All slides for presentations at #SOCON2024 sponsored by SpecterOps 🇺🇦 are now live! github.com/SpecterOps/pre…

This is a HUGE deal. If you've ever purchased a #BloodHound shirt or otherwise donated to Muscular Dystrophy Association, your money has gone towards making this happen.

I was in a situation where I discovered a complete domain compromise. I needed to provide the client with remediation recommendations, but the available information was scattered and high-level. For that reason, Nico Shyne put together this series:
- posts.specterops.io/domain-of-thro…
-

New post 👇taking a look at compromising Slack access on both Windows and macOS. New BOF included! posts.specterops.io/abusing-slack-…

The HardHat Toolbox is finally ready github.com/HardHatToolbox. It contains Rivet, a demo Asset (Implant) written in Rust, along with the Asset Development repo, which contains detailed step-by-step guides and templates to help get you started on writing custom Assets for HardHat.

You should absolutely check SCCMHunter if you are doing internal Pentests or RedTeamings from Garrett
What a cool tool.
github.com/garrettfoster1…

Join me and Rohan Vazarkar on August 17 from 11AM to noon Pacific for our first BloodHound CE webinar. We will show you:

- How to get started
- Huge performance improvements
- API interaction use-cases

And more. Register here: ghst.ly/3Om0jDo

We are releasing BloodHound Community Edition next week. As part of this release, we are raising money for St. Jude Research.

You can buy your limited edition shirt starting today here: customink.com/fundraising/bl…

Today: join me and Rohan Vazarkar in the BloodHound Slack from 11AM to Noon Pacific for an AMA regarding the upcoming BloodHound CE release.

Not in the BloodHound Slack yet? Get your invite here: ghst.ly/BHSlack

We're thrilled to announce BloodHound Community Edition (CE) -- the next evolution of #BloodHound .

Scheduled for release on 8/8, BloodHound CE has many new features & enhancements, making it easier for users to deploy, manage, and utilize.

Learn more: ghst.ly/458lIGX

I am proud to announce the release of #BloodHound 4.3!

Release blog post: medium.com/p/5795cbf535b2

Limited edition T-shirt: customink.com/fundraising/sp…

Get BloodHound 4.3 NOW at bit.ly/GetBloodHound

Wow, what a crowd today at #FIRSTAMS2023 ! Over 45 people are attending our free Advanced BloodHound workshop in Amsterdam. A great start of the FIRST 2023 Technical Colloquium.

#training #bloodhound

To understand our future, we must study our past.

I am proud to announce the release of #RetroHound !

✅ Runs on Windows 3.1
✅ Backed by an MS Access database
✅ Full NetBEUI & LANMAN support

See it in action here: bit.ly/RetroHound

Skill up, help out. Take one of our six workshops at SO-CON and support the Equal Justice Initiative! ghst.ly/socon2022works…

We here SpecterOps 🇺🇦 just released Ghostwriter v3.0.6! There are great new system health monitoring features. This and the previous release also include some very useful contributions from the community, which I really appreciate♥️

github.com/GhostManager/G…

At SpecterOps 🇺🇦, Emily Leidy and I focus on maturing detection engineering teams. This blog explores our methodology for prioritizing the detection engineering backlog. posts.specterops.io/prioritization…

The latest post in my #OnDetection series explores tool similarity. We know that the hash can determine if two tools are the same or different, but within 'different' there's a range of similarity. 'Synonyms' are a powerful tool to help evaluate this.
posts.specterops.io/on-detection-t…

If this isn't the coolest thing to put on your wall, I can't help you :)
Thx again to Cyb3rD06 for this awesome present, and Andy Robbins, Rohan Vazarkar and Will Schroeder for having invented #BloodhoundAD

Today I got a notification on my phone that YouTube had sent me a copyright report, claiming one of my videos violated copyright and my channel was going to receive a strike.

Except, my video didn't violate copyright. And YouTube didn't really send me a copyright report.

How to prevent Kerberoasting:

Kerberoasting is an incredibly powerful and reliable attack against Active Directory. In some situations it can result in an attacker becoming Domain Admin nearly instantaneously.

Here's how to prevent this attack: 🧵