Tootfinder

Sailor Moon! (Also some cool stuff about domain admins and red tenants) but mostly- Sailor Moon! #BlueTeamCon

We have a “hangover from the 80s” where we think of attackers as one guy in a basement. A lot of attackers are part of large orgs like criminal enterprises or nation states. Large orgs don’t change quickly. Target their TTPs with your detection if you can. - Matthew Gracie at #BlueTeamCon