#firstcti25 — Public Fediverse posts
Live and recent posts from across the Fediverse tagged #firstcti25, aggregated by home.social.
-
I had the pleasure of presenting at #FIRSTCTI25 in Berlin:
"The Art of Pivoting – How You Can Discover More from Adversaries with Existing Information."
The talk explored how unconventional indicators, like cookie names, QR codes, HTTP headers (HHHash), DOM structures, and reused Google Analytics IDs, can reveal surprising links across threat actor infrastructure and behavior.
We also shared real-world insights from our crawling and analysis with AIL, including:
- How “weak” indicators can gain strength through composite correlation
- Unexpected metadata reuse across Tor services and social platforms
- How AIL enables more creative and effective pivoting workflows
🔗 Slides https://www.ail-project.org/assets/img/slides/the-art-of-pivoting.pdf
#threatintel #threatintelligence #cti #opensource #cybersecurity #darkweb
Thanks to @terrtia for the crazy discussions around correlations!
-
Great talk from @adulau on pivots at #FIRSTCTI25
Pointing out that many TOR services have google analytics or GTM trackers
category:onionscan -exists:app.http.tracker -since:3M
🤦♂️
-
Day 2 of the 2025 Cyber Threat Intelligence Conference is now LIVE on YouTube! Check out the content as it's being streamed out of Berlin, Germany at: https://www.youtube.com/live/j23OubEOjh4 #FIRSTCTI25 #CyberThreat #CTI
-
Guten Morgen North America! The 2025 Cyber Threat Intelligence Conference is LIVE on YouTube, tune in to the Plenary Day 1 stream at: https://youtube.com/live/2pSjbSx8J1Q?feature=share #FIRSTCTI25 #CyberThreat #CTI
-
The 2025 Cyber Threat Intelligence Conference is LIVE on YouTube! Check out the content as it's being streamed out of Berlin, Germany for the first Plenary day of the conference at: https://youtube.com/live/2pSjbSx8J1Q?feature=share #FIRSTCTI25 #CyberThreat #CTI
-
#FIRSTCTI25 is approaching quickly, make sure to check the agenda to map out your time at the conference! 🔗https://go.first.org/FVTUv
-
🎶please, please tell me now 🎶 Is there something you should do? 🎶 Is there something you forgot? 🎶 Oh yes, registering for #FIRSTCTI25 🎤 🔗https://go.first.org/6hotr
-
🌂Bring an umbrella to #FIRSTCTI25 because you're going to get flooded with threat intelligence information 🤓🔗https://go.first.org/mjgfX #cyberthreatintelligence #threatintel #securityteams #cyber
-
We are only a month away from #FIRSTCTI25 😱Register before it's too late!! 🔗https://go.first.org/6hotr #cyberthreatintelligence #threatintel #securityteams #cyber
-
Where did all the time go?! Only O N E more month until #FIRSTCTI25!🔗https://go.first.org/mjgfX
-
R is for "Register". Register is a verb. e.g. "You still have not registered for #FIRSTCTI25". 🔗 https://go.first.org/mjgfX #cyberthreatintelligence #threatintel #securityteams #cyber
-
The agenda for #FIRSTCTI25 is out now! We know you want to peek😏🔗 https://go.first.org/FVTUv
-
R is for "Register". Register is a verb. e.g. "You still have not registered for #FIRSTCTI25". 🔗 https://go.first.org/mjgfX #cyberthreatintelligence #threatintel #securityteams #cyber
-
We invite you to sponsor #FIRSTCTI25 to help us provide an open forum for the development of new ideas 💡Up for the challenge? 🔗 https://go.first.org/gjJA6 #cyberthreatintelligence #threatintel #securityteams #cyber
-
We invite you to sponsor #FIRSTCTI25 to help us provide an open forum for the development of new ideas 💡Up for the challenge? 🔗 https://go.first.org/gjJA6 #cyberthreatintelligence #threatintel #securityteams #cyber