David Cannings (@edeca) profile picture

David Cannings

@edeca

Cyber defence, reverse engineering and network geekery. Christian, husband & father of three. All views my own.

edeca.net
Joined September 2009
  • Tweets1.6K
  • Following319
  • Followers830
257Media
Photo by David Cannings (@edeca)Photo by David Cannings (@edeca)Photo by David Cannings (@edeca)Photo by David Cannings (@edeca)Photo by David Cannings (@edeca)Photo by David Cannings (@edeca)Photo by David Cannings (@edeca)Photo by David Cannings (@edeca)Photo by David Cannings (@edeca)Photo by David Cannings (@edeca)
David Cannings retweeted
Tom Hall (@thall_sec) profile picture
Tom Hall@thall_sec25 Feb 2023
We’re recruiting! Incident Response positions open at Manager and Senior Manager. Drop me a message if you want to work with some of the best talent in the UK. experiencedcareers.pwc.co.uk… experiencedcareers.pwc.co.uk…
7
17
2,895
David Cannings retweeted
John (@BitsOfBinary) profile picture
John@BitsOfBinary28 Jun 2022
Replying to @edeca
@edeca and I are giving a workshop at #FIRSTCON22 on writing #YARA rules: first.org/conference/2022/pr… The conference has been great so far, and I'm really looking forward to speaking to those who attend!
2
6
David Cannings retweeted
Kris McConkey (@smoothimpact) profile picture
Kris McConkey@smoothimpact28 Apr 2022
Since 2017, PwC's #threatintel team has produced an annual 'Year in Retrospect' consolidation of the most impactful threat activity and trends observed over the past year across our incident response, Managed Cyber Defence, and threat research services around the world.
Image from Kris McConkey (@smoothimpact)
Image from Kris McConkey (@smoothimpact)
Image from Kris McConkey (@smoothimpact)
Image from Kris McConkey (@smoothimpact)
2
40
9
110
David Cannings retweeted
PwC UK (@PwC_UK) profile picture
PwC UK@PwC_UK28 Feb 2022
The @PwC_UK leadership stands with the people of Ukraine and we urge Russia to stop its war. The PwC Foundation has set up, and made a donation to, a fundraising appeal to support the British Red Cross’ relief efforts in Ukraine.
Image from PwC UK (@PwC_UK)
4
53
12
222
David Cannings retweeted
Kris McConkey (@smoothimpact) profile picture
Kris McConkey@smoothimpact17 Nov 2021
Too good not to share part of @edeca being roasted on an internal Slack chat by @BitsOfBinary 😆
Image from Kris McConkey (@smoothimpact)
2
1
23
If you are a security researcher, bug bounty privateer or similar and are in the 🇬🇧 then the Government wants your input if the 30 year old Computer Misuse Act 1.0 provides you adequate protections.
disclose.io (@disclose_io) profile picturedisclose.io@disclose_io14 May 2021
[Call for Information] Open consultation Computer Misuse Act 1990 - Ideas - Disclose.io Community Forum m.disclose.io/3y9pgJw via @robdyke
disclose.io | Vulnerability Disclosure Standards & Tools

disclose.io | Vulnerability Disclosure Standards & Tools

The open, vendor-neutral infrastructure that powers vulnerability disclosure and security reporting. Safe, simple, and standardized for everyone.

disclose.io
2
17
21
David Cannings retweeted
Jason Smart (@pewpew_lazors) profile picture
Jason Smart@pewpew_lazors17 Aug 2020
A month ago we reported on the Wellmess malware family... want to read about how it's controlled? pwc.co.uk/issues/cyber-secur…
27
3
48
David Cannings retweeted
Lloyd Davies (@LloydLabs) profile picture
Lloyd Davies
@LloydLabs8 May 2020
Been playing around with fuzzing YARA 4.0 features for bugs with @edeca recently using AFL on Google Cloud. At it over a week on a 16-core instance, over 1 *billion* executions later of YARA and we've still not managed to crash it. Kudos to the YARA development team!
Image from Lloyd Davies (@LloydLabs)
Image from Lloyd Davies (@LloydLabs)
1
7
22
David Cannings retweeted
John (@BitsOfBinary) profile picture
John@BitsOfBinary12 Feb 2020
#Kimsuky Dropper: cf87475a87cb2172e73ee6afa7eb6384 Payloads: 1305506bc1777f82315412c9faf71b63 8bac633f24d21e9f88425e0d3fbaf5c5 C2: happy-boy[.]pe[.]hu CC: @cyberoverdrive
Image from John (@BitsOfBinary)
2
14
1
26
David Cannings retweeted
Nick Carr (@ItsReallyNick) profile picture
Nick Carr
@ItsReallyNick6 Dec 2018
Replying to @wxs
Awesome, that reminds me of @NCCGroupInfosec's sweet post and rule on PE Authenticode anomalies: nccgroup.trust/uk/about-us/n… As written, it's a bit noisy (mentioned in post). But it's a cool "signal" for context to combine with others. It also fires on the PE files in this thread. 😉
Image from Nick Carr (@ItsReallyNick)
5
1
14
The Turla Group have been using their PNG Dropper again. In this post we take a detailed look at the PNG Dropper and its new payload - @BHumphrey01 bit.ly/2SaYbQo #TurlaGroup #PNGDropper #Malware
Image from NCC Group Research & Technology (@NCCGroupInfosec)
10
2
13
David Cannings retweeted
NCC Group plc (@NCCGroupplc) profile picture
NCC Group plc@NCCGroupplc6 Aug 2018
“As Regional Head of our Incident Response & Threat Intelligence services I have the privilege of leading a team of experts, who help our clients during complex breach investigations and threat hunts. Their hard work ensures we can all benefit from a more secure society.” @edeca
Image from NCC Group plc (@NCCGroupplc)
8
15
Watch the video of NCC Group's @pengwinsurf talk on APT15 at #TheSAS2018 - youtube.com/watch?v=0AilXxyI…
4
2
3
NCC Group Incident Blog: Global Ransomware - nccgroup.trust/uk/about-us/n… - advice and what we know #ransomware #cybersecurity
26
1
17
David Cannings retweeted
Philippe Lagadec (@decalage2) profile picture
Philippe Lagadec@decalage211 Apr 2017
rtfobj (dev version): added detection of the MS Word "OLE2Link" vulnerability github.com/decalage2/oletool… #oletools cc @edeca
Image from Philippe Lagadec (@decalage2)
3
36
1
46
Rich @buffaloverflow from #hunted on our stand today! Come and say hello @NCCGroupCareers #piranhaphishing
Image from Holly Duncalf 🐶🎮🪄🍷🐘 (@Duncaleaf)
2
4
NCC Group Cyber Defense Operations Technical Note and more: on Sakula DLL Planting Analysis - github.com/nccgroup/Cyber-De… by @edeca
12
11
NCC Group Blog: Sysinternals SDelete: when secure delete fails - nccgroup.trust/uk/about-us/n… by @edeca
8
6
David Cannings retweeted
Mark Turner (@manc_marko) profile picture
Mark Turner@manc_marko7 Jan 2016
A few friends have now turned up for @NCCGroupInfosec @NCCGroupplc #NCCCON
Image from Mark Turner (@manc_marko)
19
8
#Suricata 3.0RC1 is out! Notes suricata-ids.org/2015/11/25/… Link openinfosecfoundation.org/do… Lots of features, optimizations & fixes. Plz help test!
1
34
17
Load more