iiinova — where your digital self keeps evolving

Johan Berggren @jbn.the4711.net · 07/08/2026

I'm releasing a new tool for all #tailscale users. `tss` is a fast, interactive tool to search, pick, and connect to your Tailscale nodes from the terminal. It works as an interactive TUI picker or a one-shot CLI that fuzzy-matches hostnames and connects you directly. github.com/berggren/tss/

github.com

GitHub - berggren/tss: Tailscale Host Selector

Tailscale Host Selector. Contribute to berggren/tss development by creating an account on GitHub.

0144

Johan Berggren @jbn.the4711.net · 18/06/2026

The LCARS vibe is strong in the 2026 world cup.

110

Johan Berggren @jbn.the4711.net · 26/05/2026

New release: OpenRelik CLI. Built for both humans and machines. Hook it up to your favourite harness and operate your forensic workflows using agents. #DFIR

062

Johan Berggren @jbn.the4711.net · 24/04/2026

I'm proud to have been invited by the Swedish Armed Forces 4th Cyber Defence Unit and to contribute to a team that placed third in Locked Shields, organised by CCDCOE. Strong teamwork between Swedish and French Armed Forces made it possible.

030

Johan Berggren @jbn.the4711.net · 24/04/2026

If you are an OSS maintainer or someone filing security bug reports. This is an essential read. We need an updated process to deal with the high rate of automated vulnerability reports and this initiative points out some very good advice and suggestions. www.cncf.io/blog/2026/04...

cncf.io

The AI-driven shift in vulnerability discovery: What maintainers and bug finders need to know

AI models have recently drastically changed the sophistication, speed and scale of software vulnerability discovery. It is now trivial for non-experts to find real vulnerabilities in software with…

001

Johan Berggren @jbn.the4711.net · 03/03/2026

New version of OpenRelik (the #DFIR workflow engine) is out. New workflow UI, support for chords (task groups with callback), MCP server and much much more. Give it a try! Take a look at the new page for workers showcase, both official and community contributed: openrelik.org/workers/

openrelik.org

OpenRelik Workers

145

Johan Berggren @jbn.the4711.net · 30/12/2025

Hey folks at #39c3, I'm around until tomorrow afternoon. If anyone wants to chat about OpenRelik or #DFIR in general. Let me know.

030

Reposted by Johan Berggren

Markus Einarsson @einarssonm.bsky.social · 23/11/2025

Achievement unlocked: Presenting at BSides Munich! ✅✨ On Nov 17th I presented my talk ”From Hours to Minutes: Automating Incident Response Triage with Open-Source Tools”. Thanks to the @bsidesmunich.bsky.social organizers, volunteers and attendees for an amazing conference!

062

Johan Berggren @jbn.the4711.net · 19/06/2025

Great stuff from Maarten and the Timesketch team!

020

Reposted by Johan Berggren

Eric Capuano @eric.zip · 19/06/2025

🚀 Just launched: DetectionForge — a purpose-built platform for crafting, testing & validating @limacharlie.io detection rules. Perform detection unit tests & multi-org backtesting + import/export IaC 🔗 Try it: detectionforge.ddi.sh 💻 GitHub: github.com/Digital-Defe... #detectionengineering #secops

detectionforge.ddi.sh

DetectionForge

DetectionForge - A comprehensive detection engineering environment for crafting, validating, and testing LimaCharlie detection rules

1126

Johan Berggren @jbn.the4711.net · 13/06/2025

Great summary of a great paper. Worth a read if you are building LLM agents systems.

010

Johan Berggren @jbn.the4711.net · 06/06/2025

Great stuff from Eric and Whitney.

051

Reposted by Johan Berggren

Eric Capuano @eric.zip · 05/06/2025

Here are the slides/resources from our #SecurityFest talk on "Modernizing Incident Response Using Techniques that Scale" Talk: www.youtube.com/live/Znl7TBF...

youtube.com

Security Fest 2025 - Day 2

YouTube video by Security Fest

2138

Reposted by Johan Berggren

Heather Adkins @argv.bsky.social · 23/05/2025

Some excellent work by @craiggidney.bsky.social that reduces the number of qubits (in a quantum computer) required to break RSA by 20-fold. If you don’t have a migration plan to safe algorithms, now is the time to start one!

0116

Reposted by Johan Berggren

b1acktu1ip.bsky.social @b1acktu1ip.bsky.social · 30/04/2025

tested #openrelik, #hayabusa, #timesketch and #splunk4dfir using #thedfirreport recent analyst case. was a lot fun! will definitely use those tools more now 🚀

021

Johan Berggren @jbn.the4711.net · 26/02/2025

Hey #DFIR people! New #OpenRelik release just dropped. Some cool new features and a bunch of bug fixes.

052

Reposted by Johan Berggren

Ryan Benson @hindsig.ht · 19/02/2025

A new Unfurl release is here! v2025.02 adds: 🌐 Parsing encoded/obfuscated IP addresses 🦋 Resolving #Bluesky handles to their identifiers (DIDs) and looking up their creation timestamps 🐛 Bug fixes & better bulk parsing Blog: dfir.blog/unfurl-parse... Code: github.com/obsidianfore... #DFIR #OSINT

unfurl.link

unfurl

Extract and Visualized Data from URLs

087

Reposted by Johan Berggren

Tanisha L. Turner @cybersecdiva.bsky.social · 12/01/2025

Hayabusa - A sigma-based threat hunting and fast forensics 🔎 timeline generator for Windows event logs. It can easily be integrated with other hunting & DFIR tools such as Velociraptor & OpenRelik. Check it out 🔥🔥: github.com/Yamato-Secur... #threathunting #DFIR #sigma #cybersecurity #infosec

github.com

GitHub - Yamato-Security/hayabusa: Hayabusa (隼) is a sigma-based threat hunting and fast forensics timeline generator for Windows event logs.

Hayabusa (隼) is a sigma-based threat hunting and fast forensics timeline generator for Windows event logs. - Yamato-Security/hayabusa

1136

Reposted by Johan Berggren

halvarflake.bsky.social @halvarflake.bsky.social · 02/02/2025

This is absolute insanity.

27316

Reposted by Johan Berggren

Tailscale @tailscale.com · 08/01/2025

It's easy to lose sight of the fact that, from a tech perspective, we're absolutely living in the future. Our CEO and co-founder @apenwarr.ca looks at just how powerful our modern machines are — and what that means for all of us

tailscale.com

Living in the future, by the numbers

Instead of making the traditional New Year predictions, let’s talk instead about the beautiful technological future we live in: the one that exists right now but we don’t always notice.

04718

Johan Berggren @jbn.the4711.net · 08/01/2025

Wooden satellite.. amazing. And built without nails or glue. Oh Japan, never change ♥️ www.theregister.com/2025/01/08/j...

theregister.com

Japan's wooden satellite leaves International Space Station

Carefully crafted wooden box, LignoSat, is on its own

010

Johan Berggren @jbn.the4711.net · 07/01/2025

Great stuff from @tomchop.me! Memory analysis and Yara support in #OpenRelik #DFIR

053

Johan Berggren @jbn.the4711.net · 01/01/2025

Great summary of last year of databases.

010

Reposted by Johan Berggren

Simon Willison @simonwillison.net · 31/12/2024

Here's my end-of-year review of things we learned out about LLMs in 2024 - we learned a LOT of things simonwillison.net/2024/Dec/31/... Table of contents:

The GPT-4 barrier was comprehensively broken
Some of those GPT-4 models run on my laptop
LLM prices crashed, thanks to competition and increased efficiency
Multimodal vision is common, audio and video are starting to emerge
Voice and live camera mode are science fiction come to life
Prompt driven app generation is a commodity already
Universal access to the best models lasted for just a few short months
“Agents” still haven’t really happened yet
Evals really matter
Apple Intelligence is bad, Apple’s MLX library is excellent
The rise of inference-scaling “reasoning” models
Was the best currently available LLM trained in China for less than $6m?
The environmental impact got better
The environmental impact got much, much worse
The year of slop
Synthetic training data works great
LLMs somehow got even harder to use
Knowledge is incredibly unevenly distributed
LLMs need better criticism
Everything tagged “llms” on my blog in 2024

28648148

Johan Berggren @jbn.the4711.net · 21/12/2024

Home Assistant is an amazing OSS project. I'll excited to build on the new Voice device. I will get mine in a few days, and I can finally talk to my house! Build any automation I can imagen. Custom wake word (ok computer 🖖). LLM function calling anyone... www.youtube.com/live/ZgoaoTp...

youtube.com

YouTube

Share your videos with friends, family, and the world

020

Johan Berggren @jbn.the4711.net · 12/12/2024

New #OpenRelik release. Task metrics (queue length, completion, failures etc) & new Prometheus exporter. Plus, a new task dashboard for deep dives into task performance. 📝 openrelik.org/changelog/ 🔗 discord.gg/hg652gktwX #DFIR

031

Reposted by Johan Berggren

Gergely Orosz @gergely.pragmaticengineer.com · 04/12/2024

Within software architecture, few people shaped the industry as much as @gradybooch.bsky.social. Safe to say he's a true legend. In today's The Pragmatic Engineer Podcast episode, he shares fascinating stories, insights, observations. Watch here: newsletter.pragmaticengineer.com/p/software-a...

1444761

Johan Berggren @jbn.the4711.net · 27/11/2024

🚀 New OpenRelik release Role-based access control, folder sharing, database improvements, optimisations for file listings, chunked file uploads, bug fixes and refactoring efforts to improve stability. 📝 openrelik.org/changelog 🔗 discord.gg/hg652gktwX #DFIR

053

Reposted by Johan Berggren

emily freeman @emilyfreeman.bsky.social · 26/11/2024

That little countdown on 2FA apps stresses the shit out of me. I feel like I'm diffusing a bomb. If it gets into the red, I just wait. I can't handle the stress.

85117199

Reposted by Johan Berggren

Joseph Lorenzo Hall, PhD @josephhall.org · 23/11/2024

Let's Encrypt is now used by more than 500,000,000 websites!!! I could not be more happy and proud of everyone who has played a part in this colossal contribution to online safety, integrity, and confidentiality:

letsencrypt.org

Let's Encrypt Stats

Please note that the Let's Encrypt Growth and Let's Encrypt Certificates Issued Per Day charts are undergoing updates and may not reflect the most recent data. Let's Encrypt Growth Percentage of Web…

515431

Reposted by Johan Berggren

Ryan Benson @hindsig.ht · 21/11/2024

Since I'm trying out #Bluesky, I figured I should add in support for it in Unfurl! The v2024.11.20 release has some minor updates, but the biggest feature is the ability to parse a timestamp from Bluesky post IDs (or atproto TIDs). Example: dfir.blog/unfurl/?url=... Give it a try at unfurl.link!

02712

Johan Berggren @jbn.the4711.net · 20/11/2024

It's happening. #DFIR comminity is back in business.

030

Reposted by Johan Berggren

Kelsey Hightower @kelseyhightower.com · 20/11/2024

I attended a meetup in Seattle and got to spend time with @bnewbold.net and @pfrazee.com from the Bluesky engineering team. I walked away with an understanding of the role DIDs and PDSs play in the grand scheme of things, and why the most exciting work sits higher up the stack. I almost unretired.

34143997

Johan Berggren @jbn.the4711.net · 20/11/2024

Great resource for training and testing in #DFIR. Thanks for sharing with the community @binaryz0ne.bsky.social

152

Reposted by Johan Berggren

Jay 🦋 @jay.bsky.team · 19/11/2024

Bluesky now has over 20M people!! 🎉 We've been adding over a million users per day for the last few days. To celebrate, here are 20 fun facts about Bluesky:

307013027516061

Reposted by Johan Berggren

halvarflake.bsky.social @halvarflake.bsky.social · 19/11/2024

This is kinda big.

0143

Johan Berggren @jbn.the4711.net · 16/11/2024

TIL: deck.blue - Like Tweet Deck but for Bluesky. Looks promising.

030

Johan Berggren @jbn.the4711.net · 15/11/2024

I really like the "Quiet posters" feed. Full of great content from your network from those who don't post that often, but when they do, it is thoughtful. Highly recommend! bsky.app/profile/did:...

031

Johan Berggren @jbn.the4711.net · 31/10/2024

⚡️ Introducing the OpenRelik Community Discord Server! A dedicated space for technical conversation around the OpenRelik platform. 🔗 Join now to connect, share your ideas and learn from other #DFIR practitioners! discord.gg/rTxr2HXUKU

000

Johan Berggren @jbn.the4711.net · 26/10/2024

Access your #OpenRelik server from your @tailscale.com tailnet with this new guide. Tailscale is awesome for simplifying secure network access, and this guide makes it easy to integrate with your existing OpenRelik Docker containers.

openrelik.org

OpenRelik with Tailscale

This guide outlines the process of integrating your OpenRelik server with Tailscale, allowing secure access to your server from anywhere on your Tailscale network. Prerequisites: An installed and…

000

Johan Berggren @jbn.the4711.net · 08/06/2024

I'm on my way to #FIRSTCON24 in Fokuoka Japan. Looking forward to catching up with old and new friends in the incident response community! Let me know if you want to chat about open source #DFIR tooling (or anything else in the #infosec bubble), I'm around all week.

011

Reposted by Johan Berggren

Heather Adkins @argv.bsky.social · 14/02/2024

‼️🚨NEW report and blog from the @Google TAG and @Mandiant teams explores the implications of the Israel-Hamas war and where things stand with cyber in the Russian war in Ukraine: blog.google/technology/s...

045

Johan Berggren @jbn.the4711.net · 08/02/2024

✨ New Timesketch release! A notable feature we added this time is connectors to different LLM services. Out of the box we have support for Ollama (for open models) and VertexAI from Google. We continue building the foundation for Assisted Investigations. timesketch.org/changelog/#v...

010

Johan Berggren @jbn.the4711.net · 26/10/2023

New Timesketch release is out. Two highlights: - Unfurl [1] integration, get information from URLs directly in your timeline. - DFIQ [2] support with context aware SearchHistory. Changelog: timesketch.org/changelog/#v... [1] dfiq.org [2] dfir.blog/introducing-...

002

Johan Berggren @jbn.the4711.net · 15/09/2023

Hey folks, there is a new Timesketch release available. * OpenSearch 2.x support * Export query results to CSV * Extending Plaso formatters (e.g. show evtx message strings as default) * Include / exclude filters * Tag filter chips for Sigma timesketch.org/changelog/

timesketch.org

Changelog - timesketch

010

Johan Berggren @jbn.the4711.net · 21/07/2023

Hey DFIR folks: we released a new version of Timesketch today. - OpenSearch queries in DFIQ - Preserve user defined filters - Support event list sorting - Rework comments - Analyzer results in the CLI - Sketch attributes in the CLI github.com/google/timesketch/releas…

github.com

Release 20230721 · google/timesketch

What's Changed fixes #2809 UI bug by @jkppr in #2810 Timeline and Scenarios fixes + small UI fixes by @berggren in #2808 Show selected event in context view by @berggren in #2811 Consitent forms a...

041