David Cowen @HECFBlog
Co-Author SANS FOR509, Vice President @ https://t.co/whEvYHKz6R wrote some books a long time ago, fights fires in the cloud. Views expressed are my own. hecfblog.com Dallas, Texas Joined January 2011-
Tweets7K
-
Followers14K
-
Following913
-
Likes2K
This years National CCDC Awards Ceremony, including my red team debrief, are streaming live today youtube.com/live/iYqfoGqIv…
0
0
1
810
1
View Details
It's Sunday! This week let's provide a lower barrier of entry challenge all around testing web browser password extractors and the artifacts they leave behind! Win a $100 Amazon Gift Card! #dfir #sundayfunday hecfblog.com/2025/04/daily-…
If you ever needed or wanted to have continuous egress testing of your secured environments with the ability to be easily notified and that uses attacker techniques this is the new tool for you!
This is place for this kind of thing right? I'm launching a new product 🎉. If you have ever wanted to test your network egress rules, puck is here to help you find your network leaks. It would mean a lot to me if you clicked through to check it out. puck.tools/blog/introduci…
David Cowen retweeted
I didn't know that I needed to be able to turn random album covers into mupptes, but here we are.
It's Sunday! This week is a WSL/Docker themed challenge great for beginners! #dfir hecfblog.com/2025/04/daily-…
Forensic Lunch Test Kitchen 4/4/25 - Replit AI Coding! x.com/i/broadcasts/1…
Hey #dfir win $100 for doing some cloud log delay testing in this weeks Sunday Funday challenge! hecfblog.com/2025/03/daily-…
Forensc Lunch Test Kitchen 3/14/25 x.com/i/broadcasts/1…
Forensic Lunch Test Kitchen 3/13/25 x.com/i/broadcasts/1…
Forensic Lunch Test Kitchen 3/11/25 x.com/i/broadcasts/1…
David Cowen retweeted
Forensic Lunch Test Kitchen 3/7/25 x.com/i/broadcasts/1…
You still have time to submit to this week's Sunday Funday challenge! hecfblog.com/2025/03/daily-…
Forensic Lunch Test Kitchen 3/6/25 x.com/i/broadcasts/1…
Forensic Lunch Test Kitchen 3/4/25 x.com/i/broadcasts/1…
It's another Sunday Funday! Try your talents at solving this week's Microsoft 365 UAL challenge. hecfblog.com/2025/03/daily-…
David Cowen retweeted
New blog post: Gotta Captcha Them All! Leveraging yara rules to find FakeCaptcha URLs and other assorted badness sketchymoose.blogspot.com/2025/03/gotta-… #yara #virustotal #dfir
Forensic Lunch Test Kicthen 2/28/25 x.com/i/broadcasts/1…
Forensic Lunch Test Kitchen 2/27/25 x.com/i/broadcasts/1…
Forensic Lunch Test Kitchen 2/26/25 x.com/i/broadcasts/1…
Jake Williams @MalwareJake
149K Followers 2K Following Breaker of software | VP R&D @hunterstrategy | CTI/DFIR | @ians_security faculty | Bookings: jake at malwarejake dot com | GSE #150 | He/him
SANS DFIR @sansforensics
111K Followers 104 Following The world's leading Digital Forensics and Incident Response provider. This feed updates you on latest DFIR news, events, and training.
Ali Hadi | B!n@ry @binaryz0ne
35K Followers 569 Following DFIR and Adversary Simulation | All posts reflect the views and interests of the person behind this account only |
4n6lady @4n6lady
62K Followers 660 Following #DFIR & #BlueTeam | IR & Threat Detection | #OSINT enthusiast | waiting for HL3 | AWS CIRT - my views are my own
Chris Sanders 🔎 �... @chrissanders88
35K Followers 487 Following Ed.D. | Founder @networkdefense @RuralTechFund | Former @Mandiant, DoD | Author: Intrusion Detection Honeypots, Practical Packet Analysis, Applied NSM
mRr3b00t @UK_Daniel_Card
123K Followers 8K Following Department of Cyber WAR. Member of the Counter Spider Collective. Wielder of AI to defend in Cyber Space. Ralph Vibe Specialist. VibeOps Operator!
Heather Mahalik Barnh... @HeatherMahalik
23K Followers 1K Following DFIR, Faculty Fellow & author, #FOR585 #FOR500, wife, mama, researcher, USAF. Trust but validate. Thoughts are mine.
Stephan Berger @malmoeb
29K Followers 1K Following Head of Investigations @InfoGuardAG https://t.co/A5lnFAu7eX
Chad Tilbury @chadtilbury
22K Followers 599 Following Digital forensics and incident response. Ex-AFOSI, Mandiant, and CrowdStrike. SANS Institute Fellow and co-author of #FOR500 and #FOR508 courses.
Katie Nickels @likethecoins
55K Followers 3K Following Director of Intel at @redcanary. SANS Certified Instructor for FOR578: CTI. Senior Fellow at @CyberStatecraft. She/her. Mastodon: @[email protected]
strandjs - strandjs@b... @strandjs
46K Followers 2K Following I will light the way by the bridges I burn. Retired Senior SANS Instructor IANS Faculty Black Hills Information Security Active Countermeasures
Eric Capuano - Bsky: ... @eric_capuano
11K Followers 3K Following Co-Founder @recon_infosec | SANS DFIR Instructor | IANS Faculty | https://t.co/yUXCSu2Yso | ⬡ ❤ @shortxstack
Nicole Beckwith @NicoleBeckwith
42K Followers 7K Following Sr. Director, Security Engineering and Operations @cribl_io
Phill Moore @phillmoore
9K Followers 3K Following This Week in 4n6 // ThinkDFIR https://t.co/vLyL2sgQsy I might not know much, but I do know how to Google Tweets are mine
Kevin 🤖🕵️🍺 @KevinPagano3
4K Followers 583 Following 🕵🏼♂️ @stark4n6 🎴 Shiny cardboard collector 🍺 Resident beer drinker
edskoudis @edskoudis
62K Followers 322 Following President SANS Technology Institute College. SANS Fellow. CEO @CounterHackSec. @RSAConference Keynoter. IANS Faculty. BoD @manasquanbank & https://t.co/WD7vkoH5lH.
Tim Medin @TimMedin
18K Followers 594 Following Kerberoast Guy • @RedSiege CEO • IANS Faculty • Former SANS SEC560 Author, Senior Instructor • Packers Owner #GoPackGo • Work Req: https://t.co/ALJldLMDfZ
Mike Felch (Stay Read... @ustayready
17K Followers 2K Following Offensive @ TrustedSec | Hacking since Renegade BBS backdoors | Prior CrowdStrike/BHIS | In Christ's grip | Fighter for truth | K1HAQ
Ryan "Chaps" Chapman @rj_chap
8K Followers 3K Following Threat Hunter. DFIR & Malware Analyst. @sansforensics Author (FOR528) & Instructor (FOR610). Husband & father. Retro gamer too! Comments = own.
DFIR Training @DFIRTraining
18K Followers 412 Following The official DFIR Training account and most complete #DFIR online resource. Managed by @Brett_Shavers.
WaldoBhai @WaldoBhai
40 Followers 1K Following Tweeting things security/socio-political related. Occasionally some tech and other bits and bobs...
Digital Forensic Audi... @DForensicAudit
3 Followers 55 Following Digital Forensic Audit. Cryptography & Steganography analyst. Technical auditing of complex systems & pattern decryption. Open Source Tool Developer. DM open.
atareco @gofion34
37 Followers 52 Following
Cyber Defense X @poplamom
21 Followers 387 Following
Iván Jhon Jiménez F... @N4v1_JF
0 Followers 10 Following
hexwayman @hexwayman
1 Followers 230 Following Aspiring Cloud Forensics Investigator Working on removing the "aspiring" part of it.
dabltrabl @dablbre
18 Followers 284 Following
@Blu3Ops @Blu3Ops
11 Followers 851 Following
Nicocollins jr @Nicocollin15070
0 Followers 57 Following
evans kibuyu @EKibuyu
388 Followers 4K Following
Abhilash Katragadda @AbhilashKatrag1
3 Followers 155 Following
NeelBit @NeelBit
804 Followers 6K Following #developer #trainee. Siempre intentando aprender algo nuevo. Geek suburbano. En proceso de #desarrollador. #Descentralización y derecho a #privacidad
Tosyn Meek @godsyd55
595 Followers 7K Following YorubaBoy🇳🇬/Photography/Culture and art/IG:TosynMeek/AfroBeats https://t.co/jHwqe6LGz9
RSN @1R0SEN
13 Followers 495 Following
jaime @jaime5849061051
1 Followers 29 Following
chai van @chaivan7722
8 Followers 282 Following
Subash Jaganathan @subash_0fficial
56 Followers 368 Following உள்ளுவதெல்லாம் உயர்வுள்ளல். | Computer Hacking Forensic Investigator👨💻🔎|Cyber Crime Investigator |Ethical Hacker| lngenious| DFIR| #hacktivist #entepreneur
Soo-jin Choi (최수�... @0xSoojin
67 Followers 330 Following sophie | principal threat researcher | author | re | dev | glitch art | cyberpsycho | binary baddie | $BTC Long
🇨🇵 🛡️ N!K0... @_ShomKaR
85 Followers 1K Following Team Lead SOC || DFIR Lover || Padawan in BB || Born to be root, not to reboot .....
Jeff McNear @jtmcnear
62 Followers 2K Following
Eren Yeager @its_Yeager0100
2 Followers 1K Following
Muhammad Auwal Usman @MuhammadAu59194
2 Followers 36 Following
Amer Blboheath @ABlboheath
0 Followers 104 Following
cyber news @linaadamna
12 Followers 185 Following
Prout Prout KK KK @KKProut
3 Followers 1K Following
KHALID 🤓 @caliphate494
51 Followers 600 Following Computer Engineer || cybersecurity student | Bridging the gap between hardware/software & security protocols.#OSINT #DFIR
Tomasz @Tomasz833415
165 Followers 3K Following
krishna @meanmach
10 Followers 381 Following
Stella Pyane @PyaneStell73631
4 Followers 184 Following
Nafees Ahmad @nafeesahmad55
2 Followers 271 Following
vijaykumar @vijayvijjup
2 Followers 208 Following
Osondu Godswill chine... @godswillomeber1
35 Followers 548 Following 🚀 Cybersecurity Analyst in training 🎓 Electrical Eng. Diploma (MenueL Tech Co.) 🔑 Introduced to Cybersecurity — 2023 🛡️ Professional training 2025
David Bombal @davidbombal
182K Followers 756 Following YouTube: https://t.co/xGPVEj6ULN Discord: https://t.co/GZI30F45va Website: https://t.co/MpcS9ylBrV
🇺🇸 Martin Reyes... @MartinReyes40
593 Followers 3K Following La capacidad de aprender es un regalo. La abilidad de aprender es un arte. La voluntad de aprender es una eleccion ..... Brian Herbert
Piotr P @App32Piotr
14 Followers 448 Following
Matrix @OSINT_Matrix
4 Followers 147 Following
Orlerkrig @Orlerkrig6938
42 Followers 2K Following
Arun @Arunkumar_P_P
4 Followers 54 Following
YangSoon @RavelonjatovoG
3 Followers 303 Following
Blue lagoon @blue_lagoon9
0 Followers 200 Following
mmjv @m_m_j_v
0 Followers 61 Following
Florian Roth ⚡️ @cyb3rops
221K Followers 3K Following Head of Research @nextronsystems #DFIR #YARA #Sigma | detection engineer | creator of @thor_scanner, Aurora, Sigma, LOKI, YARA-Forge | always busy ⌚️🐇 | vi/vim
Jake Williams @MalwareJake
149K Followers 2K Following Breaker of software | VP R&D @hunterstrategy | CTI/DFIR | @ians_security faculty | Bookings: jake at malwarejake dot com | GSE #150 | He/him
SANS DFIR @sansforensics
111K Followers 104 Following The world's leading Digital Forensics and Incident Response provider. This feed updates you on latest DFIR news, events, and training.
Ali Hadi | B!n@ry @binaryz0ne
35K Followers 569 Following DFIR and Adversary Simulation | All posts reflect the views and interests of the person behind this account only |
Mick Douglas 🇺🇦... @bettersafetynet
32K Followers 575 Following Consultant for InfoSec Innovations | @SANSInstitute Principal Instructor | @IANS_Security Faculty | I like information security. How about you?
Chris Sanders 🔎 �... @chrissanders88
35K Followers 487 Following Ed.D. | Founder @networkdefense @RuralTechFund | Former @Mandiant, DoD | Author: Intrusion Detection Honeypots, Practical Packet Analysis, Applied NSM
Heather Mahalik Barnh... @HeatherMahalik
23K Followers 1K Following DFIR, Faculty Fellow & author, #FOR585 #FOR500, wife, mama, researcher, USAF. Trust but validate. Thoughts are mine.
Chad Tilbury @chadtilbury
22K Followers 599 Following Digital forensics and incident response. Ex-AFOSI, Mandiant, and CrowdStrike. SANS Institute Fellow and co-author of #FOR500 and #FOR508 courses.
Katie Nickels @likethecoins
55K Followers 3K Following Director of Intel at @redcanary. SANS Certified Instructor for FOR578: CTI. Senior Fellow at @CyberStatecraft. She/her. Mastodon: @[email protected]
strandjs - strandjs@b... @strandjs
46K Followers 2K Following I will light the way by the bridges I burn. Retired Senior SANS Instructor IANS Faculty Black Hills Information Security Active Countermeasures
Eric Capuano - Bsky: ... @eric_capuano
11K Followers 3K Following Co-Founder @recon_infosec | SANS DFIR Instructor | IANS Faculty | https://t.co/yUXCSu2Yso | ⬡ ❤ @shortxstack
Nicole Beckwith @NicoleBeckwith
42K Followers 7K Following Sr. Director, Security Engineering and Operations @cribl_io
Phill Moore @phillmoore
9K Followers 3K Following This Week in 4n6 // ThinkDFIR https://t.co/vLyL2sgQsy I might not know much, but I do know how to Google Tweets are mine
Kevin 🤖🕵️🍺 @KevinPagano3
4K Followers 583 Following 🕵🏼♂️ @stark4n6 🎴 Shiny cardboard collector 🍺 Resident beer drinker
edskoudis @edskoudis
62K Followers 322 Following President SANS Technology Institute College. SANS Fellow. CEO @CounterHackSec. @RSAConference Keynoter. IANS Faculty. BoD @manasquanbank & https://t.co/WD7vkoH5lH.
SANS Institute @SANSInstitute
193K Followers 412 Following SANS is the most trusted and by far the largest source for information & cyber security training, certification and research in the world.
Tim Medin @TimMedin
18K Followers 594 Following Kerberoast Guy • @RedSiege CEO • IANS Faculty • Former SANS SEC560 Author, Senior Instructor • Packers Owner #GoPackGo • Work Req: https://t.co/ALJldLMDfZ
Ryan "Chaps" Chapman @rj_chap
8K Followers 3K Following Threat Hunter. DFIR & Malware Analyst. @sansforensics Author (FOR528) & Instructor (FOR610). Husband & father. Retro gamer too! Comments = own.
DFIR Training @DFIRTraining
18K Followers 412 Following The official DFIR Training account and most complete #DFIR online resource. Managed by @Brett_Shavers.
ippsec @ippsec
123K Followers 365 Following
Brian Maloney @bmmaloney97
3K Followers 622 Following "Distrust and caution are the parents of security." - Benjamin Franklin
Michael Burry Stock T... @burrytracker
516K Followers 137 Following Tracking hedge funds and Burry’s stocks. Powered by @joinautopilot
Edith Santos @santose462
5 Followers 53 Following
Altoid0 @Altoid0day
72 Followers 115 Following Security Engineer | bottleneck dev | cyber competition enjoyer
Andrew Cook @whoisAndrewCook
144 Followers 156 Following Finding and stopping threats one day at a time, @Recon_InfoSec SecOps. Threat Hunting. Incident Response.
Turbinia @TurbiniaProj
62 Followers 4 Following Automation and Scaling of Digital Forensics Tools. Turbinia is an open-source framework for deploying, managing, and running distributed forensic workloads.
Kevin Holvoet @digihash
2K Followers 850 Following Cyber Threat Research Lead @CCB_Belgium/@CCBalert | #FOR578: #CTI @SANSInstitute instructor | @CuratedIntel | loves to try new things: food, beer whisky, etc.
Joshua Wright @joswr1ght
27K Followers 563 Following Hacker for @counterhacksec and SANS Faculty Fellow. Pirata informático. Photography at https://t.co/Qbh3jsSKAJ. He/him.
Korstiaan @KorstiaanS
474 Followers 324 Following Founder of Invictus Incident Response @InvictusIR | DFIR enthousiast | https://t.co/qgFI02Nro1
Invictus Incident Res... @InvictusIR
2K Followers 32 Following Helping organizations respond to cyber incidents in the cloud | 🆘 24/7 support https://t.co/zfF62gimvm | 📚 Academy https://t.co/GH0u8tmjXJ
John Lambert @JohnLaTwC
42K Followers 819 Following Corporate Vice President, Security Fellow, Microsoft Security Research, johnla(AT)https://t.co/3dGtq71Nby
Vitali Kremez @VK_Intel
43K Followers 86 Following Ethical Hacker | Reverse Engineer | CEO @AdvIntel | Malware Course Author "Zero2Hero" / "Zero2Automated" | Former .gov Cybercrime | Threat Seeker Award
Shellter @shellterproject
5K Followers 2 Following AV Evasion Artware || Shellter v7.2 - Executable SHA256: ea07a52eca82b6383c7aa224652e55e0d1701f0779def736977ecadff819049c || Shellter Elite || Dev: @kyREcon
Caleb Queern @HttpSecHeaders
661 Followers 942 Following @KPMG_US | Co-author of Investments Unlimited | @losVerdesATX | BJJ black belt. Views expressed are my own.
trevrosen@bluesky @trevrosen
478 Followers 798 Following snark | supply chain sec @GitHub | @projectsigstore TSC | opinions all mine
Patrick @Beav_Patrick
1K Followers 2K Following U.S. Federal Platform Consultant @ Magnet Forensics. Marine Corps Cyber Aux team. Marine Corps Veteran. Former Detective 🕵️♂️ Opinions are my own 👨🏼💻
Megantron (@megan@inf... @megan_roddie
6K Followers 4K Following Detection Engineer. Co-Author, SANS FOR509. Author, Practical Detection Engineering. @HackersHealth CFO. Ammy Muay Thai fighter/coach. #ActuallyAutistic.
Puru Saxena @saxena_puru
397K Followers 147 Following Founder - AlphaTarget. Previously, Founder + Portfolio manager of money management firms in Hong Kong. House & Techno DJ. No investment advice.
Richard Drinkwater @fftsf
124 Followers 932 Following
Mary Braden Murphy @marybraden_m
69 Followers 94 Following DFIR consultant • Cat enthusiast • First name: Mary Braden • Views are my own
Drew Luckenbaugh @drewmyles15
261 Followers 251 Following
Jenna McLaughlin @JennaMC_Laugh
35K Followers 4K Following @NPR cybersecurity correspondent. I don't regularly use this account.
Noah Barsky @NoahBarsky
293 Followers 162 Following Graduate Business and Executive Education Faculty, Villanova University (USA) ◈ Cutter Consortium Fellow ◈ Forbes Contributor
Peter @vptrms
129 Followers 1K Following The quieter you become, the more you’re able to hear. #Incident response #dfir #infosec #Digital #forensics #sdr #entra id #conditional access
Abe Abrams @creightonabe
92 Followers 325 Following Marketing & Communications for Stephens, Tar Heels, History, Poly Econ: La Dolce Vita! Views my own. Re-tweets and follows NOT endorsements. DMs open (NTTAWWT)
Brittney Argirakis @brittneylynae
227 Followers 196 Following Digital Forensicator, Incident Responder, Fitness Enthusiast #DFIRfit | GCFA | GCFE | GASF | GREM
Gigs @ Shmoo @Gigs_Security
2K Followers 715 Following not aspiring to be humble▪️ #AdvancedPractices🦅 ▪️Thoughts are my own ▪️She|Her|Gigs
Dual Core @dualcoremusic
111K Followers 70 Following International hip hop duo. int eighty (@int0x80) & c64 (@c64music). Booking and commissions: [email protected]. Legacy blue check
Mike Williamson @forensicmike1
2K Followers 2K Following @MagnetForensics DFIR, RE, AI, C#, cloud stuff. Opinions are my own.
Shanna Niggans 🦄 @fancy_4n6
4K Followers 2K Following Digital forensics & incident response #DFIR + #CTI | Horse and Dog mum | Co-host @ComfyConAU | @torincybergroup | RB/SCP for @BlackHatEvents & @BSidesMelbourne
Ashley Martin @ashleyAmartin
28 Followers 89 Following
. @4n6Bexaminer
1K Followers 772 Following
The Real STEM Sadie �... @stem_sadie
651 Followers 391 Following Cryptanalyst, DFIR, & OSINT | cat mom | meme-maker | blogger | public speaker | #Neurodiversity in #CyberSecurity | #HAE #PANDAS #FND | opinions==mine
Paula Wlos @PaulaWlos
79 Followers 173 Following Globe trotter, scuba diver, food lover, book reader, oenophile, and have-passport-will-travel kinda gal.
darkdefender @_darkdefender_
1K Followers 558 Following Your one and only source into the scandalous life of a DFIR consultant.
Jared Barnhart @bizzybarney
1K Followers 433 Following Father, forensic analyst, DI Specialist @Cellebrite. Opinions are mine.
ebrandwine @ebrandwine
2K Followers 111 Following Amateur father and husband. Breaker of end mills. Securifier of clouds @AWS. I’m full of opinions, but they’re just mine. BLM
Paco Hope @pacohope
2K Followers 1K Following follow me on https://t.co/SGEHX2mL7v #Security / #Privacy / #Cloud / Music / Cigars • Opinions are my own
DoubleBlak @BlakDouble
969 Followers 76 Following
Heather Adkins - Ꜻ ... @argvee
15K Followers 1K Following VP Security @Google, Co-Author "Building Secure and Reliable Systems" @r00t0wns, Medieval Historian
Josh Lemon @joshlemon
2K Followers 1K Following Chief DIFR at @SoteriaSec_io | @SANSInstitute Principal Instructor | Digital Forensics & Incident Response geek
Chester Le Bron @123Le_Bron
466 Followers 814 Following Cybersecurity Threat Detection & Response | Cloud TDR | Basketball Coach | Opinions are my own | #BlackTechTwitter 🇵🇷
SoFi Investor Relatio... @SoFiIR
16K Followers 230 Following Official Account of SoFi Investor Relations.
Pierre Lidome @texaquila
393 Followers 144 FollowingYou might like
Eric Zimmerman
@EricRZimmerman
19K Followers
Sarah Edwards 👩�...
@iamevltwin
20K Followers
Rob T. Lee
@robtlee
27K Followers
Heather Mahalik Barnh...
@HeatherMahalik
23K Followers
Mari Degrazia
@maridegrazia
8K Followers
SANS DFIR
@sansforensics
111K Followers
volatility
@volatility
23K Followers
Will Schroeder
@harmj0y
49K Followers
DFIR Training
@DFIRTraining
18K Followers
Phill Moore
@phillmoore
9K Followers
Lenny Zeltser
@lennyzeltser
50K Followers
edskoudis
@edskoudis
62K Followers
Joshua Wright
@joswr1ght
27K Followers
Roberto Rodriguez �...
@Cyb3rWard0g
26K Followers
Jamie Levy🦉
@gleeda
10K Followers