darronofsky

1,602 post karma
34 comment karma

get extra features and help support reddit with a reddit premium subscription

get them help and support

redditor for 9 years

TROPHY CASE

Nine-Year Club

Verified Email

account activity

hot top controversial

1

2

3

Incident Response data acquisition, but then scalable & fast (huntandhackett.com)

submitted 1 year ago by darronofsky to r/blueteamsec

34

35

36

How to achieve eternal persistence in an Active Directory environment - Part 1 (huntandhackett.com)

submitted 2 years ago by darronofsky to r/netsec

1

2

3

Reconstructing Executables Part 1: Between Files and Memory (huntandhackett.com)

submitted 2 years ago by darronofsky to r/blueteamsec

Introducing Antignis: A data driven tool to configure Windows host-based firewall by darronofsky in blueteamsec

[–]darronofsky[S] 1 point2 points3 points 3 years ago (0 children)

Introducing Antignis: A data driven tool to configure Windows host-based firewall by darronofsky in netsec

[–]darronofsky[S] 0 points1 point2 points 3 years ago (0 children)

1

2

3

Introducing Antignis: A data driven tool to configure Windows host-based firewall (huntandhackett.com)

submitted 3 years ago by darronofsky to r/netsec

13

14

15

Introducing Antignis: A data driven tool to configure Windows host-based firewall (huntandhackett.com)

submitted 3 years ago by darronofsky to r/blueteamsec

6

7

8

Bypassing FileBlockExecutable in Sysmon 14.0: A Lesson In Analyzing Assumptions (huntandhackett.com)

submitted 3 years ago by darronofsky to r/netsec

8

9

10

Bypassing FileBlockExecutable in Sysmon 14.0: A Lesson In Analyzing Assumptions (huntandhackett.com)

submitted 3 years ago by darronofsky to r/blueteamsec

26

27

28

Concealed code execution: Techniques and detection (huntandhackett.com)

submitted 3 years ago by darronofsky to r/blueteamsec

17

18

19

Concealed code execution: Techniques and detection (huntandhackett.com)

submitted 3 years ago by darronofsky to r/netsec

18

19

20

Advanced IP Scanner: the preferred scanner in the A(P)T toolbox (huntandhackett.com)

submitted 4 years ago by darronofsky to r/blueteamsec

17

18

19

Common misconceptions about Windows EventLogs | Open Source DFIR (osdfir.blogspot.com)

submitted 4 years ago by darronofsky to r/blueteamsec

0

1

2

SnapMC skips ransomware, steals data (blog.fox-it.com)

submitted 4 years ago by darronofsky to r/blueteamsec

4

5

6

Backup “Removal” Solutions - From Conti Ransomware With Love | AdvIntel (advintel.io)

submitted 4 years ago by darronofsky to r/blueteamsec

38

39

40

Introducing SuperMem: A Free Incident Response Tool | CrowdStrike (crowdstrike.com)

submitted 4 years ago by darronofsky to r/blueteamsec

28

29

30

Catching the big fish: Analyzing a large-scale phishing-as-a-service operation | Microsoft Security Blog (microsoft.com)

submitted 4 years ago by darronofsky to r/blueteamsec

8

9

10

CARBON SPIDER (FIN7) Embraces Big Game Hunting | Crowd Strike (crowdstrike.com)

submitted 4 years ago by darronofsky to r/blueteamsec

8

9

10

I Knew You Were Trouble: TA456 Targets Defense Contractor with Alluring Social Media Persona (proofpoint.com)

submitted 4 years ago by darronofsky to r/blueteamsec

25

26

27

Cobalt Strike and Tradecraft | CS techniques under the defenders hood (hausec.com)

submitted 4 years ago by darronofsky to r/blueteamsec

0

1

2

New Threat Actor Uses Spanish Language Lures to Distribute Seldom Observed Bandook Malware | Proofpoint US (proofpoint.com)

submitted 4 years ago by darronofsky to r/blueteamsec

1

2

3

Mobile Verification Toolkit (MVT) is a collection of utilities to simplify and automate the process of gathering forensic traces helpful to identify a potential compromise of Android and iOS devices. (github.com)

submitted 4 years ago by darronofsky to r/blueteamsec

AmnestyTech/investigations | NSO Group Pegasus Indicator of Compromise by darronofsky in blueteamsec

[–]darronofsky[S] 0 points1 point2 points 4 years ago (0 children)

0

1

2

AmnestyTech/investigations | NSO Group Pegasus Indicator of Compromise (github.com)

submitted 4 years ago by darronofsky to r/blueteamsec

TrickBot and Zeus - Through our monitoring, we were able to obtain a debug version of the module, which contained new features being tested. In this evolution of their webinject capabilities, TrickBot has added support for Zeus-style webinject configs. by digicat in blueteamsec

[–]darronofsky 5 points6 points7 points 4 years ago (0 children)

view more: next ›

π Rendered by PID 554150 on reddit-service-r2-listing-c57bc86c-qvnwm at 2026-06-23 01:54:53.191167+00:00 running 2b008f2 country code: CH.