iiinova — where your digital self keeps evolving

Chris Truncer @christruncer.bsky.social · 24/09/2026

What an amazing night, got to see what is likely my favorite band play here in Denver, Killswitch Engage - @kseofficial Loved every minute of the show.

010

Chris Truncer @christruncer.bsky.social · 15/09/2026

Dang, rough start for the Broncos. But they got this going forward! Might have a chance getting a new coach at FSU now. Seasons can only get better!

000

Chris Truncer @christruncer.bsky.social · 25/08/2026

I always look forward to when we, CISA’s red team, gets to publish our reports, and today is one of those days! “A Tale of Two SOCs” - a story where we targeted two different orgs, with the same tradecraft, and very different responses. Read it! - www.cisa.gov/news-events/...

cisa.gov

A Tale of Two SOCs: Insights From Two Red Team Assessments | CISA

Same tactics, very different results. This advisory compares defensive outcomes from two red team assessments. Learn what drove detection and implement key actions to protect your organization from…

042

Chris Truncer @christruncer.bsky.social · 23/08/2026

It’s a Rüfüs do Sol in the pit type of night, super pumped!

001

Chris Truncer @christruncer.bsky.social · 21/08/2026

Oh man, the first wave of post Vegas marketing e-mails have just started arriving.

210

Chris Truncer @christruncer.bsky.social · 16/08/2026

Man, I thought that might have been a 10-8 round for Mackenzie Dern. Solid start to the fight.

000

Chris Truncer @christruncer.bsky.social · 21/07/2026

Welp, I was directly rejected for The Masters. I’ve been there twice and it was the best time ever. How’s everyone else looking?

100

Chris Truncer @christruncer.bsky.social · 13/07/2026

Scarface movie said he would buy a $550 suit to look real nice. That would be nice.

000

Chris Truncer @christruncer.bsky.social · 27/06/2026

I love it when I get a letter saying some information was likely taken in a breach by a company I never shared my data with or worked with. Great that all these companies just share with each other and then get owned.

051

Chris Truncer @christruncer.bsky.social · 14/06/2026

Man, I try to watch the World Cup every time it starts. The amount of flopping and faking penalties kills me and just makes me continue to not be able to stand the sport. It’s miserable. The faking everything just sucks. Don’t even get me started about tie games.

000

Chris Truncer @christruncer.bsky.social · 13/06/2026

People who still use sourceforge for hosting code /binaries might be the same people still using MySpace

020

Chris Truncer @christruncer.bsky.social · 04/06/2026

There are other offensive services CISA does and there are other openings. But this one specifically is for red team, and we are every sense of that, an actual red team. We don’t do pen tests, mobile app reviews, etc. It’s one of the coolest missions you could join.

011

Chris Truncer @christruncer.bsky.social · 04/06/2026

Our assessments last typically around 90 days. We get dev time to build out our tools to help ensure success on our assessments. We build our labs to model exactly what we are testing prior to prod. We don’t just take every “customer”, we can and do say no. The team is solid.

010

Chris Truncer @christruncer.bsky.social · 04/06/2026

Figure I’d give more info. Our red team is a small team, but we target the entire federal government. We can also go after state, local, territorial, tribal, and critical infrastructure. Tired of everything being scoped out? We require everything is in scope.

010

Chris Truncer @christruncer.bsky.social · 04/06/2026

You interested in hacking and want to red team the government? CISA’s red team has an opening! Our assessments are typically 90 days and we’re performing actual red team work here. Check out the opening, and let me know if you have any questions! usajobs.gov/job/871378500

usajobs.gov

Offensive Cybersecurity Operator

This announcement is issued under the Direct Hire Authority (DHA) to recruit for positions for which there is a critical hiring need. Selectee(s) will receive a career or career-conditional appointmen...

000

Chris Truncer @christruncer.bsky.social · 30/05/2026

I might be out of the loop, but sounds like ever since Nate Warfield left MSRC things have been rough (purely based on stories posted). We also don’t hear the inside story, so I’m sure there are two sides, but I really hope there’s some compelling info.

010

Chris Truncer @christruncer.bsky.social · 14/05/2026

Hell yes, the Avs beat the Wild! What an amazing game to go see!

040

Chris Truncer @christruncer.bsky.social · 10/05/2026

I cannot wait for this Strickland and Chimaev fight. The Avs lost, sad day, but now this fight should be solid. I think Strickland is losing, but I hope he wins.

000

Chris Truncer @christruncer.bsky.social · 01/04/2026

I love what @PrivacyHQ does allowing you to generate one off credit cards. But I really wish they let you fund it without tying a bank account as the only source. Keeps me from diving in with it.

010

Chris Truncer @christruncer.bsky.social · 22/02/2026

Man, I love Makar and MacKinnon, but boy did Makar make USA sweat after making that goal to tie it up, along with all the shots Canada had, including Toews.

000

Chris Truncer @christruncer.bsky.social · 22/02/2026

Woke up early to get to watch Team USA win hockey gold. Such an amazing thing to see, I am so pumped. First time since 1980!

120

Chris Truncer @christruncer.bsky.social · 20/02/2026

To go off my previous post. I think testing AI is more than valid security testing. But in my mind red teaming is about testing defenders, detections, and improving response. When targeting AI, that isn’t it. It’s not red teaming. But I’m open to different opinions.

320

Chris Truncer @christruncer.bsky.social · 20/02/2026

So, question if the day from me. Can you “red team” AI? I’ve seen groups and people state that they red team AI. Is it more prompt injection? Are you actively helping defenders build and scale their defenses or test their responses? Is this more a pen test vs real red team?

000

Chris Truncer @christruncer.bsky.social · 29/01/2026

There are other ways to setup your system for telemetry if you are looking to see what can avoid detection. But if you want to test your latest hotness against prevention of code execution, definitely test it against WDAC. Find something that gets around it? Now that’s useful.

000

Chris Truncer @christruncer.bsky.social · 29/01/2026

WDAC will block everything you don’t trust, even to the point you could theoretically end up boot looping your Windows box if you’re trying to load untrusted drivers, or drivers you didn’t actually allow that you need. Ask me how I know….

010

Chris Truncer @christruncer.bsky.social · 29/01/2026

Since a lot of talk I’m seeing lately is about good defenses, especially for initial access, I’ve been preaching the good news about WDAC (formerly my fav name of Device Guard) for a while. I think a properly set up WDAC is the bar which to test access - youtu.be/sWjhuVsSEks?...

youtu.be

SAINTCON 2018 - Chris Truncer - Introducing Effective Controls in your Environment with Windows Defe

Title: Introducing Effective Controls in your Environment with Windows Defender Application Control Speaker: Chris Truncer Conference: SAINTCON 2018 Location: Track 1 Date: 2018-09-26 Time: 10:00am…

011

Chris Truncer @christruncer.bsky.social · 15/01/2026

Loving the start of my day with an email from @ISC2 saying they are auditing submission that I uploaded (with a screenshot), for a total of 1 credit hour. ¯\_(ツ)_/¯ Enjoy

000

Chris Truncer @christruncer.bsky.social · 28/12/2025

Oh great, looks like a ton of data from a Wired breach just was published.

000

Chris Truncer @christruncer.bsky.social · 14/12/2025

I’ve had zero clue there was even a heisman race this year

000

Chris Truncer @christruncer.bsky.social · 07/12/2025

I’ve not been at gyms before where they give stripes, so this is a first, typically just belts. But I’m now a one stripe brown belt in jiu jitsu. I plenty of rolls after. And a good day

010

Chris Truncer @christruncer.bsky.social · 20/11/2025

I assume a lot of people have been playing with it, but I love testing and using @tailscale. It’s been nice being able to set up a private network, and love the wireguard usage overall. Anyone using it for anything niche or cool?

030

Chris Truncer @christruncer.bsky.social · 16/11/2025

Man, 3 rounds in and Schevchenko is dominating this fight so far.

000

Chris Truncer @christruncer.bsky.social · 13/11/2025

My kid just asked me if dishwashers were around when I was a kid. What the f

230

Chris Truncer @christruncer.bsky.social · 30/10/2025

Why is isc2.org asking to know my location just when going to their main website? That’s absolutely unnecessary.

020

Chris Truncer @christruncer.bsky.social · 30/10/2025

Who in their right mind likes puffy Cheetos? By far crunchy is way superior.

010

Chris Truncer @christruncer.bsky.social · 25/10/2025

Getting to check out @BsidesCOS today, looking forward to it!

000

Chris Truncer @christruncer.bsky.social · 02/10/2025

Well FCA (Jeep, etc.) just sent notice they were breached and lost some data, names, addresses, etc. Glad they had my data

100

Chris Truncer @christruncer.bsky.social · 29/09/2025

Just so everyone is aware, there’s 58 million pounds of corn dogs being recalled as we speak due to possible wood in the batter. You know, minus the giant wood stick it is embedded on. The more you know.

100

Chris Truncer @christruncer.bsky.social · 20/09/2025

Love seeing Clemson lose. I cannot stand Dabo Swinney. What guy did the curse this year saying he would eat dog poop then didn’t?

000

Chris Truncer @christruncer.bsky.social · 19/09/2025

If you are running Spotify locally, and have something like LittleSnitch up, it sure is interesting to see how much tracking is going on with that app.

110

Chris Truncer @christruncer.bsky.social · 21/08/2025

This last weekend was an awesome time in the mountains eating great view, seeing some trolls, and haunted tours!

010

Chris Truncer @christruncer.bsky.social · 17/08/2025

It was amazing to see Chimaev fight. That was so impressive. He deserved that win.

010

Chris Truncer @christruncer.bsky.social · 10/08/2025

About time for some Savannah Banana baseball!!

000

Chris Truncer @christruncer.bsky.social · 07/08/2025

On another note, hope that everyone off in Vegas is having a great time and learning some cool stuff. Enjoy seeing everyone, talks, and cons!

000

Chris Truncer @christruncer.bsky.social · 07/08/2025

Wow, this hits close to home (from reddit)

010

Chris Truncer @christruncer.bsky.social · 04/08/2025

I admittedly and clearly know nothing about flying a plane, but everyone see the article about the plane emergency landing in Dulles? Took off, possible engine failure, called mayday then flew for TWO HOURS before it landed?!? I would have assumed it would land immediately?

110

Chris Truncer @christruncer.bsky.social · 03/08/2025

Is there any sample go code that performs an authenticated query to an LDAP server that just does something basic, like requesting user accounts without hardcoding creds in, but using the current process’s context?

000

Chris Truncer @christruncer.bsky.social · 01/08/2025

It’s just the prelims, and I don’t care for it. But hell yes, football is starting!

000