Jorge Orchilles
jorgeorchilles.bsky.social
Jorge Orchilles
@jorgeorchilles.bsky.social
710 followers 46 following 3.8K posts
SANS Principal Instructor & Author #SEC565 | #RedTeam | #PurpleTeam | #PenTest | #C2Matrix Creator | ATT&CK & Atomic Red Team Contributor | Published Author
Posts Media Videos Starter Packs
At VulnCon this week, if you are here, say hi. Already got a ton of value from this conference: did an SBOM workshop, a couple VEX talks from folks leading that effort in Cisco and Nvidia, and of course AI. Looking forward for the next few days!
Formula 1 is back! If you played last year, you can rejoin without a passcode. If you would like to play, set up a team at fantasygp.com and DM me for the code to join #InfoSecF1
Reposted by Jorge Orchilles
Threat intelligence is about more than just regurgitating indicators you found in someone else's reports.

If this is your idea of "threat intelligence" then AI is 100% coming for your job.
Why did we try to learn *nix with this distro? So hard headed, such a good decision though!
Didn't know you were on here, searched by another name :P
This would be awesome! Probably after given some folks are taking training. I am still planning logistics but know a few folks may be down @securepeacock.bsky.social
Reposted by Jorge Orchilles
FalconHound 1.4.2 is out!

* Added Managed identity authentication for Azure based inputs (KeyVaults, MDE, Sentinel, GraphAPI)
* Added report command line option and actions
* Added HTML output option

Grab it here > github.com/FalconForceT...
Releases · FalconForceTeam/FalconHound
FalconHound is a blue team multi-tool. It allows you to utilize and enhance the power of BloodHound in a more automated fashion. It is designed to be used in conjunction with a SIEM or other log ag...
github.com
Amazing shots! Thanks for sharing! Going to add to my bucket list along with Ferrari. We have done the BMW museum and factory in Munich and loved it
Reposted by Jorge Orchilles
Wicked pumped for our community to have won the SANS Difference Makers award 2024 "Podcast of the Year"

Community, Cyber, Coffee, and Carl
Reposted by Jorge Orchilles
The Paranoids @ Yahoo was one of the oldest, largest, and highest reputation internal security teams in the industry.

A lot of good talent was built and trained there.

This is a shame.
Reposted by Jorge Orchilles
Reposted by Jorge Orchilles
Purple Team metrics can be tough and conflated with BAS testing so here’s a few, but feel free to add your own in the comments.
1. Engagements with SOC per year/quarter.
2. Intel leads tested.
3. Custom tests to verify detection logic.
4. Request for testing completed %
Reposted by Jorge Orchilles
You won't always win. That's okay.

The goal is to win as many as you can and learn as much as you can from the ones you lose.
Hi friends! Just switched over. Please connect so I can follow you back!
This was before lights out. I took the pic and called it. #F1 #MexicoGP
I first met @bsdaemon when I was randomly put on the BRA (Brasil) team at Hack Cup too many years ago (we went on to win and get free tickets to INFILTRATE). I had no idea who he was other than just a kind, fun dude that played soccer. Here is his profile:...
We need to reset expectations. LLMs are not "discovering" novel attacks or 0days. They are lowering the barrier for entry for all types of hackers. Embrace it, let it help you. Criminals already are: https://thehackernews.com/2024/04/microsoft-warns-north-korean-hackers.html
Microsoft Warns: North Korean Hackers Turn to AI-Fueled C...
North Korea's state-linked hackers are enhancing their op...
thehackernews.com
Spotted @BSidesTampa Learning some more Azure stuff with @SecurePeacock and a nice little demo @mrgretzky may recognize the tool