William • SOC and Detection Engineering
@williamincyber.bsky.social did:plc:2g44rjq6jsceyv23i6m3j2mn
ISC2 CC | Building toward Tier 1 SOC and Detection Engineering | Hands-on investigations with Splunk, Wazuh and Sigma | Documenting what I learn
Sur Bluesky depuis le
- Abonnés
- 104
- Abonnements
- 96
- Posts
- 1 739
- Jours dans les classements
- 0
Résumé
William • SOC and Detection Engineering (@williamincyber.bsky.social) est sur Bluesky depuis le 13 mars 2026. Le compte a 104 abonnés, suit 96 comptes et a publié 1 739 posts.
Présence dans les classements
Les meilleurs jours où les posts de ce compte sont entrés dans le top quotidien de Debya.
Ce compte n’est encore apparu dans aucun classement quotidien.
Posts aimés récemment
J’aime publics du réseau Bluesky.
If Entra sign-ins ever land in your queue: per Microsoft Learn the passwordSpray risk detection only fires once an attacker successfully validates a password - failed spray attempts produce no detection at all, and it needs ID P2. The distribution pattern stays yours to spot.
Voir le postTimestamps save the most arguments later. Photos in a case file work the same way, since noting the source and the date received is what lets someone else trust the copy.
Voir le postJournald is the future. Tons of filtering. Love the issue to filter by unit aka -u ... That service being started logged all that. I was skeptical about systemd and journald at first. Was bitten by AIX binary logging 20 years ago. But journald is well done and integrated.
Voir le postMGM 2023 is the textbook one: Scattered Spider found a staffer on LinkedIn, phoned the help desk as them, and got in within 10 minutes. It cost MGM about $100M. Carriers fall for the same con in SIM swaps, hence our PIN tip: https://worldfootballhub2026.blogspot.com/2026/10/phone-hacked-signs.html
Voir le postAny program that needs external constraints to keep it from doing harmful acts is malware, not an "assistant."
Voir le post
Comptes bloqués
Sur Bluesky, les blocages sont publics.
Ce compte ne bloque personne.