We are the Threat Intelligence and Malware Analysis team of @SentinelOne
Everywhere
- Tweets 1,189
- Following 400
- Followers 5,631
- Likes 709
Amazing share from Kris on tracing RedRelay details to the contractor and government customers behind it.
Nice reminder why tracking beyond the actor label matters.
Having previously posted that this was an interesting rabbit hole, a spam account liking that post a couple of weeks ago reminded me that I never actually explained why. So here's a brief version - maybe something we should blog about in more detail in the near future...
1
1
3
842
Five years of research-first, community-driven security.
LABScon 2026 brought it full circle.
Relive the final chapter:
2
6
773
SentinelLabs retweeted
🔥 New blog drop! My research introduces UAT-11587, a China-nexus group targeting government and policy organizations in 8 countries with the Antino backdoor. After a preview at @labscon_io, full technical analysis, campaign details & IoCs are now live:
blog.talosintelligence.com/c…
5
46
148
14,551
SentinelLabs retweeted
Latest from me and my colleague Carter Church - How to build agents from evaluations.
A short read if you are building an agent for your security program and have questions of where to start or how to measure success.
sentinelone.com/blog/buildin…
5
13
4,279
SentinelLabs retweeted
New drop from @Gabeincognito and @milenkowski.
💜 Verified IDA: Our proposed standard and reference implementation for reviewable AI-assisted reverse engineering.
AI is becoming part of how we reverse malware. The investigation it leaves behind should be something others can inspect, challenge, and continue.
5
8
25
3,006
SentinelLabs retweeted
[1/2] I had the pleasure of giving a lecture at the @DefAcUK / @CranfieldUni on "Cyber Operations In and Around Conflict." Cyber operations have become a common component of today's conflicts, conducted before, during, and after kinetic hostilities.
1
3
13
457
SentinelLabs retweeted
[1/6] Last week, @Gabeincognito and I presented at the very last @labscon_io on AI-assisted reverse engineering. Our work focuses on generating annotated disassembler databases (such as IDBs) as the output of LLM-driven analysis, instead of textual reports.
AI is becoming part of how we reverse malware. The investigation it leaves behind should be something others can inspect, challenge, and continue.
2
16
36
4,119
SentinelLabs retweeted
The Last @labscon_io was epic! Thank you for doing this and bringing #ThreatResearch community together. Big love from #PIVOTcon crew - till next time, friends 🤟🫶 We have a feeling that Phoenix’s energy is going to reborn in a new form 🐦🔥💪
3
20
567
SentinelLabs retweeted
New podcast is out!
🧪 A report live from the last @labscon_io
🤖 Three of the best keynotes you'll ever see: James Mickens, @k8em0 and @dinodaizovi
piped.video/b1UInfrrwy8?si=aT8w…
5
5
734
SentinelLabs retweeted
My third year speaking at #LABScon, and the best one! Being awarded 2nd place for Best Speaker means so much to me. Thank you to everyone who supported me and to the organizers for this incredible community. It will always have a special place in my heart! 💚💜
1
3
66
2,022
SentinelLabs retweeted
That's a wrap on The Last LABScon. Five good years, and this one was the best of them.
Thank you to our speakers for the research you trusted us with, to our sponsors for backing something this off-the-beaten-path, and to every attendee who embraced the spirit of the experiment and made it what it was.
What a run. 💜
Catch you along the way... 👋
4
11
64
16,019
After a final day of hands-on workshops, an unforgettable cyberpunk gala, and a little R&R (research & recovery) by the pool, the last LABScon has come to a close.
Thank you to all the friends around the world who made this five-year experiment possible. What a ride. 💜
1
9
33
1,938
SentinelLabs retweeted
Google's @AustinLarsen_ also told me (ahead of his talk about this at LABScon) how a rival cybercrime group, ShinyHunters, betrayed TeamPCP and leaked its data, and how he found the identity of Ruben Ian Thomson, who has since been charged as one the group's alleged key members.
6
34
2,578
Today LABScon attendees from across industry dropped new public reporting/articles. A quick 🧵..
1. Our very own Alex Delamotte (@spiderspiders_) with SentinelOne colleagues Albert Priego & Matej Havranek:
Don’t Call Us, We’ll Call Your APIs | TraderTraitor Backdoors Resurface on Victim With No Crypto Ties
sentinelone.com/labs/dont-ca…
2
4
12
1,340
2. @AustinLarsen_ featured in a Wired story about his talk on and work against TeamPCP:
wired.com/story/an-undercove…
1
3
489
