Sign in

DylanInfosec🛡️

@attackthesoc.com
566 followers 810 following 268 posts

Dad ⚭ Husband 🏛️ Incident Response, M365 Forensics | Defender XDR & Azure Security | DEaTH ⏳ 🏋🏻‍♂️IronCult 🏕️ForestHermit attackthesoc.com | InDefenseofDefenders.org

PostsRepliesMedia
DylanInfosec🛡️ @attackthesoc.com · 28/01/2025
the simple query
let FileEvents = DeviceFileEvents
| where DeviceId == @"<device-id>"
| where ActionType endswith "AggregatedReport"
| summarize count() by bin(TimeGenerated, 1h)
| extend EventType = "FileEvents";
let ProocessEvents = DeviceProcessEvents
| where DeviceId == @"<device-id>"
| where ActionType endswith "AggregatedReport"
| summarize count() by bin(TimeGenerated, 1h)
| extend EventType = "ProocessEvents";
let NetworkEvents = DeviceNetworkEvents
| where DeviceId == @"<device-id>"
| where ActionType endswith "AggregatedReport"
| summarize count() by bin(TimeGenerated, 1h)
| extend EventType = "NetworkEvents";
let LogonEvents = DeviceLogonEvents
| where DeviceId == @"<device-id>"
| where ActionType endswith "AggregatedReport"
| summarize count() by bin(TimeGenerated, 1h)
| extend EventType = "LogonEvents";
union FileEvents, ProocessEvents, NetworkEvents, LogonEvents
| render timechart by EventType
000
DylanInfosec🛡️ @attackthesoc.com · 28/01/2025
Looking at some of the Aggregated Reporting of the different tables for the past few days (23-28) for a single device. #XDR #Defender
a timechart showing the trend of aggregated reporting events between Jan 23rd-28th for the 4 different supported tables. (No DeviceLogonEvents are shown)
120
DylanInfosec🛡️ @attackthesoc.com · 26/01/2025
000
DylanInfosec🛡️ @attackthesoc.com · 26/01/2025
100
DylanInfosec🛡️ @attackthesoc.com · 26/01/2025
Took a trip inside to get a break from the bleak winter weather
100
DylanInfosec🛡️ @attackthesoc.com · 24/01/2025
Very cool course by the folks at Kopidion LLC on how to look at things from the adversary's perspective. Thank you for the training!
Certificate of completion from Kopidion LLC on their course "Adversarial Thinking: The Art of Dangerous Ideas"
020
DylanInfosec🛡️ @attackthesoc.com · 21/12/2024
Been playing more with the rpi and arduino. This time using OpenCV for facial detection and sending the id to rpi to the arduino display. Next, seeing if the kids want to help hook up some servos, craft a viable hand and get a waving robot hand. Articulation after that
a picture of myself on a computer screen with a green square around my face. The box is facial recognition identifier. My name at the top of the box and a confidence score of 48% at the bottomAn arduino is plugged into a raspberry pi via USB. The Arduino also has connections to a breadboard that also has an LCD screen and 8x8 LED matrix plugged in. The LCD shows the text "Hi, Dylan! Hope you're doin".
The LED matrix shows a sideways sad/angry face
020
DylanInfosec🛡️ @attackthesoc.com · 15/12/2024
Final product: 1) Sideways smiley face (clear skies) : ) 2) Cold ass nights 3) kids thinking they’re funny asking for a real raspberry 🥧
an LCD screen that display the current temperature "Temp 25. 🤌" on the top line and the current datetime on the bottom line.

The red is an LED matrix with a sideways smiley emoji displayed 
   : )
000
DylanInfosec🛡️ @attackthesoc.com · 15/12/2024
We took over the table to learn a bit about programming today. Raspberry Pi hits the OpenWeatherAPI to get the weather forecast and feeds it to the micro LCD, top line reads datetime Bottom line summarizes the weather. Max7219 displays a emoji face resultant of the weather
a messy table littered with electrical components, wires, breadboards, a mega2560 microcontroller, raspberry pi 3B v2, and a laptop with stickers because 1337
250
DylanInfosec🛡️ @attackthesoc.com · 13/12/2024
Bought my daughter a Procreate license an hour ago… she’s so damn awesome. So proud and excited to see what she makes next . No books or tutorials, just craftin some stuff up
110
DylanInfosec🛡️ @attackthesoc.com · 06/12/2024
My wife is terrible with surprises so I got some gifts early lmfao Also a pic of the axe, multi-effects processor and amp… was eyeing the katana unless y’all got some recommendations for a noob? Put some new patches together on the Zoom, sounds aight still learning the ropes
A collection of Mike Stetina’s Metal Guitar series. This pic includes Rhythm Guitar vol 1,2 and Lead Guitar vol 2 (1 is on the way)A picture a guitar (Stratocaster), multi effects processor (zoom gx1 four) and a Frontman 10g amp
140
DylanInfosec🛡️ @attackthesoc.com · 05/12/2024
Hot chocolate for the kids to end the snow day right … whipped cream when it cools a bit
Four festive cups filled with hot chocolate, a crushed candy cane lay in ruin at the top of the photo
040
DylanInfosec🛡️ @attackthesoc.com · 04/12/2024
lol, this one is on you @campbell.scot And it’s only 7 streams because I ended getting the album
A picture of my “Spotify year 2024 wrapped” top song. The song is Warriors by I, played 7 times and apparently part of the top 0.1% listener’s worldwide
110
DylanInfosec🛡️ @attackthesoc.com · 04/12/2024
Cool, haven't seen this but the MS docs were updated back in March so I might be late to the party. You can create a custom export an incident in Defender to a pdf. Nothing crazy but if you need to provide the quick details on an incident for reporting or w/e its got the info that would be needed
120
DylanInfosec🛡️ @attackthesoc.com · 04/12/2024
Farmer Walks with this setup is janky but gets the job done after a couple laps around the dungeon… does wonders for grip strength with vertical grip
000
DylanInfosec🛡️ @attackthesoc.com · 30/11/2024
We bout to get into this #mushroom puzzle
010
DylanInfosec🛡️ @attackthesoc.com · 29/11/2024
Just got home with the fam from cutting down our own tree. Absolutely the best way to get a tree. If there’s a well reviewed place in your area, do it Here’s a pic from last year of the cats enjoying the tree as well.. and yes of course he cried for help once he was done having his fun
A photo of tuxedo cat’s face poking out from behind the branches of a Christmas tree.
040
DylanInfosec🛡️ @attackthesoc.com · 27/11/2024
My wife was testing a dairy-free recipe for Pumpkin pie and handed me the test pie and said the words “Here, let me know how it is. This one’s yours, do with it what you will” Folks. I have no shame and the only regret that I do have is on a purely digestive system level
An picture of an empty aluminum pie pan that is dirtied by the scraps of what used to be an entire pumpkin pie
140
DylanInfosec🛡️ @attackthesoc.com · 25/11/2024
I smelled beef stew cooking and got a sudden primal urge to carve a very crude spoon… why do I need to eat beef stew with a wooden spoon? I don’t ask myself these questions. Literally dug through a few moving boxes to get to my wooden block scraps. Next up, carving the bowl
A close up of a bowl geeked with beef stew. Beef chunks, potatoes, carrots and onions drowning in a thick gravy. A very crudely carved wooden spoon sits in the stew lazily leaning against the side of the bowl
150
DylanInfosec🛡️ @attackthesoc.com · 25/11/2024
010
DylanInfosec🛡️ @attackthesoc.com · 20/11/2024
Every once in a while I wanted to go back and check the Deployment details for an azure resource but couldn't find how to get back to it... My colleague pointed it out at the top of the page of the RG you deployed the resource to. SMDH
020
DylanInfosec🛡️ @attackthesoc.com · 20/11/2024
Wasn't this line in another movie... movies? Oh wait, this is real life www.cbsnews.com/news/google-...
010
DylanInfosec🛡️ @attackthesoc.com · 19/11/2024
Finally get to dig into this one. Been after this book for a while. The Fisherman by John Langan
A picture taken of the cover of a book by John Langan called The Fisherman. The cover is a depiction of a few men attempting to pull their row boat ashore by rope out of a raging ocean. The skies above are dark and menacing. Waves are crashing against rocks. There seems to be hints of something of unimaginable size off in the distance and cloaked by the dark.
010
DylanInfosec🛡️ @attackthesoc.com · 18/11/2024
Intestine Baalism Ripping Corpse Sadistic Intent On the shuffle
000
DylanInfosec🛡️ @attackthesoc.com · 18/11/2024
Tools of torture for tonight in the dungeon #CultoftheIron
100
DylanInfosec🛡️ @attackthesoc.com · 17/11/2024
When to go to the library to pick up a book I’ve been after for a while… it was closed but ran into this awesome lgbtq rally #lgbtq #🏳️‍🌈
110
DylanInfosec🛡️ @attackthesoc.com · 16/11/2024
Oh man, so many great people and workshops putting in work at #DEATHCon2024 If you're not working in a DE&TH capacity, there's so much to take back to your own personal labs and grow your abilities. If you're already working in the space, the material is immediately applicable to your work.
A screenshot of the DEATHCon homepage. A human skull with neon colors projected onto it with a cyberpunk aesthetic.. The word "DEATHCon" is written under the skull
050
DylanInfosec🛡️ @attackthesoc.com · 15/11/2024
Christmas background for video calls? I gotchu
a modified screenshot of a scene from the movie Die Hard where the protagonist is crawling through the air duct with a lighter in hand. Photo has been cropped by removing the protagonists face to be used as a background image for video calls
120
DylanInfosec🛡️ @attackthesoc.com · 14/11/2024
💀 #DEATHCon2024 lets go
reminder email about DEATHCon 2024 online for 11/16 starting 5AM and Organized by Randy Pargman, Olaf Hartong, @th3cyF0x
150
DylanInfosec🛡️ @attackthesoc.com · 11/11/2024
Hmm so I followed this and all was good when users used the Microsoft Remote Desktop app to subscribe to a session host but now I see the Application being blocked as Windows App - Mac OS and it’s blocked as it seems to fall into the “All resources” and I don't see it's app id specified anywhere.
100
DylanInfosec🛡️ @attackthesoc.com · 10/11/2024
Picked up a few books the other day. Slowly working through them. #SlowReaderClub #booksky #books #gotothelibrary
011
DylanInfosec🛡️ @attackthesoc.com · 10/11/2024
Bwah anyway… went on yet another hike with the fam today. Beautiful forest and found this fallen tree that fused with the tree that caught it
030
DylanInfosec🛡️ @attackthesoc.com · 09/11/2024
Getting a head start on #caturday
000
DylanInfosec🛡️ @attackthesoc.com · 08/11/2024
First post, trying to keep it positive. Some more pics from the hike with the fam #nature #familyhike #hemlock #forest
040