I am retiring this social media account. Find me as @hal_pomeranz@infosec.exchange

Orlando, FL
Joined November 2008
I’m happy to report that I spoke to @bettersafetynet last night. Surgery went great and he was in good spirits. Awesome!
24
It's a big day for the #DIFR Discord, we officially released v1 of our community book today, free for the masses! Many thanks to @bunsofwrath12 for organizing and pushing things forward as well as to the other authors and contributors! leanpub.com/TheHitchhikersGu…
12
159
11
464
I meant the Rat Pack version from the 50s
1
Hal Pomeranz retweeted
I can't believe it needs to be said, but defcon is not the place you go to get up and brag that you do/ know how to do illegal shenanigans. You will earn zero cred, you will be judged as an opsec risk, and you're low hanging fruit for feds.
27
49
4
548
Replying to @MalwareJake
Isn’t this the plot of the original “Oceans 11”?
1
40
Hal Pomeranz retweeted
It was agreed that all differences were to be put aside momentarily to try out the new trampoline. #grickledoodle #oldies #pets #trampoline #dogs #cats gricklemart.com/second-delig…
2
8
101
Replying to @falconsview
Most orgs are in the “Nope, never” state when it comes to change. This is why I shifted to Incident Response. If the org won’t put in the work “left of boom”, then I’ll see you on the right!
1
Replying to @malmoeb @Shpantzer
Not sufficient. “UsePAM yes” effectively overrides “PasswordAuthentication no” and “UsePAM no” is a bad idea. You need to disable password auth in your PAM stack too.
2
Oh sure, some of you may remember Olivia Newton John by rewatching "Grease". Personally, I'm going with "Xanadu".
3
4
Hal Pomeranz retweeted
Very useful thread for maldev wannabes 👇🏻. Check it out!
90% of my Twitter DMs are asking me about how to start getting into Malware development. Well, I love answering them but it's easier to write a small thread about it so here we go. 1/12
1
11
40
Hal Pomeranz retweeted
We’re currently at 151 endorsements. We need to get to 500. The only way to do this is to break out of my direct and second degree network. Please share as widely as you can. You’d think it’d be easy to gather 500 out of 150k members. It is not. <3
Alright, ISC2 Members of the world ... I'm doing this again. While the site will be updated over the next few days with more details, I need to collect 500 endorsements of my petition before end of August. I'd be grateful for your support. RT=<3 be-represented.org/
3
36
5
30
Hal Pomeranz retweeted
There is no ‘teacher shortage’. There are thousands of qualified experiences teachers who are no longer teaching. There’s a shortage of respect and proper compensation for teachers allowing them to actually teach.
1,773
39,106
1,731
211,022
Hal Pomeranz retweeted
If you have not yet played with MemProcFS, now is the time! These new updates will rapidly accelerate hunting through memory forensic artifacts. If you like it, please support the project, provide feature requests, and send a big thank you to @UlfFrisk! #DFIR
MemProcFS v5 released! Super fast Memory Forensics & Analysis in easy-to-use virtual file system! Forensic updates (incl. csv file support) and major API updates. github.com/ufrisk/MemProcFS
6
20
Do you link to people on LinkedIn that you've never actually met? Suppose one of them asked for a 30 min Zoom call for career advice-- would you take that meeting at a mutually convenient time?
6
4
Hal Pomeranz retweeted
Are you having trouble writing the right #kql queries for your incident response process. Then check out the #DFIR section for queries on email compromise, malicious files, persistence and more. github.com/Bert-JanP/Hunting…
18
50
Hal Pomeranz retweeted
Linux: "Everything is a file." "Everything? Directories?" Linux: "File." "Sockets? Devices?" Linux: "Yup, Files." "My constant worry that I'll never be good enough?" Linux: "2 files actually."
41
646
40
3,773