Nasreddine Bencherchali @nasbench.bsky.social Detection @Splunk | previously @nextronsystems | @sigma_hq & @magicswordio maintainer | Eternal Learner
Jason Killam @suspiciouslink.bsky.social Detection Engineer @ Red Canary
https://github.com/killamjr
DFIR Diva @dfirdiva.bsky.social DFIR Analyst
Blog: https://dfirdiva.com/
Free & Affordable Training (DFIR, OSINT, Cybersecurity): https://training.dfirdiva.com/
Community Listings: https://communiy-listings.dfirdiva.com/
Brian Liston @brianjliston.bsky.social Senior Threat Intelligence Analyst at Recorded Future
Analyzing Russia IO, Ukraine, election security
Cited in NYT, FT, Politico, Axios, NBC, France 24
GSPIA class of 2017
Antonio Cocomazzi @splintercode.bsky.social offensive security - windows internals - reverse engineering | X: https://x.com/splinter_code | Mastodon: https://infosec.exchange/@splinter_code | GitHub: https://github.com/antonioCoco | Blog: https://splintercod3.blogspot.com/
Ian Kenefick @iankenefick.bsky.social Cybercrime Fighter 🛡Threat Intelligence 🕵🏻♂️ & Malware Analysis 🦠 Fortunate to work @ Trend Micro. Happy to help whenever possible.
Andrew Morris @andrewmorr.is 🔳 founder of @greynoise.io. computers, networks, technology enthusiast. big goober.
IntelCorgi @intelcorgi.bsky.social cyber threat intelligence, OSINT, and corgi hair. Thoughts are my own, RT/Like != Endorsement. (He/Him)
Blog: intelcorgi.com
Tommy Madjar @ffforward.bsky.social Threat Researcher @ Proofpoint. Opinions are my own etc
Taylor Rafal-Brooks @taylorpbrooks.bsky.social Cyber Threat Intelligence at BoozAllen | Former Scoville Fellow Carnegie Endowment | Space Cyber Telecom UNL Law. Opinions my own. he/him
Andy Piazza (klrgrz) @klrgrz.bsky.social Christian. Killer grizz w/ a keyboard. DEF CON C&E Goon & Black Badge. Hack things w/ BSidesNOVA. GSE #344.
Matthew Conway @mattreduce.com 🔍 Threat Intelligence @ Remitly
✍️ CTI newsletter and blog @sourcesmethods.com
James Kettle @jameskettle.com Director of Research at @portswigger.net
Also known as albinowax
Portfolio: https://jameskettle.com/
Nicolas Caproni @caproni.fr Head of Sekoia Threat Detection & Research (TDR) team • Cyber Threat Intelligence • Detection Engineering • SOC Platform 🇫🇷 🇪🇺 • Hip-Hop • Basketball 
Sources & Methods @sourcesmethods.com Blog and monthly digest of Cyber Threat Intelligence (CTI) information sources, tools, articles, events, and helpful tips sourcesmethods.com by @mattreduce.com
Junninho Thomas @iamjunninho.com Cloud Security @ Orca Security | Ex-Google Cloud
🇯🇲
Ibrahim Ethem Bagci @iebagci.bsky.social I work at VMware. I chase bad people on cyber-network. I go by Ethem. I listen to JohnMayer. I would do anything for a yummy pcap.
https://linktr.ee/iebagci
cyberGoatPsyOps (Leo) @cybergoatpsyops.bsky.social IR Automation and IR SWE Lead for Rapid7. Ex-Mil, ex-Detection, ex-DFIR, ex-Principal @TrustedSec, Ex @Tesla. Some how lived & got selected for Special Ops (A&S).
Greg Foss @gregfoss.com Security Research Leader @ Datadog
Views are strictly my own
Doug Metz @dwmetz.bsky.social #DFIR @ Magnet Forensics
Blog ✍️ @ BakerStreetForensics.com
Projects 🦀 @ Github.com/dwmetz
Opinions are my own and are subject to change.
Ronnie Salomonsen @r0ns3n.dk Adversary Methods - Research & Discovery (RAD) Team @Mandiant - Now Part of @GoogleCloud. Former DFIR, Malware & Network Analyst. All tweets are my own.
Arda Büyükkaya @whichbufferarda.bsky.social Cyber Threat Intelligence Analyst at Rabobank. (All opinions expressed here are mine only). #cybersecurity
Matt Anderson @nosecurething.bsky.social Senior Detection Engineer at Huntress
Aryeh Goretsky @goretsky.bsky.social Security researcher & antivirus pioneer | alum of ESET, McAfee | Microsoft MVP awardee | Mod @Lenovo, @Neowin.Net, Scots Newsletter forums | Intel Insider Council member | Repost ≠ endorse.
Alberto Fittarelli @fittarelli.com Sr. Researcher @citizenlab.ca, Disinformation & Harassment. Fmr. Meta. Trainer: find & expose covert influence. I like doers. Opinions my own.
@felixaime.bsky.social @felixaime.bsky.social 
Maulik Limbachiya @maulikl.bsky.social Tracking adversary infrastructure...
Director of Solutions Engineering @ Silent Push
FR3D @fr3d.hk /* Security & Malware Research | Developer for http://MalBeacon.com | Poking holes in everything & writing about it | Read here: http://fr3d.hk/blog */
dms1899 @dms1899.bsky.social work time: defender
fun time: malware hoarder/puzzle solver/capacity tester
member of:
@cryptolaemus.bsky.social
fan of:
@hatching_io
@sublime_sec
Jamie MacColl @jamiemaccoll.bsky.social Senior Research Fellow @rusi.bsky.social | Senior Research Associate @virtualroutes.bsky.social | Usually researching ransomware and cybercrime | Sometime indie landfill guitarist
Paul Rascagneres @r00tbsd.bsky.social Lord of Loaders at Volexity
Corsin @cocaman.ch it security & cyber guy, research @ https://ecrime.ch, friendly, swiss | Opinions are my own
Eric Brandel @affablekraut.bsky.social The only way out is through | Stringer, Central Intelligence Corporation
Hedge @angiemckeown.bsky.social 🇮🇪 SOC nerd in 🇩🇰 🖤 DFIR, games, Asian drama, language, writing, kpop #StayTiny 🌈♾️💖 学习汉语
I'm only me, but I'm very good at it
Black Hills Information Security @bhinfosecurity.bsky.social Specializing in pen testing, red teaming, and Active SOC. We share our knowledge through blogs, webcasts, open-source tools, and Backdoors & Breaches game.
blackhillsinfosec.com & poweredbybhis.com
Silobreaker @silobreaker.bsky.social Silobreaker is a technology company that builds solutions that unify data, contextual analysis, and human expertise to deliver decision-grade intelligence.
vx-underground (automated mirror) @vxundergroundre.bsky.social The largest collection of malware source code, samples, and papers on the internet.
Password: infected
(unofficial, this is a bot! Maintained by a private individual, the bot can't handle retweets or replies, support soonish)
Schwarzenetienne @schwarzenetienne.bsky.social Chief Magic Officer, Patch Club member, and PITRE ATT&CK wannabe. Senior Anomymous Incident Responder group member.
Runa Sandvik @runasand.bsky.social Founder of Granitt, securing journalists and at-risk people around the world. 
John Scott-Railton @jsrailton.bsky.social Chasing digital badness. Senior Researcher at Citizen Lab, but words here are mine.
Marc Rogers @cjunky.bsky.social Ramblings of a Mad Englishman: Hacker @ BBC's Real Hustle & Mr Robot. Head of Sec @ DEF CON. Founder @ CTI-League, Ransomware Taskforce, w00w00, CDC NSF, (He/Him).
Also
Twitter @marcwrogers
Mastodon cj@chaos.social
Patrick Gray @patrick.risky.biz https://risky.biz/
John Hultquist @hultquist.bsky.social Mandiant Intelligence at Google. CYBERWARCON and SLEUTHCON founder. Johns Hopkins professor. Army vet.
Danny Moore @moore.bsky.social Cyber-warfare | PhD from KCL | Author of 'Offensive Cyber Operations' | Security @ Meta 
Bill Marczak @billmarczak.org senior researcher at @citizenlab.ca
Allan “Ransomware Sommelier” Liska @ransomwaresommelier.com Recorded Future - Ransomware Researcher
Owner @greenarcher.io - Yours Truly, Johnny Dollar | The Press Guardian | The Clock | The Green Archer
Weird mix of security, comics, photography and wine!
www.greenarcher.io
J. A. Guerrero-Saade (JAGS) @jags.bsky.social VP of Intelligence and Security Research, Senior Technical Fellow (AI) @ SentinelOne.
Distinguished Fellow and Adj Professor @ Hopkins SAIS Alperovitch Institute. Three Buddy Problem Co-Host. LABScon Founder, Cyber Paleontologist, Fourth-Party Collector.
David Agranovich @dagrano.bsky.social Fmr. NSC Director, Intelligence. Director, Threat Disruption @ Meta. Rescue Dog Pilot, Flight Instructor, Former Big Hair Practitioner 🏳️🌈
Shane Huntley @shanehuntley.bsky.social Aussie security / tech guy.
Google Threat Intelligence. Co-founder Threat Analysis Group (TAG). Tweets are my own not my employers.
Silas Cutler @silascutler.bsky.social You may know me from your server logs.
#Malware, Hacks, Internet Scanning, #CTI
JD Work @hostilespectrum.bsky.social Former intel, now academic @NDU_CIC, @TheKrulakCenter, @SIWPSColumbia @ColumbiaSIPA, @CyberStatecraft, @ElliottSchoolGW, @PAISWarwick. Apolitical, views=own
Tom Hegel @hegel.bsky.social Distinguished Threat Researcher, SentinelLABS Research Lead @SentinelOne. Nation-state operations, research systems & applied AI for threat intelligence. Find me at https://TomHegel.com
Pasquale Stirparo 🇺🇦 🇪🇺 @pstirparo.bsky.social Founder @ RationalEdge
#ThreatIntel #ICS #DFIR; ''Learning iOS Forensics'' author;
#BSidesZH #PIVOTcon org.
@pivotcon.bsky.social
https://pstirparo.ch
https://rationaledge.io
Related interests/obsessions:
#ThreatHunting #CTI #YARA #CriticalThinking #Books
Will Nuland @willnoodles.bsky.social Trust Investigations & Intel; Dad; Rehabilitating grump; Tech company badge collector. Currently Director @ LinkedIn; Former Twitter, FB, Dell SWRX, VRSN. Here for the cyber 
Dan Black @danwblack.bsky.social Previously Google, NATO, 🇨🇦 Government. Views mine and mine only.
Christopher Glyer @cglyer.bsky.social Microsoft Threat Intelligence Center - Former Incident Responder & Chief Security Architect @Mandiant
Eric Hutchins @ehutchins.bsky.social Started in infosec, co-authored the kill chain paper, dabbled in countering influence operations at Meta, and now back to infosec. Lover of command line, python, and rust.
SwitHak (👁️) @swithak.bsky.social French Security Analyst (Fmr TelcoSec)
Cyber / Security / Geopolitics & and others.
Personal Account, My opinion!
Lang: ENglish & FRench
Costin G. Raiu @craiu.bsky.social Romanian antihacker from another planet. #threatintel #yara #chess #taekwondo black belt
Motto: "One reboot a day keeps the implant away"
Daniel Gordon @validhorizon.bsky.social Thought Trailer, Cyber Threat Intel, DFIR. He/Him. Bucketing, sharing, and bacon-saving as a service. https://validhorizon.medium.com/
Mark Parsons @mparsons.bsky.social Threat Analyst @ Microsoft - mostly post about astrophotography and occasional some work. Posts are my own
Lorenzo Franceschi-Bicchierai @lorenzofb.bsky.social Real-time historian of the late cyber capitalist era @TechCrunch, writing about the intersection of hackers, human rights, and spies.
Also writing a book about Hacking Team and the history of government spyware.
☎️ Signal: +1 917 257 1382
Andy Greenberg @agreenberg.bsky.social Writer for WIRED. Author of SANDWORM. Latest book, TRACERS IN THE DARK: The Global Hunt for the Crime Lords of Cryptocurrency, out now. agreenberg@wired.com. Andy.01 on Signal.
Kevin Collier @kevincollier.bsky.social I cover digital threats for NBC News. Tip me! @kevincollier.01 on signal, kevin.collier@nbcuni.com. NYC, from West Virginia.
Max Smeets @maxwsmeets.bsky.social Author of No Shortcuts & Ransom War
Co-director Virtual Routes (https://virtual-routes.org/), previously ECCRI
Managing Editor Binding Hook (https://bindinghook.com)
Senior Researcher, ETH Zurich
Jay Swan @sanjuanswan.bsky.social mountains, books, bikes, intelligence history, modernism. Formerly, threat intel @ GitHub.
Martijn Grooten @martijngrooten.bsky.social Threat researcher, rights supporter, obsessive reader, marathon runner, eternal traveler, serial migrant, music blogger, lapsed mathematician.
https://lapsedordinary.net/
Signal: martijngrooten.37
Joe Roosen @jroosen.bsky.social SpyCloud - Director of Security Research, Cryptolaemus Coordinator, Emotet(Ivan)/QBot(Boris) Destroyer, gold prospector & former sysadmin.
brain @brain.bsky.social AU PERSON 1. threat intel. i hunt bad guys.
Ben Read @benread.bsky.social CTI @wizsecurity.bsky.social
Adjuct at @jhu.edu - SAIS
Nonresident Fellow at @atlanticcouncil.bsky.social - Cyber Statecraft
Previously NSC44, Mandiant, Google
Go Mammoths
Craig Williams @craigwilliams.bsky.social I build threat intel stuff.
Nate Beach-Westmoreland @natebeachw.bsky.social Cyber threat analyst focused on state-aligned adversaries. Opinions are my own, not my employer's. #threatintel #infosec #osint
Jack Rhysider @jackrhysider.bsky.social Creator of Darknet Diaries.
Verification: https://twitter.com/JackRhysider/status/1675298532406984707
Phil Stokes ⫍🐠⫎ @philofishal.bsky.social macOS security researcher espousing no one's opinions but my own. Dogged follower of #lufc, at least until the world stops going round (IYKYK).
philastokes.com
Alex Delamotte @alex.leetnoob.com I’m just a girl who lives in Vegas & likes cloud malware, idk anymore.
Matthew Kennedy @matthewkennedy.bsky.social Manager at Microsoft Threat Intelligence Center (MSTIC). Adjunct Faculty at Georgetown University. Penn State Alum. Tweets are my own.
Allison Nixon @nixonnixoff.bsky.social Chief Research Officer @ Unit 221B
most reliable way to reach me is my company's outreach form on the website
my other urls:
https://infosec.exchange/@nixonnixoff
https://www.linkedin.com/in/allison-nixon-81822124/
don't bother contacting me on twitter
Cyber Threat Alliance @cyberalliance.bsky.social CTA is a group of cybersecurity practitioners who work together to improve the overall security of the global digital ecosystem. We are stronger together. www.cyberthreatalliance.org
Jamie Levy 🦉 @gleeda.bsky.social @volatilityfoundation.org Core Dev | Art of Memory Forensics co-author | DFIR trainer and enthusiast | Director of Adversary Tactics @huntress.com
Alex Lanstein @lanstein.bsky.social threaty threats -- helping build research workflows into a soc product, but I don't speak for them on this acct. pretty good at bash scripts and strings. disclosures on my linkedin below
https://www.linkedin.com/in/alexlanstein/
Steve YARA Synapse Miller @stvemillertime.bsky.social writing & sharing on adversary tradecraft, malware, threat detection, ics/ot + cyber physical intel, and of course all things #yara
Andrew Northern @exraritas.bsky.social 🔮 Senior Threat Researcher at @proofpoint 🔮 | Kindness and Compassion | Not a reflection of the opinions or policies of my employer | Andrew Northern
xxdesmus (he/him) @botnet.club VP of Trust & Safety at Cloudflare. I run: https://canhazip.com, https://nslarchive.org, and https://rainbowtabl.es
he/his/him
PGP: http://flowcrypt.com/me/justin
Julian-Ferdinand Vögele @julianferdinand.bsky.social Threat Research @ Recorded Future. Previously @ Security Research Labs. He/Him. 🏳️🌈
Austin Larsen @handle.invalid Principal Threat Analyst - Google Threat Intelligence Group
Scott J Roberts @sroberts.io Cyber Threat, NatSec, Analytic Tradecraft | Instructor of Cybersecurity @ USU Data Analytics & Information Systems | Masters Student @ USU Center for Anticipatory Intelligence | Developer, Analyst, Author
Wesley Shields @wxs.bsky.social Working at Google TAG. Retired FreeBSD committer. May or may not be a robot.
Feike Hacquebord @feikeh.bsky.social Principal Threat Researcher at TrendAI
Nicole Fishbein @nicolefishbein.bsky.social Senior security researcher and reverse engineer @Intezer
Bartek Jerzman @handle.invalid Hunting ghosts in wires and boxes, Head of CTI, former NCSC-PL, PL Navy #fightingthreats | @PIVOTcon.bsky.social co-founder & Chief Meme Officer
Sergio Caltagirone @intel.bsky.social Georgia Tech Professor. Cyber threat intelligence and cybersecurity professional - former NSA, Microsoft, and Dragos. President of the Threat Intelligence Academy. #FSD 🦆 Formerly @cnoanalysis on Twitter
Supriya @supriyam.bsky.social Now Google Threat Intelligence & doing fun things at DistrictCon, fmrly GreyNoiseIO and RecordedFuture, SAISHopkins MASCI alumna | ♡s & rts are my own, my employer definitely doesn’t like Taylor Swift that much
Blove @b-levene.bsky.social Head of Threat Informed Defense @Google
Cybercrime Specialist
Adjunct Professor at Johns Hopkins School of Advanced International Studies Alperovitch Institute
Meme Fiend
Aka “BLove”
tlansec @tlansec.bsky.social Threat Intel @volexity.com n stuff.
London, UK.
chris! @unauthorized.computer burritosec | he/him 🏳️🌈 | cyber dude | and it only seems so strange right now
Katie Nickels @likethecoins.bsky.social 
JCP⭐Designs 👺 @jcpxdesigns.bsky.social New England Illustrator & Graphic Designer 👺
Support at:
http://jacobcpaul.com/shop
https://ko-fi.com/jcpxdesigns
✏️ COMMISSIONS CLOSED✏️
👺 He/Him/His/Hunk 👺 Opinions Are My Own
Michael Moore @michaelmoore.ai #AI, #Cybersecurity, and other technology topics. Trying to make the world a better place. Personal account; my views only. Work: https://s1.ai/purple at @sentinelone.com