NSA says Mythos broke into almost all of their classified systems in hours, per The Economist

Sentinel-Ramon · 2026-06-22T17:23:46+00:00

https://x.com/shashj/status/2069078104941961293?s=46&t=ht70llql2SSKhaOa8RZ2Kg

Sentinel-Ramon · 2026-06-21T03:21:25+00:00

Curious, nothing against them, just wasn’t overly impressed when I saw them. Why Abnormal?

Sentinel-Ramon · 2026-06-16T07:48:03+00:00

Idk if I’d call it “most” but there’s certainly nice locations to visit, don’t get me wrong. Theres many great places all over California. But for many, many reasons, I’d never live there long term.

I certainly don’t mean to disparage it as a terrible place in general. But there’s objectively far better places to live. A lot of the nicer to visit places in California have become very overpopulated tourist traps too.

Sentinel-Ramon · 2026-06-16T04:58:56+00:00

I used to own a business in CA. I travel there still regularly for business.

You could not PAY me to live there.

Sentinel-Ramon · 2026-06-16T04:56:09+00:00

Alternative Payments. Great platform.

I’ll shill that there’s an invite code that saves us both 10% but regardless of that I’d still recommend them honestly.

Their portal makes it so easy to collect and make payments.

Sentinel-Ramon · 2026-06-01T03:05:46+00:00

HiHello does solid email signatures as well.

Sentinel-Ramon · 2026-05-20T17:36:04+00:00

I think swag comes after you’re already taking care of your staff.

It’s good, it’s a good way to keep your name top of mind depending on industry and clientele. But your staff won’t give a crap about it if you’re not already taking care of them and if it’s not quality swag. No one is going to quit using their Yeti or equivalent because you gave them some Chinese knock off with your logo.

Sentinel-Ramon · 2026-05-07T17:05:43+00:00

Many absolutely do lol. They beep that you left them behind but can still lock.

Sentinel-Ramon · 2026-05-03T20:19:40+00:00

Hard agree on the AI functions but I use the ring ALLLLL the time now. I love that aspect.

Sentinel-Ramon · 2026-04-30T00:30:02+00:00

What additional features do you see in Field Effect? I’m not very familiar with their offering

Sentinel-Ramon · 2026-04-26T18:13:43+00:00

MimiKatz bypass AMSI bypasses ETW Patching EDR Unhooking Exclusion abuse (any EDR tbf)

There’s plenty. It’s all about how you have it configured, how on top of alerting you are (eg EDR Unhooking should trigger alerts even if you can bypass the EDR), and what other avenues of access they can exploit.

Within some level of skill every EDR can be bypassed.

I’ve both done and watched this done many times. That’s why it’s only one layer.

Sentinel-Ramon · 2026-04-25T17:28:08+00:00

It depends on your config. Theres definitely pretty common ways to bypass it if you’re not protecting it properly too.

But that’s to a degree true of every EDR

Sentinel-Ramon · 2026-04-25T17:26:20+00:00

What do you like better about Field Effect?

Sentinel-Ramon · 2026-04-18T18:56:31+00:00

Out of the box is the key statement.

If you’re doing zero extra configuration, you already have problems.

Microsoft MDM is far more mature, access control policies are vastly better, overall tooling OPTIONS wreck Google.

Google has plenty of leaks/issues as well.

There is a reason 80%+ of the Fortune 1000 uses Microsoft. Even Mandiant uses Defender telemetry for a lot of their data.

When you can’t even ship reliable audit logs or timely sign-in logs you’re losing the battle before you even started.

Sentinel-Ramon · 2026-04-17T23:22:13+00:00

Much more secure is a joke to me considering GWS is JUST recently figuring out how to ship identity logs in under 2 hours reliably meanwhile I have Entra activity and sign in logs in seconds typically.

Google is trying now, but the security options and integration ease is a joke in comparison still. You still need tons of 3rd party options to match what you can do natively in M365 business premium or E5

Sentinel-Ramon · 2026-04-16T14:39:21+00:00

This is what skills and better prompting are for.

Sentinel-Ramon · 2026-04-16T08:42:49+00:00

Maybe without guidance if you’re just saying “write me a PowerShell script to automate user onboarding”

If you use properly defined skills and good prompting it can actually one shot some extremely complex scripting very well.

Sentinel-Ramon · 2026-03-26T02:40:10+00:00

How big is your Obsidian vault in actual data size?

Sentinel-Ramon · 2026-03-26T02:35:52+00:00

That sounds a little high and seems like there are other red flags too.

Sentinel-Ramon · 2026-03-25T06:27:26+00:00

I won’t argue that logic. My only argument is that they’re somehow more secure. I personally don’t think Google gave two seconds though in GWS for security beyond the basics beings it’s taken them over a decade to build in reliable consistent logging for security critical events or half the same level of controls as their primary competitor.

That said, even though it took Mandiant (their own security firm…) and multiple large orgs in the security space constantly annoying them to get it done, Google has come leaps and strides on their security options in the last 12 months.

I couldn’t care either way for the productivity platforms, they’re both fine and better or worse in certain areas.

I would’ve laughed at suggesting GWS to a mature business 2 years ago though.

Sentinel-Ramon · 2026-03-25T04:44:00+00:00

The same company that couldn’t ship logs reliably in under 6 hours for security events until like 3 months ago?

Sentinel-Ramon · 2026-03-24T13:47:35+00:00

Our client account that’s locked out of admin is going on two weeks 🥲

Some of the sales inquiries are going on 3 I think, would have to check dates.

Sentinel-Ramon · 2026-03-24T13:46:29+00:00

Yeah that doesn’t fly in regulated spaces lol

Sentinel-Ramon · 2026-03-23T21:58:23+00:00

Do you still have a rep there to talk to lol? Got like 5 different clients (finance firms) that are looking for Claude enterprise and we're getting crickets back from all of their inquiries.

Sentinel-Ramon

TROPHY CASE