I am EXTREMELY excited to announce that I am now officially a co-author for @sansforensics #FOR610: Reverse Engineering Malware!! In fact, @lennyzeltser and I have just completed a massive course update, which JUST went live online! sans.org/cyber-security-cour…

If AI didn’t exist and I came to the infosec community and said “here’s a magic box that finds 0days” and “here’s another box that can autonomously scan networks for misconfigurations”, they’d be jumping up and down to see if we could glue together a self-replicating worm. 1/

Introducing Gemini 4 Argon – our new frontier model. It’s built for complex workflows across coding, enterprise knowledge work, and cybersecurity defense – rolling out today to a set of trusted testers through our Fairwind Program.

If you have any time-sensitive plans or moments you want to get to, I’d highly advise not trusting your timetable to @AmericanAir. They’re only going to disappoint with delays and cancellations.

Annual reminder that I know the layout of too much of Vegas hotels and casinos by heart.

We've been busy. We're happen to announce the launch of NightBeacon Stealth. A full agentic AIDR down to the endpoints with automatic AI deception capabilities, defensive countermeasures, and autonomous workflow. NightBeacon Stealth can work as a standalone solution or integrated into our NightBeacon CMD infrastructure. Taking things that used to take us hours and days and shrinking that down to seconds or minutes. One of the most powerful components of NightBeacon Stealth is our ability to throw off autonomous models attacking your infrastructure. They will sit there for days/weeks/months just churning with no success. There's so much packed into one agent, it has everything you need to defend the threats of tomorrow. Welcome to the era of NightBeacon... #BinaryDefense

My network has grown a bit over the past year, thanks to teaching classes, conferences, and other online events. If anyone in my network will be around Black Hat and wants to catch up, chat, or grab a coffee, please let me know! Calendar will be busy but I’ll find time.

Hold on—a teenager gets bitten by a mutant spider and starts swinging from skyscrapers, and his finance strategy is where you draw the line for realism?

Yet another flight, land at @DFWAirport, but @AmericanAir is backed up and no gates available, so in-air gains are ruined and we’re now severely delayed past our original arrival time.

Some of y'all need to face a hard truth: Maxing out your Claude limits isn't the flex you think it is.

This is the right viewpoint. There is a lot to build and a lot of good to come out of this, it definitely has reinvigorated a lot of folks. Get that grey matter working again!

What I see in cybersecurity: AI has re-invigorated an industry that was largely stale for the past ten years. Complete new green field. Changes everything. New innovation happening everyday. Need to adapt or be left behind. This reminds me of the early 2000s, it’s exciting, addicting, and it’s going to be fun as hell.

Is this where I jump in and say @limacharlieio doesn’t have license bands and the free tier as just as much telemetry as you want?

Super pumped to announce I’ll be delivering my GenAI for detection engineering workshop at @BSidesAustin on December 5. I hope to see you there!!

This is a good resource/cheatsheet, however please note there are two EVTX sources here (Security & System).

New achievement unlocked: It’s with a tear in my eye that I look over and nod at the other chaperone dad in the movie theater. Also stuck in an awful seat to the back, so we don’t embarrass our daughters, we both deal with whatever plot line is coming our way.

Join us on Tuesday!!!

If you’re working in DFIR/THIR and using Velociraptor, this training is a MUST.