Sign in

Matt Bromiley

@bromiley.io
2.9K followers 119 following 106 posts

⚙️ AI Security R&D @ Prophet Security 🎓 IR/TH/Incident Management Instructor 🎙️ Frequent Guest on Cybersecurity Defender's Podcast 🔍 Where to Find Me: github.com/bromiley

PostsRepliesMedia
Matt Bromiley @bromiley.io · 30/06/2026
Took my girls to see this. Tears flowed, but the stories about seeing Toy Story 1 were the best. Equally amazing is to see how the animation has come along, but the stories still remain true 💙
110
Matt Bromiley @bromiley.io · 21/05/2026
I need a version of Ants Marching that is updated to reflect AI agents doing their thing.
001
Matt Bromiley @bromiley.io · 30/04/2026
Narrator: And that was a lie…
000
Matt Bromiley @bromiley.io · 28/04/2026
Congrats bro!!!
100
Matt Bromiley @bromiley.io · 25/02/2026
Then we need more angels or wings
020
Matt Bromiley @bromiley.io · 11/02/2026
Chong Lua Dao, whoever you are…thanks /sarcasm
000
Matt Bromiley @bromiley.io · 29/01/2026
I just typed out “I know what I’m doing in Nano Banana tonight”, and it was a completely innocent task. This is reality.
000
Matt Bromiley @bromiley.io · 18/01/2026
One of my favorite accounts to read is @hardwaterhacker.bsky.social with his photography. I marvel, and then try to replicate. Here’s me dipping my toes in the water, catching decaying remnants of humanity in nature. #nationalparks #photography
180
Matt Bromiley @bromiley.io · 07/01/2026
So remember, remember the Seventh of January, Not as a call to divide, But as proof that reason, when guarded and chosen, Is stronger than chaos applied.
000
Matt Bromiley @bromiley.io · 07/01/2026
Remember, remember the Seventh of January, The fracture, the fog, the delay. I see no reason why chaos and fury Should ever become “the way”. When noise wears the mask of conviction, And volume is mistaken for might, It isn’t the loud who should lead us forward, But truth that survives the night.
100
Matt Bromiley @bromiley.io · 18/12/2025
Time to start over from scratch…
000
Matt Bromiley @bromiley.io · 18/12/2025
Tonight’s “in the air again” question: Why did you convert an int to a float to just then convert it back to an int again? “You’re absolutely right!”
100
Matt Bromiley @bromiley.io · 18/12/2025
This is slick @pedramamini.com , thanks for sharing! Going to give this a spin tomorrow.
020
Matt Bromiley @bromiley.io · 20/11/2025
@eric.zip always compiling and releasing some of the hottest - but most necessary - modern tools. Can’t wait to sink my teeth into this.
120
Reposted by Matt Bromiley
Eric Capuano @eric.zip · 19/11/2025
I have always wanted an app like Zimmerman's Timeline Explorer, but for macOS.... Sadly, nothing remotely close exists except Excel 🤮 Stoked to say, I am nearly done with the the MVP! 😎 Supertimelines on MBP! #dfir
1347
Matt Bromiley @bromiley.io · 13/11/2025
I’m normally quiet about these things, but have to share a moment of laughter. If someone refers to you as “the dog that hasn’t barked”, you’re not the most powerful person in the room. That’s leverage.
021
Matt Bromiley @bromiley.io · 18/08/2025
Aww yissssssss...
030
Matt Bromiley @bromiley.io · 14/08/2025
Silverfinger
010
Matt Bromiley @bromiley.io · 14/08/2025
Jake’s Equal
010
Matt Bromiley @bromiley.io · 12/08/2025
s/advise/advice
010
Matt Bromiley @bromiley.io · 11/08/2025
The advise I got for the switch was “take it slow”
110
Matt Bromiley @bromiley.io · 11/08/2025
lol in the middle of doing the exact opposite. Notion’s self-published MCP is garbage, defeats the point of AI integration. Obsidian has stayed strong all day and the Markdown foundation only makes sense
000
Matt Bromiley @bromiley.io · 11/08/2025
BSky Outreach - Anyone here an Obsidian user (for notes, "second brain", etc.)? Anyone want to sing their praises in a reply; I'm curious what your experience has been like.
300
Matt Bromiley @bromiley.io · 11/08/2025
Usage spent towards troubleshooting Anthropic connectivity shouldn't count against your daily quota...
000
Matt Bromiley @bromiley.io · 11/08/2025
Hmm..I have full content access, which includes creating pages, making edits, adjusting templates, and more. The problem is, it's unstable. Will drop in the middle of making page edits. I'm trying different variations, hoping to land on one that's more stable.
000
Matt Bromiley @bromiley.io · 11/08/2025
Has anyone been able to get Notion's MCP to stay connected for more than 1 hour? This thing is about as stable as a baby deer.
110
Reposted by Matt Bromiley
Olaf Hartong @olafhartong.nl · 06/08/2025
During my #BHUSA talk I've released many ETW research tools, of which the most notable is BamboozlEDR. This tool allows you to inject events into ETW, allowing you to generate fake alerts and blind EDRs. github.com/olafhartong/... Slides available here: github.com/olafhartong/...
github.com
GitHub - olafhartong/BamboozlEDR: A comprehensive ETW (Event Tracing for Windows) event generation tool designed for testing and research purposes.
A comprehensive ETW (Event Tracing for Windows) event generation tool designed for testing and research purposes. - olafhartong/BamboozlEDR
02515
Reposted by Matt Bromiley
Whitney Champion 🍪 @whit.zip · 03/08/2025
day 1 of black hat 2025 in the books 🤓💙🌈 never a dull moment nerding with @eric.zip and @bromiley.io @blackhatevents.bsky.social #BlackHatUSA
bhbhbhbh
1232
Matt Bromiley @bromiley.io · 22/07/2025
Just to think, there _are_ people distracted by the MLK files.
010
Matt Bromiley @bromiley.io · 21/07/2025
T-minus 12 days until my favorite humans - @eric.zip & @whit.zip - and I deliver our Advanced Security Operations and Threat Hunting training at @blackhatevents.bsky.social. If you're a SOC analyst and/or work in IR, we'd love to have you. Come level up with us :) www.blackhat.com/us-25/traini...
blackhat.com
Black Hat
Black Hat
063
Matt Bromiley @bromiley.io · 21/07/2025
No, THIS is the guy to follow. Pro tip: I follow @eric.zip therefore YOU should follow Eric.
150
Matt Bromiley @bromiley.io · 21/07/2025
WHIZNITTTT
020
Matt Bromiley @bromiley.io · 21/07/2025
As is @philhagen.com !! Sharing the DFIR love
030
Matt Bromiley @bromiley.io · 20/07/2025
Feels like a fresh start, so let's make it one. Nice to meet you :) I'm a #cybersecurity nerd | security ai r&d @prophetsecurity.bsky.social | frequent trainer @sansinstitute.bsky.social, @blackhatevents.bsky.social, and other conferences | Cybersecurity Defenders Podcast | forever #blueteam.
070
Matt Bromiley @bromiley.io · 20/07/2025
Defenders out there - CVE-2025-53770 is an unpatched, actively exploited vulnerability in SharePoint. If you have on-prem SharePoint facing the Internet, roll up your sleeves. Microsoft's guidance: 1. Configure the Windows AMSI integrations and deploy Defender AV. 2. Disconnect from the Internet.
0114
Matt Bromiley @bromiley.io · 17/07/2025
Yes it is. Sending much love 💙💙
010
Matt Bromiley @bromiley.io · 19/06/2025
They’ve done it again…
030
Matt Bromiley @bromiley.io · 17/06/2025
Swimming in the ocean, causing a commotion
010
Reposted by Matt Bromiley
Whitney Champion 🍪 @whit.zip · 20/05/2025
ATTN NERDS: we'll be teaching at @blackhatevents.bsky.social during hacker summer camp again! come join me and @eric.zip and @bromiley.io for our 4-day training: Advanced Security Operations and Threat Hunting 🤓🔥💙 www.blackhat.com/us-25/traini...
asoth
0175
Matt Bromiley @bromiley.io · 17/03/2025
No matter where in the world you go, one thing remains the same: the guy at the gym who slams weights down and then looks around to see who noticed. 🤦‍♂️
010
Matt Bromiley @bromiley.io · 10/02/2025
Kendrick Lamar just owned 2025.
020
Reposted by Matt Bromiley
DDI Training @digitaldefenseinstitute.com · 07/02/2025
ATTN NERDS: We'll be at @blackhatevents.bsky.social USA again this year! Registration is now open for our Advanced Security Operations and Threat Hunting course 🤓🔥💙 Join @eric.zip, @bromiley.io, and @whit.zip for our 4-day training: www.blackhat.com/us-25/traini...
black hat training course
0136
Reposted by Matt Bromiley
tuckner @johntuckner.me · 30/01/2025
Secure Annex can now be used directly from with @limacharlie.io 's SecOps Cloud Platform. Installed agents give visibility into extensions utilized and are now enriched. These attributes can be used to run D&R rules for immediate response to issues. limacharlie.io/blog/automating_brow……
limacharlie.io
LimaCharlie & Secure Annex: Browser Extension Security
Automate browser extension security monitoring with LimaCharlie and Secure Annex. Learn about detection rules, vulnerability monitoring, and comprehensive management tools for enhancing your…
151
Matt Bromiley @bromiley.io · 29/01/2025
Another week, another episode of The Cybersecurity Defender's Podcast in the books with @tekgrunt.bsky.social !! More podcasting news on the horizon for me, but always a fun weekly chat with Chris @limacharlie.io. Check the podcast out here: limacharlie.io/podcast
040
Matt Bromiley @bromiley.io · 29/01/2025
Amplifying this for awesome conferences and unique CFP opportunities!
010
Matt Bromiley @bromiley.io · 29/01/2025
(5/n) (2024) 48 minutes vs. (2020) 277 minutes. Loose math, I think that's an 83% decrease. What we really want to know is the reverse. How have detection and response times improved?
000
Matt Bromiley @bromiley.io · 29/01/2025
(4/n) Seeing these figures, you might question "Well, how bad was it before?" After all, if the breakout shift is from 50 minutes to 48 minutes, that doesn't seem _all that bad_. In CrowdStrike's 2020 Report, the average breakout time was 4 hours and 37 mintues.
100
Matt Bromiley @bromiley.io · 29/01/2025
(3/n) In CrowdStrike's 2024 report, the fastest recorded eCrime breakout was 2 minutes and 7 seconds It can take longer to complete a sign-in process in some cases!
100
Matt Bromiley @bromiley.io · 29/01/2025
Dwell time of 10 days in 2023, which was down from 16 days in 2022. TL;DR: Adversaries got faster. In ransomware cases, the median dwell time was 5 days. This is the metric to run against your security team - 5 days. This is the initiative to ensure you have rapid detection and response in place.
100