Phying News
P非影 中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

From Munitions to Malware: Joseph Harrison on Threat Detection & Digital Forensics

hunt.io | blog | #threat-detection | #interview | #career | #digital-forensics | #ja4

Summary

An interview with threat lead Joseph Harrison: from Air Force munitions to digital forensics, the discipline behind his detection work, and how he uses JA4 fingerprints to catch what others miss.
Published
Collected

original ↗

Related coverage

blog · hunt.io
Interview with Daniel Plohmann: Malpedia, Malware Analysis, and Research Insights
An interview with Daniel Plohmann: building Malpedia and MCRIT, his path from network simulation to malware research, collaboration in the field, and music as an outlet away from security.
blog · hunt.io
Eggs, Alerts, and Adversaries: Talking with Jose Hernandez from Splunk
Splunk's Director of Threat Research Jose Hernandez discusses building detections with Atomic Red Team, detection-as-code pipelines, hiring curious people, and balancing research with farm life.
blog · hunt.io
Fast and Curious: Red Teaming, Race Cars, and Hunt.io with Justin Elze
TrustedSec CTO Justin Elze discusses his route into offensive security, what makes red teams work, his favorite tooling, and how he uses Hunt.io and AttackCapture in research.
blog · hunt.io
JA4: Decoding Cyber Shadows
An interview with John Althouse on JA4+, his successor to the JA3 TLS fingerprinting standard — covering his path into threat hunting, founding FoxIO, and where network fingerprinting is heading.
blog · yeswehack.com
[ITW] Daniel Kalinowski: “Participating in bug bounties improves your skills and increase the overall knowledge.”
A conversation with Polish bug hunter Daniel 'Kalin' Kalinowski on breaking into security from IT ops, why bounties sharpen your skills, and how to stay current on new exploit techniques.
blog · blog.trailofbits.com
mquire: Linux memory forensics without external dependencies
Trail of Bits open-sourced mquire, which analyzes Linux memory dumps without external debug symbols by extracting BTF type information and symbol addresses directly from the dump itself.
back