DDI Training @digitaldefenseinstitute.com · 17/09/2026500 endpoints. Which ones are actually compromised? 👀 Triage at fleet scale is a skill that makes or breaks an incident, & it's exactly what this course emphasizes 🦖🔥 Available on demand 🤓 ddi.sh/thvr 063
DDI Training @digitaldefenseinstitute.com · 09/09/2026Can't join us in Deadwood? Check out our on-demand training! Learn @ your own pace, from your own couch, w/your own snacks 🙌 Packed w/hands-on labs, hours of video content, & realistic attack scenarios to level up your DFIR/Velociraptor skills 🔥 academy.digitaldefenseinstitute.com/courses/2259... 011
DDI Training @digitaldefenseinstitute.com · 31/08/2026Just over a month until @wildwesthackinfest.bsky.social! Come hang with @eric.zip and @whit.zip and join us for Threat Hunting and Incident Response with Velociraptor! 2 days of hands on labs and real-world attack scenarios 🔥🤓 Register here: cvent.me/A48MM8 032
DDI Training @digitaldefenseinstitute.com · 10/08/2026Huge thanks to all of our ASOTH students for choosing us this year at Black Hat! We had an absolute blast with you all, and hope to see you again! Another Hacker Summer Camp in the books! 🤓🔥💙 094
Reposted by DDI TrainingEric Capuano @eric.zip · 04/08/2026Defenders, new C2 tooling to be on the lookout for... Found it in use by Aurora Ransomware group. github.com/XTLS/Xray-coregithub.comGitHub - XTLS/Xray-core: Xray, Penetrates Everything. Also the best v2ray-core. Where the magic happens. An open platform for various uses.Xray, Penetrates Everything. Also the best v2ray-core. Where the magic happens. An open platform for various uses. - XTLS/Xray-core 1148
DDI Training @digitaldefenseinstitute.com · 27/07/2026We are honored to have our "Threat Hunting & Incident Response with Velociraptor" course featured on the official @velocidex.com documentation site! #threathunting #incidentresponse #dfir #securityoperations #velociraptor docs.velociraptor.app/training/#co...docs.velociraptor.appTraining Resources## Scheduled courses 132
DDI Training @digitaldefenseinstitute.com · 27/07/2026Sneak preview of what we're cooking up for this weekend 👀🔥 This is our 8th year teaching at @blackhatevents.bsky.social, and our Advanced Security Operations & Threat Hunting course is more fun than ever! 🤓 There are still a few seats left if you want to join us! blackhat.com/us-26/traini... 021
DDI Training @digitaldefenseinstitute.com · 25/07/20261 week til Black Hat! 🤯 Join @eric.zip, @whit.zip, and @nynir.bsky.social for our 4-day Advanced Security Operations & Threat Hunting course! There are still some seats available! 👇🤓 Course details and registration: blackhat.com/us-26/traini... 053
Reposted by DDI TrainingLimaCharlie @limacharlie.io · 15/07/2026Most AI in security workshops end with a pitch. This one ends with something you built. We're hosting a free hands-on lab at Black Hat with @bhinfosecurity.bsky.social and @digitaldefenseinstitute.com. 6 hours. Real infrastructure. @whit.zip @eric.zip @nynir.bsky.social luma.com/black-hat-he... 022
DDI Training @digitaldefenseinstitute.com · 13/07/2026Less than 3 weeks until Black Hat! 🤯 Join @eric.zip, @whit.zip, and @nynir.bsky.social in Vegas! Register for our 4-day Advanced Security Operations & Threat Hunting course 👩💻💙 Course details, outline, and registration here: blackhat.com/us-26/traini... 083
DDI Training @digitaldefenseinstitute.com · 22/06/202640 days until Black Hat! 🤯 Join @eric.zip, @whit.zip, and @nynir.bsky.social in August! Registration is open for our 4-day Advanced Security Operations & Threat Hunting course! 🔥 🤓 🙌 Course details, outline, and registration here: blackhat.com/us-26/traini... 043
Reposted by DDI TrainingEric Capuano @eric.zip · 04/06/2026Triage.zip now has support for macOS & Linux 🚀 073
DDI Training @digitaldefenseinstitute.com · 01/06/20262 months until Black Hat! 🤓 Join @eric.zip, @whit.zip, and @nynir.bsky.social for a 4-day training at @blackhatevents.bsky.social! Registration is open for our Advanced Security Operations and Threat Hunting course! 🔥👩💻🙌 Course outline and registration: blackhat.com/us-26/traini... 073
DDI Training @digitaldefenseinstitute.com · 14/05/2026ATTN NERDS: Join @eric.zip, @whit.zip, and @nynir.bsky.social for a 4-day training at @blackhatevents.bsky.social! Registration is open for our Advanced Security Operations and Threat Hunting course! 🔥👩💻🙌 Early bird discount until 5/22 👀 Register: blackhat.com/us-26/traini... 033
Reposted by DDI TrainingInfosec faith healer @infosecjohndoe.bsky.social · 28/04/2026I recommend this! I’ve done live course via antisyphon and I’m doing non-live version via coursestack right now. I had to DFIR semi-manually in the past and it was not fun. Velociraptor would’ve made life way easier. 011
DDI Training @digitaldefenseinstitute.com · 28/04/2026Learn to hunt and respond with Velociraptor with @eric.zip and @whit.zip at @wildwesthackinfest.bsky.social October 6-7, 2026 in Deadwood, SD! www.antisyphontraining.com/product/thre... #dfir #threathuntingantisyphontraining.comThreat Hunting & Incident Response with Velociraptor - Antisyphon TrainingMaster the art of threat hunting and incident response with Velociraptor, a rapidly emerging powerhouse in cybersecurity. 052
DDI Training @digitaldefenseinstitute.com · 13/04/2026ATTN NERDS: We'll be at @blackhatevents.bsky.social USA and registration is open for our Advanced Security Operations and Threat Hunting course! 🔥🤓 Join @eric.zip, @whit.zip, and @nynir.bsky.social for our 4-day training: Early bird discount until 5/22 👀 Details: blackhat.com/us-26/traini... 053
DDI Training @digitaldefenseinstitute.com · 19/03/2026ATTN NERDS: We're returning to @blackhatevents.bsky.social USA and registration is now open for our Advanced Security Operations and Threat Hunting course! 💙🤓🚀 Join @eric.zip, @whit.zip, and @nynir.bsky.social for our 4-day training: blackhat.com/us-26/traini... 075
DDI Training @digitaldefenseinstitute.com · 10/02/2026Are you a fan of Velociraptor and Claude Code? We have a gift for you! Our first of many Claude Code plugins is a VR Artifact generator, and it's quite good at it! Give it a try and let us know what you think... github.com/Digital-Defe... #dfir #velociraptor #claudecode @velocidex.comgithub.comGitHub - Digital-Defense-Institute/ddi-cc-plugins: Security-focused Claude Code plugins for DFIR, detection engineering, and threat huntingSecurity-focused Claude Code plugins for DFIR, detection engineering, and threat hunting - Digital-Defense-Institute/ddi-cc-plugins 143
Reposted by DDI TrainingEric Capuano @eric.zip · 20/01/2026Net-NTLMv1 is dead. Rainbow tables are now public, making cracking trivial. If it’s still lurking in your environment, now’s the time to root it out. Inventory, detect, and kill it before an attacker does. cloud.google.com/blog/topics/...cloud.google.comReleasing Rainbow Tables to Accelerate Protocol Deprecation | Google Cloud BlogMandiant aims to lower the barrier for security professionals to demonstrate the insecurity of Net-NTLMv1. 0208
Reposted by DDI TrainingEric Capuano @eric.zip · 27/12/2025Obligatory blog post describing the detection methodology I used. blog.ecapuano.com/p/hunting-mo...blog.ecapuano.comHunting MongoBleed (CVE-2025-14847)Detecting CVE-2025-14847 Exploitation with Velociraptor 0133
Reposted by DDI TrainingEric Capuano @eric.zip · 27/12/2025I have PR'd a new @velocidex.com Artifact to the Exchange to hunt for exploitation of #CVE-2025–14847. As far as I know, this is the only defensive signature for this CVE that exists currently. github.com/Velocidex/ve...github.comCreate Linux.Detection.CVE202514847.MongoBleed.yaml by ecapuano · Pull Request #1161 · Velocidex/velociraptor-docsAdd Linux.Detection.CVE202514847.MongoBleed Artifact Summary This artifact detects evidence of CVE-2025-14847 (MongoBleed) exploitation on MongoDB servers by analyzing connection patterns in MongoD... 282
Reposted by DDI TrainingEric Capuano @eric.zip · 05/12/2025Friendly reminder to my #DFIR friends... If you ever need an offline triage collector in a pinch, @whit.zip and I maintain one for you! Powered by latest version of Velociraptor, preconfigured to get all the important pieces for investigation. 1. Download 2. Execute 3. Find bad guys triage.ziptriage.zipTriage.zip - Collector Package 0204
DDI Training @digitaldefenseinstitute.com · 24/11/2025Same awesome tool, new look -- triage.zip got a facelift! Also, updated to work with latest changes to Velociraptor's new Triage Targets: triage.velocidex.com This project made possible due to the epic team behind @velocidex.com 💙 We only aim to make it even more accessible to the masses. #DFIR 073
DDI Training @digitaldefenseinstitute.com · 24/11/2025We are launching a Black Friday deal on our most popular course, Threat Hunting & Incident Response w/Velociraptor! From now until midnight (EST) 11/28, enjoy 40% off our best-selling on-demand course. Register: ddi.sh/thvr-bf-2025 Use Code: blackfriday2025 #DFIR #ThreatHunting 083
Reposted by DDI TrainingEric Capuano @eric.zip · 19/11/2025I have always wanted an app like Zimmerman's Timeline Explorer, but for macOS.... Sadly, nothing remotely close exists except Excel 🤮 Stoked to say, I am nearly done with the the MVP! 😎 Supertimelines on MBP! #dfir 1347
DDI Training @digitaldefenseinstitute.com · 11/10/2025Another THVR in the books! We had so much fun with this group of nerds this week. Thanks for the engaging chats and for choosing to hang with us for a couple days--until next time 🤓🦖💙 We hope everyone enjoyed the con! @wildwesthackinfest.bsky.social @antisyphontraining.bsky.social 050
Reposted by DDI TrainingEric Capuano @eric.zip · 15/08/2025If you’re interested in tinkering with LLMs to assist with incident triage, check out this demo I did with @limacharlie.io using Claude Code and the LC MCP: youtu.be/dSCmLIBkTdo?... I open sourced the Claude configs and context files for anyone that wants to try it out: github.com/Digital-Defe...youtu.beThe unopinionated AI advantage: Building AI-powered SecOps on your termsYouTube video by LimaCharlie 0128
Reposted by DDI TrainingEric Capuano @eric.zip · 14/08/2025New blog post! PowerShell transcripts for threat hunting & IR 🚀 blog.ecapuano.com/p/dfir-artif...blog.ecapuano.comDFIR Artifact: PowerShell TranscriptsThe "flight data recorder" for PowerShell activity. 194
Reposted by DDI TrainingWhitney Champion 🍪 @whit.zip · 05/08/2025a certain mr @timmedin.bsky.social made a guest appearance during ASOTH day 3 today to drop some kerberoasting knowledge bombs on our students love this guy. THANK YOU TIM 🤓🫶🔥🎟️ @blackhatevents.bsky.social 191
DDI Training @digitaldefenseinstitute.com · 28/07/2025ATTN NERDS: 5 more days until it's go time at Hacker Summer Camp! 💙 There's still time to register: www.blackhat.com/us-25/traini... And if you can't join us at @blackhatevents.bsky.social, check out our on demand courses 🤓🦖🔥 academy.digitaldefenseinstitute.com/catalog 052
Reposted by DDI TrainingMatt Bromiley @bromiley.io · 21/07/2025T-minus 12 days until my favorite humans - @eric.zip & @whit.zip - and I deliver our Advanced Security Operations and Threat Hunting training at @blackhatevents.bsky.social. If you're a SOC analyst and/or work in IR, we'd love to have you. Come level up with us :) www.blackhat.com/us-25/traini...blackhat.comBlack HatBlack Hat 063
DDI Training @digitaldefenseinstitute.com · 08/07/2025Join us at the @antisyphontraining.bsky.social Blue Team Summit Aug 28 – Aug 29 for Threat Hunting & Incident Response with Velociraptor! www.antisyphontraining.com/course/threa... 052
DDI Training @digitaldefenseinstitute.com · 02/07/20251 month to go! 🤓🔥💙 Join @eric.zip, @bromiley.io, and @whit.zip at hacker summer camp! Registration: www.blackhat.com/us-25/traini...blackhat.comBlack HatBlack Hat 032
Reposted by DDI TrainingEric Capuano @eric.zip · 19/06/2025🚀 Just launched: DetectionForge — a purpose-built platform for crafting, testing & validating @limacharlie.io detection rules. Perform detection unit tests & multi-org backtesting + import/export IaC 🔗 Try it: detectionforge.ddi.sh 💻 GitHub: github.com/Digital-Defe... #detectionengineering #secopsdetectionforge.ddi.shDetectionForgeDetectionForge - A comprehensive detection engineering environment for crafting, validating, and testing LimaCharlie detection rules 0126
Reposted by DDI TrainingWhitney Champion 🍪 @whit.zip · 14/06/2025we had an absolutely amazing time at #x33fcon 🤓🇵🇱 thank you to our students who joined our @antisyphontraining.bsky.social class, and thank you to the organizers for taking such good care of us 🫶 poland is beautiful 082
Reposted by DDI TrainingEric Capuano @eric.zip · 05/06/2025Here are the slides/resources from our #SecurityFest talk on "Modernizing Incident Response Using Techniques that Scale" Talk: www.youtube.com/live/Znl7TBF...youtube.comSecurity Fest 2025 - Day 2YouTube video by Security Fest 2138
DDI Training @digitaldefenseinstitute.com · 03/06/2025And next week we’re in Poland for x33fcon! We’re running our 2-day workshop: Threat Hunting & Incident Response with Velociraptor www.x33fcon.com#!t/TI_IR.mdx33fcon.comx33fcon 012
Reposted by DDI TrainingEric Capuano @eric.zip · 03/06/2025@whit.zip and I just arrived in Sweden for Security Fest and we’re so excited! 🇸🇪 cfp.securityfest.com/2025/talk/NP...cfp.securityfest.comModernizing Incident Response Using Techniques that Scale Security Fest 2025Traditional digital forensics and incident response (DFIR) techniques often fall short, struggling to keep up with the speed and scale required by modern environments. This talk explores the limitatio... 082
DDI Training @digitaldefenseinstitute.com · 25/05/2025Ready to level up your SOC skills? Our Threat Hunting and IR With Velociraptor course dives deep into Velociraptor through hands-on labs and realistic attack scenarios. Learn to build custom queries, triage systems, and take decisive action—confidently and repeatably. Start here: ddi.sh/thvr 🔥🦖🤓 054
Reposted by DDI TrainingWhitney Champion 🍪 @whit.zip · 20/05/2025ATTN NERDS: we'll be teaching at @blackhatevents.bsky.social during hacker summer camp again! come join me and @eric.zip and @bromiley.io for our 4-day training: Advanced Security Operations and Threat Hunting 🤓🔥💙 www.blackhat.com/us-25/traini... 0175
Reposted by DDI TrainingWhitney Champion 🍪 @whit.zip · 29/04/2025ATTN NERDS: join me and @eric.zip in october at @wildwesthackinfest.bsky.social where we are running our 2-day course! again! threat hunting & incident response w/velociraptor! register virtual or in-person: ddi.sh/thvr-wwhf 🤓🦖🔥 #infosec #dfir #threathunting #WWHF #Deadwood2025ddi.shThreat Hunting & Incident Response with Velociraptor with Eric Capuano and Whitney Champion - Antisyphon TrainingMaster the art of threat hunting and incident response with Velociraptor, a rapidly emerging powerhouse in cybersecurity. 0125
DDI Training @digitaldefenseinstitute.com · 21/04/2025Want to see a little bit of the magic behind our Threat Hunting & Incident Response w/Velociraptor course? Check out our Antisyphon webcast! www.youtube.com/watch?v=MqQ-... Now available OnDemand: ddi.sh/thvryoutube.comThreat Hunting with Velociraptor w/ Eric Capuano & Whitney Champion/// 🔗 Register for future webcasts, summits, and workshops here - https://blackhillsinfosec.zoom.us/ze/hub/stadiumVelociraptor has been around for some time... 051
DDI Training @digitaldefenseinstitute.com · 15/04/2025Our newest on-demand course, Threat Hunting and Incident Response with Velociraptor, contains over 10 hours of HD video content and 23(!) hands-on labs! You can now see a free preview of one of the 23 labs: ddi.sh/thvr-preview #DFIR #infosec #incidentresponse #threathuntingddi.shThreat Hunting & Incident Response with VelociraptorMaster the art of threat hunting and incident response with Velociraptor, a rapidly emerging powerhouse in cybersecurity. This hands-on course, led by industry experts Eric Capuano and Whitney… 241
DDI Training @digitaldefenseinstitute.com · 14/04/2025We're coming to #x33fcon! Join @eric.zip and @whit.zip in June for our 2-day Threat Hunting & Incident Response With Velociraptor course! More info: www.x33fcon.com#!t/TI_IR.md See you soon, Poland! 🥹💙🦖 041
DDI Training @digitaldefenseinstitute.com · 08/04/2025One of our students shared this in our Discord recently and our hearts are full! Whether you are an aspiring or seasoned security professional, we build hands-on training designed to help you level up! Learn more: ddi.sh/academy #infosec #training #cybersecurity #dfir #threathunting 093
Reposted by DDI Traininghackadaisical.bsky.social @hackadaisical.bsky.social · 07/04/2025These folks rock, you won't be disappointed! 141
DDI Training @digitaldefenseinstitute.com · 07/04/2025"Threat Hunting & Incident Response with Velociraptor" On-Demand is live! Use this promo code for 20% off until 4/13: thvrlaunchpromo academy.digitaldefenseinstitute.com/courses/2259... #infosec #dfir #threathunting #incidentresponse #velociraptor 085