@killandy02

I made https://xitter.cf/t.co/ICs7K8vypv

 chicago
Joined February 2026
  • Tweets603
  • Following175
  • Followers81
173Media
killandy retweeted
Enleak
@0xEnleakOct 26
I've been thinking a lot about where AI fits in detection engineering. Wrote a short blog about the questions I keep hearing, like whether you still need to know the query language when the model has the docs, and what the field seems to agree on. enleak.dev/writing/garbage-i…

Becoming a Detection Engineer, Part 2: Garbage In, Garbage Out

Part 2 of my path to becoming a detection engineer. The questions people keep asking about AI in detection engineering, put to an experienced detection engineer, and what the field seems to agree on.

enleak.dev
6
8
93
3,425
''EDR Evasion: Process Injection Without WriteProcessMemory'' #infosec #pentest #redteam #blueteam zerosalarium.com/2026/09/edr…

EDR Evasion: Process Injection Without WriteProcessMemory

Technique performs Windows process code injection by leveraging a Windows named pipe, it does not use VirtualAllocEx and WriteProcessMemory

zerosalarium.com
6
72
343
15,456
killandy retweeted
lyra
@_lyraaaa_Sep 22
like holy shit 12yo me would be losing my mind over this we're in a scifi cyberpunk ish timeline but the aesthetics haven't caught up yet so no one realizes it don't ever forget how awesome all this stuff is, especially when we take it for granted so easily
7
22
3
377
9,679
killandy retweeted
Enleak
@0xEnleakOct 24
wrote a small blog detailing what i learned: enleak.dev/writing/red-light…

Becoming a Detection and Response Engineer, Part 1: Red Light, Green Light

Part 1 of my path to detection and response engineer. A log connection said Active while two of its three feeds had been dead for four weeks, and that taught me what detection drift is.

enleak.dev
Enleak
@0xEnleakOct 24
reading on detection drift, validation and decay today, join me: socprime.com/blog/detection-… axoflow.com/blog/detection-e…

Detection Validation and Decay: Stop Silent Failures

How to test detection rules, catch silent failures, prevent coverage gaps, and build a defensible validation cadence

socprime.com
1
2
19
744
killandy retweeted
Kr$na
@krishdotdevOct 24
Average tech bro lifestyle.
204
3,767
252
28,644
834,529
On the bright side - the market is INSANE right now for security engineers
29
29
6
557
38,531
Hardware looks scary until you break it down into small steps. So I built an app that takes you through Arduino one circuit at a time. Made with Opus 5.5 learn-arduino-red.vercel.app
325
1,515
155
14,319
821,174
killandy retweeted
Enleak
@0xEnleakOct 21
a former employee's credentials were still live in an Inference GCP project and their hermes-agent was using them to spin up and cycle NVIDIA L4 GPU VMs across Asia, alongside what look like personal LLM projects (Ollama, OpenClaw, a Discord bot, Gemini API keys), on company infrastructure.... cant make this up LOL
5
1
15
696
killandy retweeted
Kirill Firsov
@k_firsovOct 20
php2shell Tomorrow is a helluva day.
273
1,829
687
16,190
3,702,353
killandy retweeted
Enleak
@0xEnleakOct 20
why DaC is important: magonia.io/research/a-five-y…

A Five Year Retrospective on Detection as Code

Five years ago, I co-authored the first public paper on the concept of Detection as Code. While having some technical peers review this paper, we found that a few more advanced security programs were...

magonia.io
1
6
248
killandy retweeted
Beff (e/acc)
@beffjezosOct 19
The age of pure play autism is over. The time of the cracked multi-threaded ADHD agentic neuromancer is here.
Matti Palli
@tritloOct 19
having a touch of the 'tism had a good run, but that era is rapidly coming to an end
71
193
36
2,325
80,320
killandy retweeted
Nicolas Krassas
@DinosnOct 15
An open-source companion for REA that turns reverse-engineering findings into a build plan github.com/ShadowSwaps/REA-R…

GitHub - ShadowSwaps/REA-Reconstruction-Companion: Open-source, model-independent Agent Skill for...

Open-source, model-independent Agent Skill for evidence-based software reconstruction with REA. Optional integration, portable installer, and validation workflows. - ShadowSwaps/REA-Reconstruction-...

github.com
1
12
79
5,880
killandy retweeted
@@sopsieOct 15
open.spotify.com/track/2ORZh… 😍
4
1
14
501
killandy retweeted
DbgMan ^_^@0XDbgManOct 13
Replying to @0xEnleak
Cert doesn't matter, it's all about the fun 😂
1
1
3
377
28
141
16
943
17,833
killandy retweeted
alexei
@alexeixbtOct 7
creatine + magnesium glycinate + vitamin D3 is literally the holy trinity of supplements btw.
60
657
42
8,438
373,368
killandy retweeted
Enleak
@0xEnleakOct 7
good tip: if a K8s cluster gets popped, don't stop at the cluster. pivot to metadata endpoint access, then to the SA keys taken from it, then to what those keys did in the cloud control plane. the cluster's access is your blast radius
2
10
509
killandy retweeted
Lotto
@LottoLabsOct 3
Bros if you don’t have kids I’m absolutely begging you to work harder Work every second of free time you have
15
11
205
5,827
killandy retweeted
Smukx.E
@5mukxOct 3
A Position-Independent Code (PIC) agent for Mythic, built on the Stardust shellcode framework. Starburst compiles shellcode that runs from memory with no PE on disk. Uses FNV1a hash-based API resolution, AES256-CBC encrypted comms, and a compact binary TLV wire protocol. Github:- github.com/Whispergate/Starb…

GitHub - Whispergate/Starburst: PIC shellcode agent based on Stardust framework and Crystal Palace

PIC shellcode agent based on Stardust framework and Crystal Palace - Whispergate/Starburst

github.com
42
1
173
6,546
My no-KYC method for getting Monero: 1. Buy a crypto voucher, paying with cash if possible. 2.Redeem it on their website to any crypto on an external wallet. 3. Swap to XMR through Trocador. Tips: Use Tor, wait a while between steps, and send the XMR to a fresh wallet.
18
13
1
124
7,622
Load more