Sign in

IntelCorgi

@intelcorgi.bsky.social
211 followers 522 following 46 posts

cyber threat intelligence, OSINT, and corgi hair. Thoughts are my own, RT/Like != Endorsement. (He/Him) Blog: intelcorgi.com

PostsRepliesMedia
IntelCorgi @intelcorgi.bsky.social · 25/09/2026
My first ever in-person cybersecurity conference was @bsidesorl.bsky.social back in 2019. So I am really pumped to be giving my talk "OSINT Wins: A Celebration of Poor Threat Actor OPSEC" at the conference tomorrow!
Talk bannerTalk description: OSINT is challenging. Analysts frequently run into frustrating dead-ends over the course of months-long investigations into organizations or individuals. But sometimes the subject will slip up and reveal a piece of information that lets the analyst connect the remaining dots or open up a new avenue of investigation. During this presentation, we will thoroughly dissect a social-media scam and explore how the threat actor's lackluster operational security (OPSEC) allow us to piece together the multiple scams the actor has been running throughout the years. Attendees will learn examples of OPSEC mistakes to look for during investigations and see first hand how exploiting threat actor
010
IntelCorgi @intelcorgi.bsky.social · 08/06/2026
Idk if I was a foreign intel operator trawling LinkedIn and I saw someone’s dad made a sponsored post advertising his sons name, job in the military, and clearance level I might splurge a bit on lunch that day #opsecawareness
Screenshot showing a LinkedIn post where a dad advertised his sons active TS Clearance
000
Reposted by IntelCorgi
Leah McElrath @leahmcelrath.bsky.social · 01/04/2026
Incredibly moved by the Artemis II launch. (I might be crying. Not saying I am, but I might be.) We can still do amazing and good things.
2167146
IntelCorgi @intelcorgi.bsky.social · 24/03/2026
I handed my son this book and he started crying
000
Reposted by IntelCorgi
Christoph Harig @charig.bsky.social · 12/01/2026
IR Realists saying farewell to the Rational Actor Assumption
Homer Simpson hugging a rotten sandwich
10608141
IntelCorgi @intelcorgi.bsky.social · 14/12/2025
They’re doing cyber privateer discourse on Twitter again it seems
020
Reposted by IntelCorgi
Philip Bump @pbump.com · 01/11/2025
F. Scott Fitzgerald: In my book I invented Gatsby lifestyle as a cautionary tale The president: At long last, we have created the Gatsby lifestyle from the classic novel The Great Gatsby
217121872526
IntelCorgi @intelcorgi.bsky.social · 20/10/2025
Binja has been trying to analyze a vampire bat sample for 12 hours 🥲
210
IntelCorgi @intelcorgi.bsky.social · 14/10/2025
Shot / chaser
010
Reposted by IntelCorgi
Kat Abughazaleh @katmabu.bsky.social · 12/10/2025
3D printers: WE NEED YOU! If you have a printer, start making whistles for your community. Volunteers of ours have been printing and passing them out across communities, over 200 have been handed out so far!
11153861718
Reposted by IntelCorgi
Governor JB Pritzker @govpritzker.illinois.gov · 30/09/2025
People of Illinois, we need your help. Get your cell phones out – record what you see. Put it on social media. Peacefully ask for badge numbers and identification. Speak up for your neighbors. We need to let the world know this is happening – and that we won’t stand for it.
7813957712315
IntelCorgi @intelcorgi.bsky.social · 30/09/2025
The Sleuthcon CFP idea fairy came early this year
000
Reposted by IntelCorgi
Shiv Ramdas Mens Rice Activist @nameshiv.bsky.social · 20/09/2025
Don't apologise for your dog showing up during the Zoom, apologise for hiding him all this time
433664461
IntelCorgi @intelcorgi.bsky.social · 22/06/2025
Honestly surprised we got “legalize asbestos” before “legalize smoking in restaurants”
010
IntelCorgi @intelcorgi.bsky.social · 08/06/2025
bad day to be an inyalowda www.youtube.com/watch?v=eyXG...
youtube.com
The Expanse: Osiris Reborn - Official Announcement Trailer
YouTube video by IGN
010
IntelCorgi @intelcorgi.bsky.social · 03/06/2025
Thank you to everyone who came out to my Thotcon talk on Saturday! Slides are posted here: www.intelcorgi.com/thotcon-0xd-...
intelcorgi.com
Thotcon 0xd Presentation Resources
The following are my slides from my Thotcon 0xd presentation:
041
Reposted by IntelCorgi
Ron Filipkowski @ronfilipkowski.bsky.social · 07/05/2025
JD Vance broke the National Championship trophy, then visited the Pope who died the next day, then visited India and a terrorist attack happened and war broke out, then endorsed his brother for mayor who lost 83-11%. What’s next on the agenda?
1319161303254
Reposted by IntelCorgi
onion person @junlper.beer · 17/04/2025
everything is computer
962667164
IntelCorgi @intelcorgi.bsky.social · 22/03/2025
I hate x64 malware. I hate Golang malware. I hate x64 Golang malware.
020
IntelCorgi @intelcorgi.bsky.social · 20/03/2025
I’ve been agonizing over buying a new laptop for the last 6 years, and the thing that causes me the most frustration (besides terrible build quality / price) is committing to 14 vs 16 inches
100
Reposted by IntelCorgi
Pete Buttigieg @petebuttigieg.bsky.social · 05/03/2025
If Russia wants peace, they should end the invasion.
650454637276
Reposted by IntelCorgi
Eric M. Murphy @ericmmurphy.bsky.social · 01/03/2025
Five things I did memo: 1. Saw things you wouldn't believe. 2. Saw attack ships on fire off the shoulder of Orion. 3. Watched C-beams glitter in the dark near the Tannhäuser Gate. 4. Lost those moments in time like tears in rain. 5. Checked to see if it was time to die.
7568
Reposted by IntelCorgi
Greg Lesnewich @greg-l.bsky.social · 01/03/2025
Idk about y’all but I don’t plan on giving RU ops a free pass into our customer networks just because some ding dong says they aren’t a threat If anything I might just wanna burn them with more prejudice out of spite for both regimes
3369
Reposted by IntelCorgi
Senator Bernie Sanders @sanders.senate.gov · 28/02/2025
Trump berates Zelensky, the leader of a democratic country courageously fighting Russian imperialism, while he allies himself with Putin, a dictator who started the bloodiest European war in 80 years. Sorry, President Trump. We believe in democracy, not authoritarianism.
797237064305
Reposted by IntelCorgi
Angry Staff Officer @pptsapper.bsky.social · 24/02/2025
Dear OPM, here’s 5 things I did last week: - Made 3 rings for the eleven kings under the sky - Made 9 for mortal men doomed to die - Made 7 for the dwarf lords in their house of stone - Made 1 ring to rule them all - Went TDY to Mordor where the shadows lie
351024164
IntelCorgi @intelcorgi.bsky.social · 23/02/2025
Postponing PMRP prep with my second rule for #100DaysOfYARA. This one focuses on finding the B64 decoding routine seen in the final stages of the Coyote Banking Trojan. www.fortinet.com/blog/threat-...
My YARA rule for detecting the b64 routine seen in the Coyote Banking TrojanThe entire infection chain for Coyote https://www.fortinet.com/blog/threat-research/coyote-banking-trojan-a-stealthy-attack-via-lnk-files
021
Reposted by IntelCorgi
Dead Cat Dad @dbeatcatdad.bsky.social · 18/02/2025
My illegal Pinkerton is driving me to my illegal hotel while the hallucination machine in my phone summarizes the emails my coworkers wrote using their hallucination machines. My burrito travels separately in its own limo. This is innovation and normal.
204121764
Reposted by IntelCorgi
Rot26 🇺🇸🤝🇺🇦 @rot26.wtf · 13/02/2025
No, dipshit, but your values tell you who to shoot, under what circumstances, and why… in NATO in particular, it also helps you determine who you stand with when someone starts shooting at them. What an incompetent, unqualified, boob.
181
Reposted by IntelCorgi
Hank Green @hankgreen.bsky.social · 10/02/2025
“Why don’t they play popular music at the Super Bowl anymore.” — Man who thinks 1996 was 10 years ago.
1016581323207
IntelCorgi @intelcorgi.bsky.social · 10/02/2025
Huge day for advertising for Burrito Taxi
000
IntelCorgi @intelcorgi.bsky.social · 07/02/2025
I guess the AI profile pictures are going with a “mugshot” theme now
010
IntelCorgi @intelcorgi.bsky.social · 06/02/2025
I miss the free version of riskIQ
052
Reposted by IntelCorgi
Horkos @wylienewmark.bsky.social · 05/02/2025
You’re an MSS or SVR cyber targeter who’s spent years trying to find an access vector into SPS/PAM; then suddenly a pack of high-profile, right-wing, edgelord zoomers — who will definitely click on any link they think will get them laid — just get admin access. Prepositioning acquisition speedrun.
16314
Reposted by IntelCorgi
Ed Zitron @edzitron.com · 04/02/2025
So OpenAI's deep research tool is useful if you...already know about the subject? Why does every piece that Casey writes feel like it's trying to explain to a kid why they didn't get as many Christmas gifts this year
OpenAI’s deep research suffers from the same design problem that almost all AI products have: its superpowers are completely invisible, and must be harnessed through a frustrating process of trial and error.

Generally speaking, the more you already know about something, the more useful I think deep research is. This may be somewhat counterintuitive; perhaps you expected that an AI agent would be well suited to getting you up to speed on an important topic that just landed on your lap at work, for example. 

In my early tests, the reverse felt true. Deep research excels for drilling deep into subjects you already have some expertise in, letting you probe for specific pieces of information, types of analysis, or ideas that are new to you.

It’s possible that you can make this work better than I did. (I think all of us will get better at prompting these models over time, and presumably the product will improve over time as well.)
4264369
IntelCorgi @intelcorgi.bsky.social · 03/02/2025
Idk I guess I don't understand the point of advertising a job as being in one city and then saying you have to relocate to a different city in a different state.
120
IntelCorgi @intelcorgi.bsky.social · 01/02/2025
The Attribution Understanders have logged on
120
Reposted by IntelCorgi
mthcht @mthcht.bsky.social · 26/01/2025
LOLC2 - a collection of C2 projects that operate exclusively through legitimate services lolc2.github.io, I'm probably missing some projects let me know ! 🌐 lolc2.github.io 🐙 github.com/lolc2/lolc2....
github.com
GitHub - lolc2/lolc2.github.io: lolC2 is a collection of C2 frameworks that leverage legitimate services to evade detection
lolC2 is a collection of C2 frameworks that leverage legitimate services to evade detection - lolc2/lolc2.github.io
0117
IntelCorgi @intelcorgi.bsky.social · 26/01/2025
2025 Hunchly wishlist: - dark mode - notepad / scratch notes feature - squash UI bugs in chrome extension - overhaul reporting tool
010
IntelCorgi @intelcorgi.bsky.social · 25/01/2025
Time to buy my first paper Magic cards in years
000
IntelCorgi @intelcorgi.bsky.social · 22/01/2025
I finally got around to making my first contribution to #100DaysofYARA 2025 with two YARA rules. My first rule looks to detect Qbit Stealer, a Golang stealer which never really took off. My second rule is designed to hunt various "calling cards" the developer left, which might find related malware.
my first yara rule for 100daysofyara 2025, designed to detect qbit stealer.Second qbit rule, designed to detect calling cards from the developer.
132
IntelCorgi @intelcorgi.bsky.social · 09/01/2025
Imagine being a CISO and having just cut an enormous check to a vendor, only to learn the main “product improvement” they’ve been developing over the previous year is a chatgpt wrapper
000
Reposted by IntelCorgi
CosmicRami 🏳️‍🌈🏳️‍⚧️ @rami.spaceaustralia.com · 07/01/2025
‘The Expanse’ re-watch season rating: One ✅ ✅ ⭐️⭐️⭐️⭐️ Two ✅ ✅ ⭐️⭐️⭐️⭐️⭐️ Three ✅ Four ✅ Five ✅ Six ✅ Just finished season two. Probs some of the best sci-fi ever written. Big call but standing by it. That good! On to season three later this week!
453008
IntelCorgi @intelcorgi.bsky.social · 31/12/2024
Happy 100DaysOfYARA Eve!
030
IntelCorgi @intelcorgi.bsky.social · 24/12/2024
I’m 2 for 2 on Dell monitors handling multiple inputs like absolute garbage. Expensive lesson learned
010
IntelCorgi @intelcorgi.bsky.social · 22/12/2024
Threat research in 2024
a google search operator for the term "skibidi stealer"
074
IntelCorgi @intelcorgi.bsky.social · 18/12/2024
I wonder how many block lists I’ve ended up on ? 🤔
100
IntelCorgi @intelcorgi.bsky.social · 17/12/2024
020