Britton

@brittonhayes.dev

78 Followers 143 Following

security engineer @notion.com building things at https://github.com/brittonhayes writing notes at https://brittonhayes.dev

a cybersecurity threat intelligence platform interface (YETI) displaying information about a threat actor named "Scattered Spider." Here's the key information shown: This is a profile page for a cybercriminal group called "Scattered Spider" that has been active since at least 2022. The group targets customer relationship management and business process outsourcing (BPO) firms, as well as telecommunications and technology companies. The threat actor has leveraged social engineering techniques and attempted to bypass endpoint security tools. The profile shows several external references including "mitre-attack" and multiple CrowdStrike reports from 2022-2023. The group's tactics include: - Exploitation for privilege escalation - Code signing - Multi-factor authentication request generation - Phishing for information - External remote services The profile was created on July 5, 2023, and the group appears to have an alias of "Roasted Oktapus." The interface includes navigation options at the top for search, observables, entities, indicators, automation, and admin functions, with editing capabilities for this threat actor profile.​​​​​​​​​​​​​​​​
Screenshot of a Notion database formula property that checks if the MITRE Tactic or Runbook are empty and lists those out as required fields.
A screen recording of an user opening Notion and creative a database with the Build with AI feature. They type into a chat window requesting a database to help their partner make a place to keep track of their yarn stash. The Notion app then starts working with some fancy animations and then builds them a database for keeping track of their yarn inventory with properties like weight, purchase date, color, dye lot, and fiber.
Screenshot of a blocked Discord message. The user 'isendscamlinks' attempted to send a message containing 'steamcommunity.com/gift-card/35a76-ba23' at 11:58 AM. The message is marked as blocked with red error text stating 'This can't be posted because it contains content blocked by this server. This may also be viewed by server owners.' Below that is gray text reading 'Only you can see this' with clickable links for 'Dismiss message' and 'Learn more'.
A feature description of the new files property for a vector remap language remap transform. The files property enables code reuse and organization, improving the maintainability of VRL code.