Dan 

@[email protected]
178 Followers
202 Following
216 Posts

DFIR / digital archaeologist / codez / vetz / hamz.

I'm an archaeologist who digs through digital dirt to find artifacts of battles with mercenaries fought within corporate empires. I often analyze fragments of rotting logs to reconstruct historical events.


"As long as you are green, you will grow; when you are ripe, you will rot" (4eva a n00b).

Laserkittens! Blockchain tacoz!


All my opinionz are belong to me (and are typically goofy).

#DFIR #BlueTeam #infosec #cybersecurity #ThreatIntel #TTPs #IOCs #ReverseEngineering #reversing #malware #MalwareAnalysis #ransomware #HamRadio #PrivacyLaw #privacy #hacking

#programming :: #python  && #golang  && #csharp && (begrudgingly) #cpp #cplusplus  && (learning) #rust #rustlang 

Bio / Linkzhttps://4n68r.com
Twitterzhttps://twitter.com/4n68r
CountryUnited States of America
RegionNorthwest Indiana (Chicagoland), AKA “Da Region”
Dan Sep 16, 2025
The COM marshaled object header (it's always #Caturday )
Dan Feb 2, 2024

Hmm.... 🧐​ #AnyDesk

UPDATE: https://anydesk.com/en/public-statement

Dan Jan 29, 2024

#ransomware #ProTip Novell Netware is not vulnerable to #LockBit

https://www.bnnbloomberg.ca/icbc-partners-wary-to-resume-trading-with-bank-after-cyberattack-1.2002300

H/T Dan Feldman

ICBC Partners Wary to Resume Trading With Bank After Cyberattack - BNN Bloomberg

Industrial & Commercial Bank of China Ltd., the world’s largest lender by assets, has been unable to convince some market participants that it’s safe to reconnect their computer networks to the bank’s US unit after a ransomware attack disrupted its systems, according to people familiar with the matter.

BNN
Dan Nov 23, 2023

Never Forget #MaxHeadroom #PirateBroadcasting https://en.wikipedia.org/wiki/Max_Headroom_signal_hijacking

Sticker from https://www.etsy.com/listing/879156574/max-headroom-broadcast-signal-intrusion (I have one on my laptop!). I am not an affiliate and earn no money from sharing this link.

Max Headroom signal hijacking - Wikipedia

Dan Nov 12, 2023
White Castle gonna replace the human drive thru operator? #privacy #WhiteCastle #TermsAndConditions #WTF
Dan Jan 24, 2023
So… Trend Micro observed Vice Society use kape (Eric Zimmerman’s / Kroll’s forensic tool) to copy files? https://www.trendmicro.com/en_us/research/23/a/vice-society-ransomware-group-targets-manufacturing-companies.html
Vice Society Ransomware Group Targets Manufacturing Companies

In this blog entry, we’d like to highlight our findings on Vice Society, which includes an end-to-end infection diagram that we were able to create using Trend Micro internal telemetry.

Trend Micro
Dan Nov 21, 2022
Tea, Earl Grey, hot.