations for file listings, chunked file uploads, bug fixes and refactoring efforts to improve stability.
📝 https://openrelik.org/changelog/
🔗 https://discord.gg/hg652gktwX
#DFIR
Role-based access control, folder sharing, database improvements, optimisations for file listings, chunked file uploads, bug fixes and refactoring efforts to improve stability.
📝 https://openrelik.org/changelog/
🔗 https://discord.gg/hg652gktwX
#DFIR
November 27, 2024 at 3:41 PM
🚀 New OpenRelik release
Role-based access control, folder sharing, database improvements, optimisations for file listings, chunked file uploads, bug fixes and refactoring efforts to improve stability.
📝 https://openrelik.org/changelog/
🔗 https://discord.gg/hg652gktwX
#DFIR
Role-based access control, folder sharing, database improvements, optimisations for file listings, chunked file uploads, bug fixes and refactoring efforts to improve stability.
📝 https://openrelik.org/changelog/
🔗 https://discord.gg/hg652gktwX
#DFIR
Reposted by Janosch
If you need datasets for your #DFIR training? Feel free to use any of my cases found in the URL below. They can be used for both academic or commercial training.
www.ashemery.com/dfir.html
www.ashemery.com/dfir.html
November 1, 2024 at 4:07 PM
If you need datasets for your #DFIR training? Feel free to use any of my cases found in the URL below. They can be used for both academic or commercial training.
www.ashemery.com/dfir.html
www.ashemery.com/dfir.html