Sign in

HGB

@hgb.crowstrike.zip
475 followers 898 following 139 posts

DE&TH I like playing with malware, writing Sigma rules, and hoarding combo lists.

PostsRepliesMedia
Reposted by HGB
Taggart @taggart-tech.com · 18/08/2025
I've just about had it with the vagaries of true/false positive/negative. Humbly presented: a more descriptive alternative.
taggart-tech.com
The Tyranny of False Positives
It's time to move beyond true/false, positive/negative.
044
Reposted by HGB
Joseph Cox @josephcox.bsky.social · 22/07/2025
We just translated a wave of our ICE coverage into Spanish. No paywall, no email signup necessary. From leaks about Palantir's work with ICE to ICE's new facial recognition app, we think there is a massive public interest in this info. Read why and support us here: www.404media.co/were-publish...
3340101715
Reposted by HGB
Taggart @taggart-tech.com · 21/06/2025
A reminder that you can get 50% off the new version of The Homelab Almanac with code OMGVERSIONTHREE until the end of June! I'm really happy with the new version, and I think you will be too. taggartinstitute.org...
taggartinstitute.org
The Taggart Institute: Master Your Craft
The Taggart Institute exists to provide low-cost, high-quality technology training to everyone in a welcoming, supportive community.
052
HGB @hgb.crowstrike.zip · 14/06/2025
Some days on a thrunt, the TAs are indistinguishable from the engineer who is highly motivated to break the rules. Using a scheduled task to run net.exe to add yourself to the administrators group on every login is commitment.
020
Reposted by HGB
Nathan McNulty @nathanmcnulty.com · 23/05/2025
Uhh, apparently we have Entra SSO on Linux now? 🤯 learn.microsoft.com/en-us/entra/...
2223
Reposted by HGB
Taggart @taggart-tech.com · 17/05/2025
I put together some thoughts on the mitigation advice regarding "ClickFix" attacks. taggart-tech.com/cli...
taggart-tech.com
ClickFix Fixes Ranked
The cool thing about ClickFix remediation is nobody walks away happy.
254
HGB @hgb.crowstrike.zip · 23/03/2025
I wish someone would reward my work with Ambrose and Gunnel.
000
HGB @hgb.crowstrike.zip · 16/03/2025
I've watched 25 movies so far in 2025. Only 2000 to go.
000
Reposted by HGB
Matthew Garrett @mjg59.eicar-test-file.zip · 09/03/2025
Superintendent Chalmers: fentanyl labs? Principal Skinner: yes Chalmers: that the law enforcement folks were leaving alone? Skinner: yes Chalmers: localized entirely in Canada? Skinner: yes Chalmers: may I see them? Skinner: ...no
3908
HGB @hgb.crowstrike.zip · 26/02/2025
RMMs are RATs you pay for. Thanks for attending my TED talk.
010
Reposted by HGB
Dad Jokes @dadsaysjokes.com · 23/02/2025
Little known fact: Before the crowbar was invented. Crows simply drank at home.
1027426
Reposted by HGB
8Bit @memoriesin8bit.bsky.social · 16/02/2025
Regex is how I imagine eldritch horrors work. You look at it and it makes no sense and it's scary. As you stare, for a split second there is understanding. The universe expands before your eyes, reality unraveling. Then the madness sets in.
2304
HGB @hgb.crowstrike.zip · 11/02/2025
A two frame meme.

1. Wolverine laying in bed longingly looking at a picture 
2. A picture of the US Constitution in Wolverine's hands
020
HGB @hgb.crowstrike.zip · 10/02/2025
The NSA being asked to delete the word "privilege" is so funny. Goodbye every DFIR report.
040
HGB @hgb.crowstrike.zip · 08/02/2025
I think it is thematically fitting that Donald Duck is a ska fan.
Donald duck doing the traditional ska dance, skanking, to a weird song about hot dogs
010
Reposted by HGB
eve6 @eve6.bsky.social · 03/02/2025
I feel like Beyonce has a ska record in her
2078081757
Reposted by HGB
Matthew Garrett @mjg59.eicar-test-file.zip · 01/02/2025
Tabletop scenario: Elon Musk walks in and pulls the big "Disable 802.1x" lever like that scene in Ghostbusters, what controls do you still have
223518
HGB @hgb.crowstrike.zip · 22/01/2025
www.reuters.com/world/us/tru... Wut
reuters.com
Trump pardons Silk Road founder Ulbricht for online drug scheme
U.S. President Donald Trump on Tuesday pardoned Silk Road founder Ross Ulbricht, who was serving a life sentence after being convicted of running an underground online marketplace that was used by thousands of drug dealers and others to conduct over $200 million worth of illicit sales using bitcoin.
030
HGB @hgb.crowstrike.zip · 20/01/2025
Pick it up! #vinyl #ska
The album "Evildoers Beware!" By Mustard Plug in vinyl spinning on a record player. The album art is displayed and shows a mustard bottle holding a fist up with a grimacing smile and sunglasses on.
120
HGB @hgb.crowstrike.zip · 19/01/2025
17 million in a single hand 😉
A screenshot of the game balatro with a best hand score of 17,363,800
000
HGB @hgb.crowstrike.zip · 19/01/2025
Psychic by Darkside might just be a perfect album.
000
Reposted by HGB
beetle moses @beetlemoses.bsky.social · 17/01/2025
118254843175
HGB @hgb.crowstrike.zip · 18/01/2025
Even now, I really miss this city. #vinyl #punk #losangeles
The album Los Angeles by the punk band X. The album set features an X on fire on a black background with the album title in red.

The vinyl record is plain black with a white center and is spinning on a record player.
2130
HGB @hgb.crowstrike.zip · 17/01/2025
When my wife is out of town, I listen to weird German post punk at 7am. #vinyl #postpunk
A German postpunk record with a group of punks hugging each other in blue with the words "als die welt noch unterging"
160
Reposted by HGB
Taggart @taggart-tech.com · 16/01/2025
I am so excited to finally show you the stable alpha of Venture, a cross-platform GUI for parsing Windows Event Logs! github.com/mttaggart... Venture was developed with support from my employer with the intent of creating an open source tool for all. Thank you, UCLA Health!
github.com
GitHub - mttaggart/venture: Venture: Cross-Platform GUI tool for parsing and analyzing Windows event logs
Venture: Cross-Platform GUI tool for parsing and analyzing Windows event logs - mttaggart/venture
296
HGB @hgb.crowstrike.zip · 16/01/2025
I went record shopping today and I am going back to my roots. Like most I really developed my taste in music as a teenager and I was very into this drone-y post punk sound. #vinyl #interpol #postpunk
The album Antics by Interpol spinning on a record player. The record is red with a white label and the cover art is very simplistic. All white with the words interpol antics in the middle in red and black.
071
HGB @hgb.crowstrike.zip · 13/01/2025
My daughter today was sitting at my desk and said she was working. When I asked what her job was she said "oh, I just do work". I feel this in my core.
010
Reposted by HGB
Taggart @taggart-tech.com · 13/01/2025
Hey Bsky! I'm writing a piece on Python package security, and I'd really like to interview someone involved with the Debian Python team or someone who's a Fedora package sponsor to talk about the process. If you or anyone you know would be up for a 30-minute interview, drop me a DM! Thank you!
0712
HGB @hgb.crowstrike.zip · 12/01/2025
I've been doing chores all day. Unclogged some drains, tightened some handles, hung a mirror, and put up some smoke detectors. Also I got a pedicure today. Time to chill with some vinyl. #punk #vinyl #fugazi
The record Repeater by Fugazi spinning on a record player. The record is blue and the album cover is placed on top of the player. The album art features the words Fugazi Repeater in large text. Also shown is the inside cover which shows the musicians in the band playing their instruments in black and white with a blue background.
150
HGB @hgb.crowstrike.zip · 08/01/2025
Well it turns out InTune Device Compliance policies don't matter at all. labs.jumpsec.com/tokensmith-b... Thankfully you can still detect intrusions with some older detection techniques like risky sign ins and looking for Check My Sign In (cmsi) events from the InTune company portal ID
labs.jumpsec.com
TokenSmith - Bypassing Intune Compliant Device Conditional Access | JUMPSEC LABS
Conditional Access Policies (CAPs) are the core of Entra ID’s perimeter defense for the vast majority of Enterprise Microsoft 365 (M365) and Azure environments. The core ideas of conditional access ar...
100
HGB @hgb.crowstrike.zip · 06/01/2025
#vinyl #punk
The vinyl record "can't wait to be fine" by the band We Hate You Please Die spinning on a record player with the album art on display. The album art features the face of the lead singer shown from her eyes and up. She has black hair with the tips bleached and in a very messy style with pink hair ties and she is pictured in front of a tile wall.
010
HGB @hgb.crowstrike.zip · 06/01/2025
My daughter is home sick so I'm listening to records and cleaning. So far on my playlist has been Mustard Plug, The Adolescents, and The Descendants.
010
HGB @hgb.crowstrike.zip · 06/01/2025
How many tobacco related crimes does the ATF actually pursue?
010
HGB @hgb.crowstrike.zip · 05/01/2025
Chili day!
Mise en place for a big batch of chili including a variety of peppers, onions, beef, garlic, dry spices, and of course - beans
110
HGB @hgb.crowstrike.zip · 04/01/2025
I just threatened my wife to throw away all of our mismatched Tupperware and replace them with the vastly superior deli cups and I might just do it...
000
Reposted by HGB
Anthony Iannaccio @mrtonynacho.bsky.social · 02/01/2025
Mister Rogers never misses
You know, your own imagination is far more wonderful 

Mister Rogers’ NeighborhoodThan any computer could ever be. You know why?

Mister Rogers’ NeighborhoodYou’re a living human being. And a computer is just a machine.

Mister Rogers’ NeighborhoodHuman beings are far more wonderful than machines.

Mister Rogers’ Neighborhood
195248718238
HGB @hgb.crowstrike.zip · 30/12/2024
#punk #australia
A record player spinning a pink vinyl with the album art displayed for the album amyl and the sniffers - cartoon darkness.

The image on the cover art features the members of the band in a parking lot making weird poses while the lead singer is flashing her breasts - although they are censored.
020
Reposted by HGB
Horkos @wylienewmark.bsky.social · 27/12/2024
This is the game. Be mad if you want, but if the IC pulled this off in China, you’d think it was based. This is SolarWinds and OPM and a dozen other examples: espionage at scale facilitated by poor code in products and lack of security hygiene. Be mad if you want, but don’t pretend this is unfair.
45215
HGB @hgb.crowstrike.zip · 26/12/2024
Dune taking place 10,000 years after the butlerian jihad was a mistake.
000
HGB @hgb.crowstrike.zip · 22/12/2024
I bought myself some more gator sauce as an early Christmas present and I am very pleased.
A Christmasy image with a Christmas tree and snowy background but with the focus being a bottle of Gator Sauce hot sauce with an alligator lounging in the swamp on the label
000
Reposted by HGB
Christophe Tafani-Dereeper @christophetd.fr · 16/12/2024
New research: We've been monitoring a threat actor publishing dozens of trojanized GitHub repositories targeting threat actors, leaking hundreds of thousands of credentials along the way securitylabs.datadoghq.com/articles/mut...
Overview of the attack flowOverview of how a large number of credentials were leakedClusters of fake GitHub profilesPhishing e-mail
02113
HGB @hgb.crowstrike.zip · 11/12/2024
IPv6 was a mistake.
000
HGB @hgb.crowstrike.zip · 10/12/2024
Pro tip: put your phishing implant in the "unsubscribe here" link and spam legitimate looking marketing email to IT staff. You'll bypass the SOC analysis and annoy enough admins into getting them to click the link.
030
HGB @hgb.crowstrike.zip · 10/12/2024
Dark Wire by @josephcox.bsky.social was absolutely my favorite read this year. Exceptional journalism is hard to come by these days.
The cover of the book Dark Wire by Joseph Cox featuring red sound waves on a tan distorted background with the tagline "the incredible true story of the largest sting operation ever"
020
HGB @hgb.crowstrike.zip · 10/12/2024
My computer is currently broken and all I want to do is make a fusion gif of the eye of sauron and elf on a shelf snitching to Santa.
010
Reposted by HGB
Aaron Stewart-Ahn @badideas.bsky.social · 09/12/2024
Fuck I think we totally forgot that part in Dune Pt. 2 about not falling for charismatic violent folk heroes fueled by vengeance who look like Timothee Chalamet in a hoodie
270197082037
HGB @hgb.crowstrike.zip · 09/12/2024
This is shameful. I don't like to yuck people's yums but I draw the line here.
030
Reposted by HGB
Technology Connections @techconnectify.bsky.social · 07/12/2024
A lot of you have never worked in the service industry and it really shows.
912637180