https://www.microsoft.com/en-us/security/blog/2023/04/27/why-you-should-practice-rollbacks-to-prevent-data-loss-in-a-ransomware-attack/

DeviceProcessEvents
| where InitiatingProcessFileName =~ “wscript.exe”
| where FileName =~ “Powershell.exe”
| where ProcessCommandLine has_any(“invoke-webrequesr”,”iwr”)

looking for Wscript with a powershell childprocess to execute a payload

https://redcanary.com/blog/tax-season-phishing/

Only just discovered Dark Mode, and must have totally forgot I had it on twitter. 😬

New trailer coming at 12 PM PT for this extraordinary film.

How to get invite codes on Blue Sky! (Unofficial community guide)

☁️ Watch for giveaways from community here & other socials
☁️ Create awesome & authentic content & engage the community & maybe you’ll get some in your box
☁️ Ask friends if they have extras
☁️ Kindly don’t ask team for them
☁️ Wait