Lightnews — Scholar-powered news

FalconForce @falconforce.nl · 11d

Slides can be found here: github.com/olafhartong/...

FalconForce @falconforce.nl · 11d

Last Friday, at BruCON 0X11, @olafhartong.nl showcased his research on how defensive tooling (#EDR) can provide attackers with opportunities for deception and disruption. Trusting your tooling blindly can be a mistake. You need to make sure you can rely on your security data.

1 1 3

FalconForce @falconforce.nl · 21d

The enumeration actually leaves specific footprints that can be picked up by defenders.

A complimentary detection is available in our FalconFriday GitHub: github.com/FalconForceT...

FalconFriday/0xFF-0508-Excessive_enumeration_of_policy_effective_permissions-AWS at main · FalconForceTeam/FalconFriday

Hunting queries and detections. Contribute to FalconForceTeam/FalconFriday development by creating an account on GitHub.

github.com

1

FalconForce @falconforce.nl · 21d

After our “AWS enumeration for purple teams” workshop at OrangeCon, we take a next step. In our #FalconFriday blog (falconforce.nl/falconfriday...) Nikolas explains how to catch threat actors that are harvesting information about your AWS policies.

1 1

FalconForce @falconforce.nl · 23d

BruCON 0X11 is just a few days away. @olafhartong.nl will present his talk “# I’m in your logs now, deceiving your analysts and blinding your EDR” on Friday Sept 26. Olaf will show how defensive tooling (EDRs) can provide attackers with opportunities for deception and disruption.

2 3

FalconForce @falconforce.nl · 28d

A special highlight was our very own Nikos Mantas leading the workshop “AWS Enumeration for Purple Teams”. He showcased how #dAWShund (falconforce.nl/dawshund-fra...) helps uncover hidden issues in the complex world of AWS security configurations.

dAWShund - framework to put a leash on naughty AWS permissions - FalconForce

dAWShund is a Python 3 framework to help blue and red teams find resources in AWS, evaluate access levels and visualize relationships.

falconforce.nl

FalconForce @falconforce.nl · 28d

We had a fantastic time at @orangecon.nl 🎉

It’s always inspiring to see so many security professionals come together to share their knowledge and passion for advancing the industry. That’s exactly why we’re proud to sponsor this event.

1

FalconForce @falconforce.nl · Aug 29

Slides from @olafhartong.nl's talk at #bhusa (I’m in your logs now, deceiving your analysts and blinding your EDR) are available now: i.blackhat.com/BH-USA-25/Pr...

FalconForce @falconforce.nl · Aug 21

A big thank you to all participants who joined our 4-day Advanced Detection Engineering in the Enterprise training at BlackHat. It has been a pleasure to have such an engaging group of professionals. We also had a great time in Las Vegas at the #bhusa and #DEFCON conferences. Until next time!

2 3

FalconForce @falconforce.nl · Aug 21

A big thank you to all participants who joined our 4-day Advanced Detection Engineering in the Enterprise training at BlackHat. It has been a pleasure to have such an engaging group of professionals. We also had a great time in Las Vegas at the #bhusa and #DEFCON conferences. Until next time!

FalconForce @falconforce.nl · Jul 16

Get your ticket before the next price bump.

FalconForce @falconforce.nl · Jun 17

August is almost around the corner and many people have already signed up. We are excited to see everyone in Las Vegas! No ticket yet? Get it now (next price bump is at 18 July): www.blackhat.com/us-25/traini...

FalconForce @falconforce.nl · Feb 14

For the fourth consecutive year, we will be back in Las Vegas to facilitate our Advanced Detection Engineering in the Enterprise training!

Get your ticket before May 25. More information and registration: www.blackhat.com/us-25/traini...

#detectionengineering #training

1

FalconForce @falconforce.nl · Jul 15

In our latest webinar we proudly presented Sentry Respond - FalconForce’s cloud native automation platform for high maturity SOCs - to the world! You can watch the webinar recording and download the slides from our website: falconforce.nl/webinar-sent... Contact us if you want to learn more!

Reposted by FalconForce

FalconForce @falconforce.nl · Jun 17

August is almost around the corner and many people have already signed up. We are excited to see everyone in Las Vegas! No ticket yet? Get it now (next price bump is at 18 July): www.blackhat.com/us-25/traini...

FalconForce @falconforce.nl · Feb 14

For the fourth consecutive year, we will be back in Las Vegas to facilitate our Advanced Detection Engineering in the Enterprise training!

Get your ticket before May 25. More information and registration: www.blackhat.com/us-25/traini...

#detectionengineering #training

1

FalconForce @falconforce.nl · Jun 26

Want to learn about how we make your #SOC more effective and enable analysts to make informed decisions faster? Join our webinar on 1 July 2025 16:00h CEST. Register today: events.teams.microsoft.com/event/0447b5...

FalconForce @falconforce.nl · Jun 17

August is almost around the corner and many people have already signed up. We are excited to see everyone in Las Vegas! No ticket yet? Get it now (next price bump is at 18 July): www.blackhat.com/us-25/traini...

FalconForce @falconforce.nl · Feb 14

For the fourth consecutive year, we will be back in Las Vegas to facilitate our Advanced Detection Engineering in the Enterprise training!

Get your ticket before May 25. More information and registration: www.blackhat.com/us-25/traini...

#detectionengineering #training

1

Reposted by FalconForce

FalconForce @falconforce.nl · May 21

On 1 July 2025 16:00h CEST, we will host our next webinar. It will be all about how we make a #SOC more effective and help analysts with the decision-making process. You can register today: events.teams.microsoft.com/event/0447b5...

1

FalconForce @falconforce.nl · Jun 6

It's has been 5 years already! Together with 15 Falcons, we celebrated the 5-year anniversary of FalconForce in style. We teamed up in Greece and went on an amazing trip to sunny Santorini. A trip to remember 🇬🇷 ☀️ 🦅

1 2

FalconForce @falconforce.nl · May 21

On 1 July 2025 16:00h CEST, we will host our next webinar. It will be all about how we make a #SOC more effective and help analysts with the decision-making process. You can register today: events.teams.microsoft.com/event/0447b5...

1

FalconForce @falconforce.nl · May 9

One of the least discussed topics in detection engineering is maintenance. But why is no one talking about this? In this first blog we explore its relevance to #detectionengineering and the paradox that keeps us awake at night. Enjoy!

falconforce.nl/why-is-no-on...

1 3

Reposted by FalconForce

FalconForce @falconforce.nl · Mar 21

Upcoming new FalconForce Sentry Respond webinar! Register now: events.teams.microsoft.com/event/0447b5...

Join us on Tuesday 1 July 2025, 16:00h CEST, to get actionable insights on on how we support #SOCs enhancing their efficiency. Facilitated by FalconForce specialists @olafhartong.nl and Henri.

3 1

FalconForce @falconforce.nl · Apr 11

github.com/FalconForceT...

GitHub - FalconForceTeam/dAWShund: Putting a leash on naughty AWS permissions

Putting a leash on naughty AWS permissions. Contribute to FalconForceTeam/dAWShund development by creating an account on GitHub.

github.com

1

FalconForce @falconforce.nl · Apr 11

We are proud to introduce #dAWShund to the world: a framework for putting a leash on naughty AWS permissions. dAWShund helps blue and red teams find resources in #AWS, evaluate their access levels and visualize the relationships between them.

falconforce.nl/dawshund-fra...

#blueteaming #redteaming

1 3 11

FalconForce @falconforce.nl · Apr 3

We are hiring offensive specialists! We are looking for experienced professionals who deliver high-quality offensive security services to help our client's defensive teams become more resilient. Sounds like you? falconforce.nl/falconforce-...

#hiring #offensivesecurity #purpleteam #redteam

1

FalconForce @falconforce.nl · Mar 21

Upcoming new FalconForce Sentry Respond webinar! Register now: events.teams.microsoft.com/event/0447b5...

Join us on Tuesday 1 July 2025, 16:00h CEST, to get actionable insights on on how we support #SOCs enhancing their efficiency. Facilitated by FalconForce specialists @olafhartong.nl and Henri.

3 1

FalconForce @falconforce.nl · Mar 19

We hope you enjoyed it as much as we did. We are looking forward to the 2026 edition of #Insomnihack!

FalconForce @falconforce.nl · Mar 19

FalconForce’s @olafhartong.nl and James joined #Insomnihack and facilitated a 3-day workshop version of our Advanced Detection Engineering in the Enterprise training. Many thanks to all the participants for their efforts, questions and input! We hope you enjoyed it as much as we did.

1 2