Sign in

DDI Training

@digitaldefenseinstitute.com
630 followers 120 following 50 posts

Advanced Cybersecurity Training provider focusing on security operations, threat hunting, digital forensics, and incident response. Learn more: digitaldefenseinstitute.com

PostsRepliesMedia
DDI Training @digitaldefenseinstitute.com · 17/09/2026
500 endpoints. Which ones are actually compromised? 👀 Triage at fleet scale is a skill that makes or breaks an incident, & it's exactly what this course emphasizes 🦖🔥 Available on demand 🤓 ddi.sh/thvr
thvr
063
DDI Training @digitaldefenseinstitute.com · 09/09/2026
Can't join us in Deadwood? Check out our on-demand training! Learn @ your own pace, from your own couch, w/your own snacks 🙌 Packed w/hands-on labs, hours of video content, & realistic attack scenarios to level up your DFIR/Velociraptor skills 🔥 academy.digitaldefenseinstitute.com/courses/2259...
011
DDI Training @digitaldefenseinstitute.com · 31/08/2026
Just over a month until @wildwesthackinfest.bsky.social! Come hang with @eric.zip and @whit.zip and join us for Threat Hunting and Incident Response with Velociraptor! 2 days of hands on labs and real-world attack scenarios 🔥🤓 Register here: cvent.me/A48MM8
wwhf 2026
032
DDI Training @digitaldefenseinstitute.com · 10/08/2026
Huge thanks to all of our ASOTH students for choosing us this year at Black Hat! We had an absolute blast with you all, and hope to see you again! Another Hacker Summer Camp in the books! 🤓🔥💙
asothasoth asoth asoth
094
Reposted by DDI Training
Eric Capuano @eric.zip · 04/08/2026
Defenders, new C2 tooling to be on the lookout for... Found it in use by Aurora Ransomware group. github.com/XTLS/Xray-core
github.com
GitHub - XTLS/Xray-core: Xray, Penetrates Everything. Also the best v2ray-core. Where the magic happens. An open platform for various uses.
Xray, Penetrates Everything. Also the best v2ray-core. Where the magic happens. An open platform for various uses. - XTLS/Xray-core
1148
DDI Training @digitaldefenseinstitute.com · 27/07/2026
We are honored to have our "Threat Hunting & Incident Response with Velociraptor" course featured on the official @velocidex.com documentation site! #threathunting #incidentresponse #dfir #securityoperations #velociraptor docs.velociraptor.app/training/#co...
docs.velociraptor.app
Training Resources
## Scheduled courses
132
DDI Training @digitaldefenseinstitute.com · 27/07/2026
Sneak preview of what we're cooking up for this weekend 👀🔥 This is our 8th year teaching at @blackhatevents.bsky.social, and our Advanced Security Operations & Threat Hunting course is more fun than ever! 🤓 There are still a few seats left if you want to join us! blackhat.com/us-26/traini...
initech pew pew lab guide CS
021
DDI Training @digitaldefenseinstitute.com · 25/07/2026
1 week til Black Hat! 🤯 Join @eric.zip, @whit.zip, and @nynir.bsky.social for our 4-day Advanced Security Operations & Threat Hunting course! There are still some seats available! 👇🤓 Course details and registration: blackhat.com/us-26/traini...
black hat 2026
053
Reposted by DDI Training
LimaCharlie @limacharlie.io · 15/07/2026
Most AI in security workshops end with a pitch. This one ends with something you built. We're hosting a free hands-on lab at Black Hat with @bhinfosecurity.bsky.social and @digitaldefenseinstitute.com. 6 hours. Real infrastructure. @whit.zip @eric.zip @nynir.bsky.social luma.com/black-hat-he...
022
DDI Training @digitaldefenseinstitute.com · 13/07/2026
Less than 3 weeks until Black Hat! 🤯 Join @eric.zip, @whit.zip, and @nynir.bsky.social in Vegas! Register for our 4-day Advanced Security Operations & Threat Hunting course 👩‍💻💙 Course details, outline, and registration here: blackhat.com/us-26/traini...
asoth
083
DDI Training @digitaldefenseinstitute.com · 22/06/2026
40 days until Black Hat! 🤯 Join @eric.zip, @whit.zip, and @nynir.bsky.social in August! Registration is open for our 4-day Advanced Security Operations & Threat Hunting course! 🔥 🤓 🙌 Course details, outline, and registration here: blackhat.com/us-26/traini...
bh2026 advanced security operations and threat hunting
043
Reposted by DDI Training
Eric Capuano @eric.zip · 04/06/2026
Triage.zip now has support for macOS & Linux 🚀
073
DDI Training @digitaldefenseinstitute.com · 01/06/2026
2 months until Black Hat! 🤓 Join @eric.zip, @whit.zip, and @nynir.bsky.social for a 4-day training at @blackhatevents.bsky.social! Registration is open for our Advanced Security Operations and Threat Hunting course! 🔥👩‍💻🙌 Course outline and registration: blackhat.com/us-26/traini...
asoth @ black hat
073
DDI Training @digitaldefenseinstitute.com · 14/05/2026
ATTN NERDS: Join @eric.zip, @whit.zip, and @nynir.bsky.social for a 4-day training at @blackhatevents.bsky.social! Registration is open for our Advanced Security Operations and Threat Hunting course! 🔥👩‍💻🙌 Early bird discount until 5/22 👀 Register: blackhat.com/us-26/traini...
black hat training
033
Reposted by DDI Training
Infosec faith healer @infosecjohndoe.bsky.social · 28/04/2026
I recommend this! I’ve done live course via antisyphon and I’m doing non-live version via coursestack right now. I had to DFIR semi-manually in the past and it was not fun. Velociraptor would’ve made life way easier.
011
DDI Training @digitaldefenseinstitute.com · 28/04/2026
Learn to hunt and respond with Velociraptor with @eric.zip and @whit.zip at @wildwesthackinfest.bsky.social October 6-7, 2026 in Deadwood, SD! www.antisyphontraining.com/product/thre... #dfir #threathunting
antisyphontraining.com
Threat Hunting & Incident Response with Velociraptor - Antisyphon Training
Master the art of threat hunting and incident response with Velociraptor, a rapidly emerging powerhouse in cybersecurity.
052
DDI Training @digitaldefenseinstitute.com · 13/04/2026
ATTN NERDS: We'll be at @blackhatevents.bsky.social USA and registration is open for our Advanced Security Operations and Threat Hunting course! 🔥🤓 Join @eric.zip, @whit.zip, and @nynir.bsky.social for our 4-day training: Early bird discount until 5/22 👀 Details: blackhat.com/us-26/traini...
asoth banner
053
DDI Training @digitaldefenseinstitute.com · 19/03/2026
ATTN NERDS: We're returning to @blackhatevents.bsky.social USA and registration is now open for our Advanced Security Operations and Threat Hunting course! 💙🤓🚀 Join @eric.zip, @whit.zip, and @nynir.bsky.social for our 4-day training: blackhat.com/us-26/traini...
black hat usa advanced security operations and threat hunting
075
DDI Training @digitaldefenseinstitute.com · 10/02/2026
Are you a fan of Velociraptor and Claude Code? We have a gift for you! Our first of many Claude Code plugins is a VR Artifact generator, and it's quite good at it! Give it a try and let us know what you think... github.com/Digital-Defe... #dfir #velociraptor #claudecode @velocidex.com
github.com
GitHub - Digital-Defense-Institute/ddi-cc-plugins: Security-focused Claude Code plugins for DFIR, detection engineering, and threat hunting
Security-focused Claude Code plugins for DFIR, detection engineering, and threat hunting - Digital-Defense-Institute/ddi-cc-plugins
143
Reposted by DDI Training
Eric Capuano @eric.zip · 20/01/2026
Net-NTLMv1 is dead. Rainbow tables are now public, making cracking trivial. If it’s still lurking in your environment, now’s the time to root it out. Inventory, detect, and kill it before an attacker does. cloud.google.com/blog/topics/...
cloud.google.com
Releasing Rainbow Tables to Accelerate Protocol Deprecation | Google Cloud Blog
Mandiant aims to lower the barrier for security professionals to demonstrate the insecurity of Net-NTLMv1.
0208
Reposted by DDI Training
Eric Capuano @eric.zip · 27/12/2025
Obligatory blog post describing the detection methodology I used. blog.ecapuano.com/p/hunting-mo...
blog.ecapuano.com
Hunting MongoBleed (CVE-2025-14847)
Detecting CVE-2025-14847 Exploitation with Velociraptor
0133
Reposted by DDI Training
Eric Capuano @eric.zip · 27/12/2025
I have PR'd a new @velocidex.com Artifact to the Exchange to hunt for exploitation of #CVE-2025–14847. As far as I know, this is the only defensive signature for this CVE that exists currently. github.com/Velocidex/ve...
github.com
Create Linux.Detection.CVE202514847.MongoBleed.yaml by ecapuano · Pull Request #1161 · Velocidex/velociraptor-docs
Add Linux.Detection.CVE202514847.MongoBleed Artifact Summary This artifact detects evidence of CVE-2025-14847 (MongoBleed) exploitation on MongoDB servers by analyzing connection patterns in MongoD...
282
Reposted by DDI Training
Eric Capuano @eric.zip · 05/12/2025
Friendly reminder to my #DFIR friends... If you ever need an offline triage collector in a pinch, @whit.zip and I maintain one for you! Powered by latest version of Velociraptor, preconfigured to get all the important pieces for investigation. 1. Download 2. Execute 3. Find bad guys triage.zip
triage.zip
Triage.zip - Collector Package
0204
DDI Training @digitaldefenseinstitute.com · 24/11/2025
Same awesome tool, new look -- triage.zip got a facelift! Also, updated to work with latest changes to Velociraptor's new Triage Targets: triage.velocidex.com This project made possible due to the epic team behind @velocidex.com 💙 We only aim to make it even more accessible to the masses. #DFIR
073
DDI Training @digitaldefenseinstitute.com · 24/11/2025
We are launching a Black Friday deal on our most popular course, Threat Hunting & Incident Response w/Velociraptor! From now until midnight (EST) 11/28, enjoy 40% off our best-selling on-demand course. Register: ddi.sh/thvr-bf-2025 Use Code: blackfriday2025 #DFIR #ThreatHunting
083
Reposted by DDI Training
Eric Capuano @eric.zip · 19/11/2025
I have always wanted an app like Zimmerman's Timeline Explorer, but for macOS.... Sadly, nothing remotely close exists except Excel 🤮 Stoked to say, I am nearly done with the the MVP! 😎 Supertimelines on MBP! #dfir
1347
DDI Training @digitaldefenseinstitute.com · 11/10/2025
Another THVR in the books! We had so much fun with this group of nerds this week. Thanks for the engaging chats and for choosing to hang with us for a couple days--until next time 🤓🦖💙 We hope everyone enjoyed the con! @wildwesthackinfest.bsky.social @antisyphontraining.bsky.social
eric.zipclassroom full of nerdssouth dakota classroom
050
Reposted by DDI Training
Eric Capuano @eric.zip · 15/08/2025
If you’re interested in tinkering with LLMs to assist with incident triage, check out this demo I did with @limacharlie.io using Claude Code and the LC MCP: youtu.be/dSCmLIBkTdo?... I open sourced the Claude configs and context files for anyone that wants to try it out: github.com/Digital-Defe...
youtu.be
The unopinionated AI advantage: Building AI-powered SecOps on your terms
YouTube video by LimaCharlie
0128
Reposted by DDI Training
Eric Capuano @eric.zip · 14/08/2025
New blog post! PowerShell transcripts for threat hunting & IR 🚀 blog.ecapuano.com/p/dfir-artif...
blog.ecapuano.com
DFIR Artifact: PowerShell Transcripts
The "flight data recorder" for PowerShell activity.
194
Reposted by DDI Training
Whitney Champion 🍪 @whit.zip · 05/08/2025
a certain mr @timmedin.bsky.social made a guest appearance during ASOTH day 3 today to drop some kerberoasting knowledge bombs on our students love this guy. THANK YOU TIM 🤓🫶🔥🎟️ @blackhatevents.bsky.social
tim @ black hattim @ black hat
191
DDI Training @digitaldefenseinstitute.com · 28/07/2025
ATTN NERDS: 5 more days until it's go time at Hacker Summer Camp! 💙 There's still time to register: www.blackhat.com/us-25/traini... And if you can't join us at @blackhatevents.bsky.social, check out our on demand courses 🤓🦖🔥 academy.digitaldefenseinstitute.com/catalog
asoth @ black hat
052
Reposted by DDI Training
Matt Bromiley @bromiley.io · 21/07/2025
T-minus 12 days until my favorite humans - @eric.zip & @whit.zip - and I deliver our Advanced Security Operations and Threat Hunting training at @blackhatevents.bsky.social. If you're a SOC analyst and/or work in IR, we'd love to have you. Come level up with us :) www.blackhat.com/us-25/traini...
blackhat.com
Black Hat
Black Hat
063
DDI Training @digitaldefenseinstitute.com · 08/07/2025
Join us at the @antisyphontraining.bsky.social Blue Team Summit Aug 28 – Aug 29 for Threat Hunting & Incident Response with Velociraptor! www.antisyphontraining.com/course/threa...
052
DDI Training @digitaldefenseinstitute.com · 02/07/2025
1 month to go! 🤓🔥💙 Join @eric.zip, @bromiley.io, and @whit.zip at hacker summer camp! Registration: www.blackhat.com/us-25/traini...
blackhat.com
Black Hat
Black Hat
032
Reposted by DDI Training
Eric Capuano @eric.zip · 19/06/2025
🚀 Just launched: DetectionForge — a purpose-built platform for crafting, testing & validating @limacharlie.io detection rules. Perform detection unit tests & multi-org backtesting + import/export IaC 🔗 Try it: detectionforge.ddi.sh 💻 GitHub: github.com/Digital-Defe... #detectionengineering #secops
detectionforge.ddi.sh
DetectionForge
DetectionForge - A comprehensive detection engineering environment for crafting, validating, and testing LimaCharlie detection rules
0126
Reposted by DDI Training
Whitney Champion 🍪 @whit.zip · 14/06/2025
we had an absolutely amazing time at #x33fcon 🤓🇵🇱 thank you to our students who joined our @antisyphontraining.bsky.social class, and thank you to the organizers for taking such good care of us 🫶 poland is beautiful
x33fcon x33fcon x33fcon x33fcon
082
Reposted by DDI Training
Eric Capuano @eric.zip · 05/06/2025
Here are the slides/resources from our #SecurityFest talk on "Modernizing Incident Response Using Techniques that Scale" Talk: www.youtube.com/live/Znl7TBF...
youtube.com
Security Fest 2025 - Day 2
YouTube video by Security Fest
2138
DDI Training @digitaldefenseinstitute.com · 03/06/2025
And next week we’re in Poland for x33fcon! We’re running our 2-day workshop: Threat Hunting & Incident Response with Velociraptor www.x33fcon.com#!t/TI_IR.md
x33fcon.com
x33fcon
012
Reposted by DDI Training
Eric Capuano @eric.zip · 03/06/2025
@whit.zip and I just arrived in Sweden for Security Fest and we’re so excited! 🇸🇪 cfp.securityfest.com/2025/talk/NP...
cfp.securityfest.com
Modernizing Incident Response Using Techniques that Scale Security Fest 2025
Traditional digital forensics and incident response (DFIR) techniques often fall short, struggling to keep up with the speed and scale required by modern environments. This talk explores the limitatio...
082
DDI Training @digitaldefenseinstitute.com · 25/05/2025
Ready to level up your SOC skills? Our Threat Hunting and IR With Velociraptor course dives deep into Velociraptor through hands-on labs and realistic attack scenarios. Learn to build custom queries, triage systems, and take decisive action—confidently and repeatably. Start here: ddi.sh/thvr 🔥🦖🤓
what our students are saying
054
Reposted by DDI Training
Whitney Champion 🍪 @whit.zip · 20/05/2025
ATTN NERDS: we'll be teaching at @blackhatevents.bsky.social during hacker summer camp again! come join me and @eric.zip and @bromiley.io for our 4-day training: Advanced Security Operations and Threat Hunting 🤓🔥💙 www.blackhat.com/us-25/traini...
asoth
0175
DDI Training @digitaldefenseinstitute.com · 07/05/2025
🥹💙
010
Reposted by DDI Training
Whitney Champion 🍪 @whit.zip · 29/04/2025
ATTN NERDS: join me and @eric.zip in october at @wildwesthackinfest.bsky.social where we are running our 2-day course! again! threat hunting & incident response w/velociraptor! register virtual or in-person: ddi.sh/thvr-wwhf 🤓🦖🔥 #infosec #dfir #threathunting #WWHF #Deadwood2025
ddi.sh
Threat Hunting & Incident Response with Velociraptor with Eric Capuano and Whitney Champion - Antisyphon Training
Master the art of threat hunting and incident response with Velociraptor, a rapidly emerging powerhouse in cybersecurity.
0125
DDI Training @digitaldefenseinstitute.com · 21/04/2025
Want to see a little bit of the magic behind our Threat Hunting & Incident Response w/Velociraptor course? Check out our Antisyphon webcast! www.youtube.com/watch?v=MqQ-... Now available OnDemand: ddi.sh/thvr
youtube.com
Threat Hunting with Velociraptor w/ Eric Capuano & Whitney Champion
/// 🔗 Register for future webcasts, summits, and workshops here - https://blackhillsinfosec.zoom.us/ze/hub/stadiumVelociraptor has been around for some time...
051
DDI Training @digitaldefenseinstitute.com · 15/04/2025
Our newest on-demand course, Threat Hunting and Incident Response with Velociraptor, contains over 10 hours of HD video content and 23(!) hands-on labs! You can now see a free preview of one of the 23 labs: ddi.sh/thvr-preview #DFIR #infosec #incidentresponse #threathunting
ddi.sh
Threat Hunting & Incident Response with Velociraptor
Master the art of threat hunting and incident response with Velociraptor, a rapidly emerging powerhouse in cybersecurity. This hands-on course, led by industry experts Eric Capuano and Whitney…
241
DDI Training @digitaldefenseinstitute.com · 14/04/2025
We're coming to #x33fcon! Join @eric.zip and @whit.zip in June for our 2-day Threat Hunting & Incident Response With Velociraptor course! More info: www.x33fcon.com#!t/TI_IR.md See you soon, Poland! 🥹💙🦖
x33fcon
041
DDI Training @digitaldefenseinstitute.com · 08/04/2025
WE! HAVE! STICKERS! 🥹✨
stickers for DDIstickers
292
DDI Training @digitaldefenseinstitute.com · 08/04/2025
One of our students shared this in our Discord recently and our hearts are full! Whether you are an aspiring or seasoned security professional, we build hands-on training designed to help you level up! Learn more: ddi.sh/academy #infosec #training #cybersecurity #dfir #threathunting
093
Reposted by DDI Training
hackadaisical.bsky.social @hackadaisical.bsky.social · 07/04/2025
These folks rock, you won't be disappointed!
141
DDI Training @digitaldefenseinstitute.com · 07/04/2025
"Threat Hunting & Incident Response with Velociraptor" On-Demand is live! Use this promo code for 20% off until 4/13: thvrlaunchpromo academy.digitaldefenseinstitute.com/courses/2259... #infosec #dfir #threathunting #incidentresponse #velociraptor
085