Zapa :thounking: :verified:
trojanfoxtrot@infosec.exchange
<p>Cyber threat vibe-checker.</p><p>All publications here are of my own volition and my opinion, and do not represent the views, opinions, or expressions of my employer. </p><p>Things I am: Light-hearted, sarcastic, inoffensive-ish, objective, a volunteer, kinda vulgar-ish.</p><p>Things I am not: a bot, a liar.</p><p>Hashtags of interest:<br /><a href="https://infosec.exchange/tags/CTI" class="mention hashtag" rel="tag">#<span>CTI</span></a> <a href="https://infosec.exchange/tags/threatintelligence" class="mention hashtag" rel="tag">#<span>threatintelligence</span></a><br /><a href="https://infosec.exchange/tags/threatintel" class="mention hashtag" rel="tag">#<span>threatintel</span></a> <a href="https://infosec.exchange/tags/infosec" class="mention hashtag" rel="tag">#<span>infosec</span>
Posts
-
View post
Personally, I do not give two identical fucks in the world for the OpenAI fiasco. It’s a bunch of AI tech bros who feel that laws do not apply to their “scientific” research. The ensuing FUD is being contributed by those who can’t be bothered to do deeper research further convoluting the facts. You breach companies, you are liable and held to the CFAA. Aaron Swartz, if you don’t know him then look him up, was arrested by MIT police and was facing serious federal charges under the Computer Frau...
-
View post
Pink shirt, come find me and my hair.
-
View post
Had a lot of fun with explaining and talking about PhantomGraph today at Recon Village and Adversary Village. I’ll still meandering LVCCs halls and just talking PhantomGraph with demos. #DEFCON34 #infosec #cybersecurity #AdversaryVillage #ReconVillage
-
View post
I’m curious what my APT group name is now that this memorandum was signed. On the bright side, looks like IPv6 is going to be the standard everywhere.
-
View post
I saw more Osprey bags at DEFCON than at any national park I’ve hiked.
-
View post
PhantomGraph Release Notes v0.13.3 — DFIR-IRIS Case Export (2026-08-30) A case can now be sent straight into DFIR-IRIS as an investigation case, from the button beside Push to MISP. Configure your IRIS server under Settings → Integrations, the same way as MISP. The two exports are deliberately different. MISP receives what is publishable: the indicators PhantomGraph stands behind. IRIS receives what was observed: every URL, host, address, attachment hash and certificate name from the submissio...
-
View post
How NOT to market products.
-
View post
@shaknais mexicorn
-
View post
Kaspersky recently named a Head Mare malware, PhantomGraph. This is probably coincidental, and PhantomGraph malware is not related to the PhantomGraph security product you’ve all grown to know and love. As such, I’ve reached out to Kaspersky to please rename their malware which can cause avoidable collision occupying the same cybersecurity space.
-
View post
I have an unlimited license to Daybreak-Red, Blue, Cyber, and Sol Ultra. Yay
-
View post
I made an agentic CTI tradecraft harness. It’s lightweight, portable, and vendor-agnostic. My boss says we don’t need that. My boss asks to create use cases for AI in CTI. Met with OpenAI engineers. They want to help. I suggested we provide our current workflows and run books, then augment with AI where necessary, not everywhere. They like that approach. I told them about my harness that got shut down by bossman, and now they want to see it and know more. One of the engineers understood the co...
-
View post
The more I look at my resume and touch it up, the more I’m realizing I’m now “that person” I would look at 5 years ago who had a stack of experience across domains and systems. Either ATS is getting strict, jobs are too broad, or nothing exists.
-
View post
Back on the market, looking for principal level and higher in cyber threat intel. #cybersecurity #cti #threatintel #infosec
-
View post
~1374 cards, 229 packs, 6 cards each, one guaranteed hit in each pack for kids. Plus, security hygiene tips. Halloween is gonna be fun this year. #halloween #pokemon #infosec #cybersecurity
-
View post
Are most of you all friends outside of work or something?
-
View post
Don’t be embarrassed about using GenAI. But you should be embarrassed about using it without verifying its outputs. If you’re incapable of verifying its outputs, maybe you shouldn’t be using GenAI.
-
View post
I will bitch slap you.
-
View post
RE: https://infosec.exchange/@trojanfoxtrot/116908993982110748 You only need one. PhantomGraph. Try it now for free at app.phantomgraph.io #cybersecurity #infosec #threatintel #cyberthreatintelligence #DEFCON
-
View post
If I gave you a phishing email, how many of tools would open before you could produce IOCs, ATT&CK mappings, campaign relationships, blocklists, and report it? #infosec #threatintel #cybersecurity
-
View post
Man I’m getting rejection emails left and right for some very simple CTI roles.
-
View post
Stardust