I am retiring this social media account. Find me as @hal_pomeranz@infosec.exchange
Orlando, FL
Joined November 2008
- Tweets 19,311
- Following 237
- Followers 13,672
- Likes 12
Is this not generally a problem with third-party services, whether retainer or ad hoc? If you don't have the expertise in house, how do you vet the quality of the work product? This is particularly an issue for DFIR where defects may not be visible for some time.
2
Be careful how your retainer agreement is crafted. The SOW should be clear about exactly what kind of work can be performed under the retainer.
1
2
Depends on the opportunity—I might try to negotiate them down, but I’m fine with just wishing them luck and walking away.
Lately I've been running into more large companies offering only "Net 90" payment terms to vendors. Maybe that works for large suppliers, but you'll never see me working for these terms. I wonder about impact on project outcomes as a result of these policies.
2
2
Hal Pomeranz retweeted
Hey fam, need some help. Is anyone familiar with the X-MANTSH email header? What adds it and what's the data contained after the header mean? I found lots of references to an Apple Mail display bug from years ago, but nothing relevant.
Please RT for reach, DMs open.
3
28
1
27
Hal Pomeranz retweeted
This is a great write-up about LockBit 2.0 Ransomware!
Very interesting they are using NtQueryInformationFile() with "FileProcessIdsUsingFileInformation" with the goal of killing file lock holders
This is a more low level and evasive approach than using the Restart Manager API
Check out my analysis of #LockBit #ransomware v2.0 where I analyze all of its functionalities in IDA!
chuongdong.com/reverse%20eng…
h/t to @BushidoToken for the CTI and @demonslay335 for helping with the crypto!
1
16
67
Hal Pomeranz retweeted
We can house all refugees, not just the white ones.
We can lift all out of poverty, especially children.
We can work with dignity with flexibility & no commute.
What else have we seen proof of in the last couple of years of the lies of the white supremacist classist patriarchy?
4
10
74
Hal Pomeranz retweeted
Being poor is not something to be ashamed of, and does not devalue you as a human, and as a human you should always have what you need to be well.
3
29
2
389
Hal Pomeranz retweeted
This is a good one & I believe it.
"If you have knowledge, let others light their candles by it."
5
12
Hal Pomeranz retweeted
Hey everyone. @Antisy_Training now has On-Demand training for many of our classes (and more to come!) On-Demand gets you lifetime access to all class updates.
We have an amazing start with some amazing instructors.
Check it out.
antisyphontraining.com/on-de…
6
35
7
83
Hal Pomeranz retweeted
This is the best synopsis of what happened, why I sued Microsoft seeking class action, why I dropped my individual lawsuit, & the white-hot generational fire that forged what I did next & will continue to do until I’m gone or until we have #payequity
theverge.com/22331972/pay-eq…
4
2
15
Remember this week when you’re having a rough one—because we all do at some point. You belong in this field! Never doubt it!
1
3