TropChaud @IntelScott

Reluctant security & intelligence practitioner and tool developer. Mainly Tweets about aggregating and visualizing cyber threat & OSINT datasets tropchaud.github.io Joined September 2018

Tweets

529
Followers

1K
Following

585
Likes

735

TropChaud @IntelScott

2 years ago

@BushidoToken @jamieantisocial Added here! app.tidalcyber.com/technique/f57c… We’ll also have an ArcaneDoor Campaign added by end of the week/first of next Really strong updates from ATT&CK this round 💪

1 0 1 96 0

View Details

TropChaud @IntelScott

2 years ago

@Sector035 @dutch_osintguy @CraigSilverman @wondersmith_rae @WebBreacher @hatless1der @davidbombal @BanPangar Thanks for the shoutout, welcome back!

0 0 2 149 0

View Details

TropChaud @IntelScott

2 years ago

I’ve tracked thousands of #OSINT resources over a half-decade via the MetaOSINT project. Here are my thoughts on how the dataset’s evolution might reflect broader trends & changes in the underlying info landscape during a time of major global disruption: metaosint.github.io/2023-osint-tre…

0 4 15 3K 3

View Details

TropChaud @IntelScott

3 years ago

MetaOSINT v3.0 is live! The first major update in over a year brings 8,000 new resources to the tool, more than doubling the previous tally. But structured categories & citation counts still make it easy to surface popular, relevant #OSINT resources: metaosint.github.io

0 17 42 5K 25

View Details

TropChaud @IntelScott

3 years ago

Long-overdue update (largest yet) to my #OSINT-focused project MetaOSINT coming soon! Adding a ton of new, timely resources to the database while maintaining its hallmark ease of use. Brush back up before the update lands in the coming days: metaosint.github.io

0 8 30 6K 19

View Details

TropChaud @IntelScott

3 years ago

@simonekrausora1 On using the many free resources from @MITREengenuity @MITREattack @CISAgov @TidalCyber & more to refine threat-informed defense workflows @FIRSTdotOrg #FIRSTCTI23 conference in Berlin

0 2 9 460 0

View Details

craig newmark @craignewmark

3 years ago

Taking a data-driven approach, @GlobalCyberAlln and @TidalCyber 's recent report validates the significant impact basic #cyberhygiene measures have in defense against the most relevant #ransomware methods of attack against #SMBs. Learn more at globalcyberalliance.org/reports_public…

0 4 4 1K 0

View Details

TropChaud @IntelScott

3 years ago

@TidalCyber @QCCornCON @advemuian

0 0 3 64 0

View Details

TropChaud @IntelScott

3 years ago

The rich detail in recent threat reporting is an extremely welcome trend. But the reality is that longer/denser reports can place more burden on teams, if they’re attempting to (or leadership expects them to) thoroughly process each one

1 0 0 225 0

View Details

TropChaud @IntelScott

3 years ago

If you've felt like it's taking longer to get through a typical CTI report lately, you're not wrong

1 1 6 589 0

View Details

Tidal Cyber @TidalCyber

3 years ago

Meet us in Iowa at the 2023 @QCCornCON on 10/5-7. @advemuian will be presenting "Using ATT&CK for Threat Profiling, Defensive Stacks, and Coverage Maps" and "Mind the Gap: From CTI to Defensive Improvements." Use code "TID25" for 25% off! corncon.net #mitreattack

0 2 5 656 0

View Details

TropChaud @IntelScott

3 years ago

@jamieantisocial Big hill to climb but confident they’ll summit 🫡

0 0 0 45 0

View Details

TropChaud @IntelScott

3 years ago

@jamieantisocial A lot to be said for the Evals transparency 🙏

1 0 1 138 0

View Details

TropChaud @IntelScott

3 years ago

Wholeheartedly believe that most in the #threatintel, #detectionengineering, and #adversaryemulation spaces can benefit by bookmarking this free-to-use tool as we push regular updates into the platform

Tidal Cyber @TidalCyber

3 years ago

We added tons of content across our free Community Edition this week, including #BlackCat/#ALPHV & #ScatteredSpider tool & TTP collections and updates to @elastic & Atomic Red Team capabilities in our Product Registry: app.tidalcyber.com #ThreatInformedDefense

0 6 9 2K 4

0 0 3 441 0

View Details

TropChaud @IntelScott

3 years ago

@rafaelgrobinson Thanks for sharing! So glad it was useful

0 0 1 9 0

View Details

TropChaud @IntelScott

3 years ago

@Cyb3rMonk Important points worth remembering. It will always be reactive by nature, but we see a lot more timely, TTP-focused CTI these days, and we've started to capture it in our knowledge base to help address the recency gap (some good examples on our homepage: app.tidalcyber.com)

0 0 2 152 1

View Details

Josh++ @josh_murchie

3 years ago

4 13 81 11K 3

View Details

Tidal Cyber @TidalCyber

3 years ago

NEW Community Edition content derives from @CISAgov's detailed new advisory. Start w/ the new Campaign object, pivot to dozens of new & updated Tools, Malware, & @MITREattack Technique relationships just added: app.tidalcyber.com/campaigns/d25f…

0 5 6 424 1

View Details

TropChaud @IntelScott

3 years ago

The value here is organizing the exercise around a recent, prominent threat - recently enhanced Search in @TidalCyber Community Edition helps quickly surface relevant content, & pivoting on mapped @MITREattack techniques expands focus to include variations on observed procedures

0 1 4 165 0

View Details

TropChaud @IntelScott

3 years ago

A set of mini purple team exercises involved a typical cast of characters including @redcanary #AtomicRedTeam tests + @sigma_hq rules run via Chainsaw on logs configured via @olafhartong's Sysmon-Modular config Ultimately we contributed a new test aligned with an existing rule

1 1 2 177 0

View Details

TropChaud @IntelScott

3 years ago

New blog is out, walking through practical workflows for detecting & testing persistence behaviors used by #FlaxTyphoon #APT, entirely via free/community resources tidalcyber.com/blog/detecting…