Alex M @packetzero

Software Engineer at Secureworks. Ice hockey nut. my old tweets auto delete. Austin, TX Joined January 2013

Tweets

10
Followers

134
Following

497
Likes

5K

Alex M @packetzero

4 years ago

@thomasareed On a side note, I can’t believe Fusion still doesn’t have Apple Silicon ARM support.

1 0 0 0 0

View Details

Alex M @packetzero

4 years ago

@cedowens @antman1P 67 is good, but needs different colors (maybe like 62). The drone/circuit in 69 is great. Some good stuff

1 0 1 0 0

View Details

@daycyberwox Many companies try to limit summer internships to students entering senior year so they can identify and hire good graduates. Once in a while there are people that impress and get in early. I couldn’t have worked and done school at same time. Well done, Day !

1 0 1 0 0

View Details

Alex M @packetzero

4 years ago

@EricaZelic Something where you can meet a new group of friends. Yoga, golf, tennis, pickleball,birding,etc. Join noob/social league and get started. Or volunteer group (local thrift shop, CASA, etc)

1 0 2 0 0

View Details

Alex M @packetzero

4 years ago

@expomick They didn’t have fresh produce back in 1979? 😉

1 0 0 0 0

View Details

Alex M @packetzero

4 years ago

@haroonmeer It’s never going to change. Want a competitor to hire researchers to become a customer so they can evaluate your EDR product and produce a fully biased report on short-comings? Not good for business. Need standard apples to apples eval, where vendors can choose to share results.

1 0 0 0 0

View Details

Alex M @packetzero

5 years ago

@mubix @bdougieYO can help with actions? I can handle the c++ tonight if not resolved

2 0 0 0 0

View Details

Alex M @packetzero

5 years ago

@EricaZeli eBPF, audit, and Falco are essentially syscall tracing, so if EDR are monitoring “/dev/shm”, then any open,write, etc calls are seen.

1 0 0 0 0

View Details

Alex M @packetzero

5 years ago

@cyb3rops How do you measure performance? I would be interested in seeing comparison of the (a|b) regex vs 2 strings. It would be cool to have a test range that measured performance and reported false positives. Has anyone made a docker container for something like that?

0 0 0 0 0

View Details

Alex M @packetzero

5 years ago

@GeecheeThreat @shehackspurple @SANSInstitute Yeah, it became priced for company training budgets, and has become gate keeping. The cert attempts need to be affordable. @offsectraining classes cost quite a bit less.