DDI Training
@digitaldefenseinstitute.com
Advanced Cybersecurity Training provider focusing on security operations, threat hunting, digital forensics, and incident response. Learn more: https://digitaldefenseinstitute.com
Pinned
DDI Training
@digitaldefenseinstitute.com
· Aug 30
Just over a month until
@wildwesthackinfest.bsky.social!
Come hang with @eric.zip and @whit.zip and join us for Threat Hunting and Incident Response with Velociraptor!
2 days of hands on labs and real-world attack scenarios 🔥🤓
Register here: cvent.me/A48MM8
@wildwesthackinfest.bsky.social!
Come hang with @eric.zip and @whit.zip and join us for Threat Hunting and Incident Response with Velociraptor!
2 days of hands on labs and real-world attack scenarios 🔥🤓
Register here: cvent.me/A48MM8
500 endpoints. Which ones are actually compromised? 👀
Triage at fleet scale is a skill that makes or breaks an incident, & it's exactly what this course emphasizes 🦖🔥
Available on demand 🤓 ddi.sh/thvr
Triage at fleet scale is a skill that makes or breaks an incident, & it's exactly what this course emphasizes 🦖🔥
Available on demand 🤓 ddi.sh/thvr
September 17, 2026 at 1:39 PM
500 endpoints. Which ones are actually compromised? 👀
Triage at fleet scale is a skill that makes or breaks an incident, & it's exactly what this course emphasizes 🦖🔥
Available on demand 🤓 ddi.sh/thvr
Triage at fleet scale is a skill that makes or breaks an incident, & it's exactly what this course emphasizes 🦖🔥
Available on demand 🤓 ddi.sh/thvr
Can't join us in Deadwood? Check out our on-demand training! Learn @ your own pace, from your own couch, w/your own snacks 🙌
Packed w/hands-on labs, hours of video content, & realistic attack scenarios to level up your DFIR/Velociraptor skills 🔥
academy.digitaldefenseinstitute.com/courses/2259...
Packed w/hands-on labs, hours of video content, & realistic attack scenarios to level up your DFIR/Velociraptor skills 🔥
academy.digitaldefenseinstitute.com/courses/2259...
Just over a month until
@wildwesthackinfest.bsky.social!
Come hang with @eric.zip and @whit.zip and join us for Threat Hunting and Incident Response with Velociraptor!
2 days of hands on labs and real-world attack scenarios 🔥🤓
Register here: cvent.me/A48MM8
@wildwesthackinfest.bsky.social!
Come hang with @eric.zip and @whit.zip and join us for Threat Hunting and Incident Response with Velociraptor!
2 days of hands on labs and real-world attack scenarios 🔥🤓
Register here: cvent.me/A48MM8
September 9, 2026 at 7:17 PM
Can't join us in Deadwood? Check out our on-demand training! Learn @ your own pace, from your own couch, w/your own snacks 🙌
Packed w/hands-on labs, hours of video content, & realistic attack scenarios to level up your DFIR/Velociraptor skills 🔥
academy.digitaldefenseinstitute.com/courses/2259...
Packed w/hands-on labs, hours of video content, & realistic attack scenarios to level up your DFIR/Velociraptor skills 🔥
academy.digitaldefenseinstitute.com/courses/2259...
Just over a month until
@wildwesthackinfest.bsky.social!
Come hang with @eric.zip and @whit.zip and join us for Threat Hunting and Incident Response with Velociraptor!
2 days of hands on labs and real-world attack scenarios 🔥🤓
Register here: cvent.me/A48MM8
@wildwesthackinfest.bsky.social!
Come hang with @eric.zip and @whit.zip and join us for Threat Hunting and Incident Response with Velociraptor!
2 days of hands on labs and real-world attack scenarios 🔥🤓
Register here: cvent.me/A48MM8
August 30, 2026 at 11:05 PM
Just over a month until
@wildwesthackinfest.bsky.social!
Come hang with @eric.zip and @whit.zip and join us for Threat Hunting and Incident Response with Velociraptor!
2 days of hands on labs and real-world attack scenarios 🔥🤓
Register here: cvent.me/A48MM8
@wildwesthackinfest.bsky.social!
Come hang with @eric.zip and @whit.zip and join us for Threat Hunting and Incident Response with Velociraptor!
2 days of hands on labs and real-world attack scenarios 🔥🤓
Register here: cvent.me/A48MM8
Huge thanks to all of our ASOTH students for choosing us this year at Black Hat! We had an absolute blast with you all, and hope to see you again!
Another Hacker Summer Camp in the books! 🤓🔥💙
Another Hacker Summer Camp in the books! 🤓🔥💙
August 10, 2026 at 12:08 AM
Huge thanks to all of our ASOTH students for choosing us this year at Black Hat! We had an absolute blast with you all, and hope to see you again!
Another Hacker Summer Camp in the books! 🤓🔥💙
Another Hacker Summer Camp in the books! 🤓🔥💙
Reposted by DDI Training
Defenders, new C2 tooling to be on the lookout for... Found it in use by Aurora Ransomware group.
github.com/XTLS/Xray-core
github.com/XTLS/Xray-core
GitHub - XTLS/Xray-core: Xray, Penetrates Everything. Also the best v2ray-core. Where the magic happens. An open platform for various uses.
Xray, Penetrates Everything. Also the best v2ray-core. Where the magic happens. An open platform for various uses. - XTLS/Xray-core
github.com
August 4, 2026 at 4:16 PM
Defenders, new C2 tooling to be on the lookout for... Found it in use by Aurora Ransomware group.
github.com/XTLS/Xray-core
github.com/XTLS/Xray-core
We are honored to have our "Threat Hunting & Incident Response with Velociraptor" course featured on the official @velocidex.com documentation site! #threathunting #incidentresponse #dfir #securityoperations #velociraptor
docs.velociraptor.app/training/#co...
docs.velociraptor.app/training/#co...
Training Resources
## Scheduled courses
docs.velociraptor.app
July 27, 2026 at 5:56 PM
We are honored to have our "Threat Hunting & Incident Response with Velociraptor" course featured on the official @velocidex.com documentation site! #threathunting #incidentresponse #dfir #securityoperations #velociraptor
docs.velociraptor.app/training/#co...
docs.velociraptor.app/training/#co...
Sneak preview of what we're cooking up for this weekend 👀🔥
This is our 8th year teaching at @blackhatevents.bsky.social, and our Advanced Security Operations & Threat Hunting course is more fun than ever! 🤓
There are still a few seats left if you want to join us! blackhat.com/us-26/traini...
This is our 8th year teaching at @blackhatevents.bsky.social, and our Advanced Security Operations & Threat Hunting course is more fun than ever! 🤓
There are still a few seats left if you want to join us! blackhat.com/us-26/traini...
July 27, 2026 at 11:40 AM
Sneak preview of what we're cooking up for this weekend 👀🔥
This is our 8th year teaching at @blackhatevents.bsky.social, and our Advanced Security Operations & Threat Hunting course is more fun than ever! 🤓
There are still a few seats left if you want to join us! blackhat.com/us-26/traini...
This is our 8th year teaching at @blackhatevents.bsky.social, and our Advanced Security Operations & Threat Hunting course is more fun than ever! 🤓
There are still a few seats left if you want to join us! blackhat.com/us-26/traini...
1 week til Black Hat! 🤯
Join @eric.zip, @whit.zip, and @nynir.bsky.social for our 4-day Advanced Security Operations & Threat Hunting course!
There are still some seats available! 👇🤓
Course details and registration: blackhat.com/us-26/traini...
Join @eric.zip, @whit.zip, and @nynir.bsky.social for our 4-day Advanced Security Operations & Threat Hunting course!
There are still some seats available! 👇🤓
Course details and registration: blackhat.com/us-26/traini...
July 25, 2026 at 7:26 PM
1 week til Black Hat! 🤯
Join @eric.zip, @whit.zip, and @nynir.bsky.social for our 4-day Advanced Security Operations & Threat Hunting course!
There are still some seats available! 👇🤓
Course details and registration: blackhat.com/us-26/traini...
Join @eric.zip, @whit.zip, and @nynir.bsky.social for our 4-day Advanced Security Operations & Threat Hunting course!
There are still some seats available! 👇🤓
Course details and registration: blackhat.com/us-26/traini...
Reposted by DDI Training
Most AI in security workshops end with a pitch. This one ends with something you built.
We're hosting a free hands-on lab at Black Hat with @bhinfosecurity.bsky.social and @digitaldefenseinstitute.com.
6 hours. Real infrastructure.
@whit.zip @eric.zip @nynir.bsky.social
luma.com/black-hat-he...
We're hosting a free hands-on lab at Black Hat with @bhinfosecurity.bsky.social and @digitaldefenseinstitute.com.
6 hours. Real infrastructure.
@whit.zip @eric.zip @nynir.bsky.social
luma.com/black-hat-he...
July 15, 2026 at 4:00 PM
Most AI in security workshops end with a pitch. This one ends with something you built.
We're hosting a free hands-on lab at Black Hat with @bhinfosecurity.bsky.social and @digitaldefenseinstitute.com.
6 hours. Real infrastructure.
@whit.zip @eric.zip @nynir.bsky.social
luma.com/black-hat-he...
We're hosting a free hands-on lab at Black Hat with @bhinfosecurity.bsky.social and @digitaldefenseinstitute.com.
6 hours. Real infrastructure.
@whit.zip @eric.zip @nynir.bsky.social
luma.com/black-hat-he...
Less than 3 weeks until Black Hat! 🤯
Join @eric.zip, @whit.zip, and @nynir.bsky.social in Vegas!
Register for our 4-day Advanced Security Operations & Threat Hunting course 👩💻💙
Course details, outline, and registration here: blackhat.com/us-26/traini...
Join @eric.zip, @whit.zip, and @nynir.bsky.social in Vegas!
Register for our 4-day Advanced Security Operations & Threat Hunting course 👩💻💙
Course details, outline, and registration here: blackhat.com/us-26/traini...
July 13, 2026 at 4:23 PM
Less than 3 weeks until Black Hat! 🤯
Join @eric.zip, @whit.zip, and @nynir.bsky.social in Vegas!
Register for our 4-day Advanced Security Operations & Threat Hunting course 👩💻💙
Course details, outline, and registration here: blackhat.com/us-26/traini...
Join @eric.zip, @whit.zip, and @nynir.bsky.social in Vegas!
Register for our 4-day Advanced Security Operations & Threat Hunting course 👩💻💙
Course details, outline, and registration here: blackhat.com/us-26/traini...
40 days until Black Hat! 🤯
Join @eric.zip, @whit.zip, and @nynir.bsky.social in August!
Registration is open for our 4-day Advanced Security Operations & Threat Hunting course! 🔥 🤓 🙌
Course details, outline, and registration here: blackhat.com/us-26/traini...
Join @eric.zip, @whit.zip, and @nynir.bsky.social in August!
Registration is open for our 4-day Advanced Security Operations & Threat Hunting course! 🔥 🤓 🙌
Course details, outline, and registration here: blackhat.com/us-26/traini...
June 22, 2026 at 3:23 PM
40 days until Black Hat! 🤯
Join @eric.zip, @whit.zip, and @nynir.bsky.social in August!
Registration is open for our 4-day Advanced Security Operations & Threat Hunting course! 🔥 🤓 🙌
Course details, outline, and registration here: blackhat.com/us-26/traini...
Join @eric.zip, @whit.zip, and @nynir.bsky.social in August!
Registration is open for our 4-day Advanced Security Operations & Threat Hunting course! 🔥 🤓 🙌
Course details, outline, and registration here: blackhat.com/us-26/traini...
Reposted by DDI Training
Triage.zip now has support for macOS & Linux 🚀
June 4, 2026 at 7:27 PM
Triage.zip now has support for macOS & Linux 🚀
2 months until Black Hat! 🤓
Join @eric.zip, @whit.zip, and @nynir.bsky.social for a 4-day training at @blackhatevents.bsky.social!
Registration is open for our Advanced Security Operations and Threat Hunting course! 🔥👩💻🙌
Course outline and registration: blackhat.com/us-26/traini...
Join @eric.zip, @whit.zip, and @nynir.bsky.social for a 4-day training at @blackhatevents.bsky.social!
Registration is open for our Advanced Security Operations and Threat Hunting course! 🔥👩💻🙌
Course outline and registration: blackhat.com/us-26/traini...
June 1, 2026 at 6:51 PM
2 months until Black Hat! 🤓
Join @eric.zip, @whit.zip, and @nynir.bsky.social for a 4-day training at @blackhatevents.bsky.social!
Registration is open for our Advanced Security Operations and Threat Hunting course! 🔥👩💻🙌
Course outline and registration: blackhat.com/us-26/traini...
Join @eric.zip, @whit.zip, and @nynir.bsky.social for a 4-day training at @blackhatevents.bsky.social!
Registration is open for our Advanced Security Operations and Threat Hunting course! 🔥👩💻🙌
Course outline and registration: blackhat.com/us-26/traini...
ATTN NERDS:
Join @eric.zip, @whit.zip, and @nynir.bsky.social for a 4-day training at @blackhatevents.bsky.social!
Registration is open for our Advanced Security Operations and Threat Hunting course! 🔥👩💻🙌
Early bird discount until 5/22 👀
Register: blackhat.com/us-26/traini...
Join @eric.zip, @whit.zip, and @nynir.bsky.social for a 4-day training at @blackhatevents.bsky.social!
Registration is open for our Advanced Security Operations and Threat Hunting course! 🔥👩💻🙌
Early bird discount until 5/22 👀
Register: blackhat.com/us-26/traini...
May 14, 2026 at 12:20 PM
ATTN NERDS:
Join @eric.zip, @whit.zip, and @nynir.bsky.social for a 4-day training at @blackhatevents.bsky.social!
Registration is open for our Advanced Security Operations and Threat Hunting course! 🔥👩💻🙌
Early bird discount until 5/22 👀
Register: blackhat.com/us-26/traini...
Join @eric.zip, @whit.zip, and @nynir.bsky.social for a 4-day training at @blackhatevents.bsky.social!
Registration is open for our Advanced Security Operations and Threat Hunting course! 🔥👩💻🙌
Early bird discount until 5/22 👀
Register: blackhat.com/us-26/traini...
Reposted by DDI Training
I recommend this!
I’ve done live course via antisyphon and I’m doing non-live version via coursestack right now.
I had to DFIR semi-manually in the past and it was not fun. Velociraptor would’ve made life way easier.
I’ve done live course via antisyphon and I’m doing non-live version via coursestack right now.
I had to DFIR semi-manually in the past and it was not fun. Velociraptor would’ve made life way easier.
Learn to hunt and respond with Velociraptor with @eric.zip and @whit.zip at @wildwesthackinfest.bsky.social October 6-7, 2026 in Deadwood, SD!
www.antisyphontraining.com/product/thre... #dfir #threathunting
www.antisyphontraining.com/product/thre... #dfir #threathunting
Threat Hunting & Incident Response with Velociraptor - Antisyphon Training
Master the art of threat hunting and incident response with Velociraptor, a rapidly emerging powerhouse in cybersecurity.
www.antisyphontraining.com
April 28, 2026 at 4:35 PM
I recommend this!
I’ve done live course via antisyphon and I’m doing non-live version via coursestack right now.
I had to DFIR semi-manually in the past and it was not fun. Velociraptor would’ve made life way easier.
I’ve done live course via antisyphon and I’m doing non-live version via coursestack right now.
I had to DFIR semi-manually in the past and it was not fun. Velociraptor would’ve made life way easier.
Learn to hunt and respond with Velociraptor with @eric.zip and @whit.zip at @wildwesthackinfest.bsky.social October 6-7, 2026 in Deadwood, SD!
www.antisyphontraining.com/product/thre... #dfir #threathunting
www.antisyphontraining.com/product/thre... #dfir #threathunting
Threat Hunting & Incident Response with Velociraptor - Antisyphon Training
Master the art of threat hunting and incident response with Velociraptor, a rapidly emerging powerhouse in cybersecurity.
www.antisyphontraining.com
April 28, 2026 at 4:05 PM
Learn to hunt and respond with Velociraptor with @eric.zip and @whit.zip at @wildwesthackinfest.bsky.social October 6-7, 2026 in Deadwood, SD!
www.antisyphontraining.com/product/thre... #dfir #threathunting
www.antisyphontraining.com/product/thre... #dfir #threathunting
ATTN NERDS:
We'll be at @blackhatevents.bsky.social USA and registration is open for our Advanced Security Operations and Threat Hunting course! 🔥🤓
Join @eric.zip, @whit.zip, and @nynir.bsky.social for our 4-day training:
Early bird discount until 5/22 👀
Details: blackhat.com/us-26/traini...
We'll be at @blackhatevents.bsky.social USA and registration is open for our Advanced Security Operations and Threat Hunting course! 🔥🤓
Join @eric.zip, @whit.zip, and @nynir.bsky.social for our 4-day training:
Early bird discount until 5/22 👀
Details: blackhat.com/us-26/traini...
April 13, 2026 at 7:51 PM
ATTN NERDS:
We'll be at @blackhatevents.bsky.social USA and registration is open for our Advanced Security Operations and Threat Hunting course! 🔥🤓
Join @eric.zip, @whit.zip, and @nynir.bsky.social for our 4-day training:
Early bird discount until 5/22 👀
Details: blackhat.com/us-26/traini...
We'll be at @blackhatevents.bsky.social USA and registration is open for our Advanced Security Operations and Threat Hunting course! 🔥🤓
Join @eric.zip, @whit.zip, and @nynir.bsky.social for our 4-day training:
Early bird discount until 5/22 👀
Details: blackhat.com/us-26/traini...
ATTN NERDS:
We're returning to @blackhatevents.bsky.social USA and registration is now open for our Advanced Security Operations and Threat Hunting course! 💙🤓🚀
Join @eric.zip, @whit.zip, and @nynir.bsky.social for our 4-day training:
blackhat.com/us-26/traini...
We're returning to @blackhatevents.bsky.social USA and registration is now open for our Advanced Security Operations and Threat Hunting course! 💙🤓🚀
Join @eric.zip, @whit.zip, and @nynir.bsky.social for our 4-day training:
blackhat.com/us-26/traini...
March 19, 2026 at 2:39 PM
ATTN NERDS:
We're returning to @blackhatevents.bsky.social USA and registration is now open for our Advanced Security Operations and Threat Hunting course! 💙🤓🚀
Join @eric.zip, @whit.zip, and @nynir.bsky.social for our 4-day training:
blackhat.com/us-26/traini...
We're returning to @blackhatevents.bsky.social USA and registration is now open for our Advanced Security Operations and Threat Hunting course! 💙🤓🚀
Join @eric.zip, @whit.zip, and @nynir.bsky.social for our 4-day training:
blackhat.com/us-26/traini...
Are you a fan of Velociraptor and Claude Code? We have a gift for you!
Our first of many Claude Code plugins is a VR Artifact generator, and it's quite good at it!
Give it a try and let us know what you think...
github.com/Digital-Defe... #dfir #velociraptor #claudecode @velocidex.com
Our first of many Claude Code plugins is a VR Artifact generator, and it's quite good at it!
Give it a try and let us know what you think...
github.com/Digital-Defe... #dfir #velociraptor #claudecode @velocidex.com
GitHub - Digital-Defense-Institute/ddi-cc-plugins: Security-focused Claude Code plugins for DFIR, detection engineering, and threat hunting
Security-focused Claude Code plugins for DFIR, detection engineering, and threat hunting - Digital-Defense-Institute/ddi-cc-plugins
github.com
February 10, 2026 at 12:57 PM
Are you a fan of Velociraptor and Claude Code? We have a gift for you!
Our first of many Claude Code plugins is a VR Artifact generator, and it's quite good at it!
Give it a try and let us know what you think...
github.com/Digital-Defe... #dfir #velociraptor #claudecode @velocidex.com
Our first of many Claude Code plugins is a VR Artifact generator, and it's quite good at it!
Give it a try and let us know what you think...
github.com/Digital-Defe... #dfir #velociraptor #claudecode @velocidex.com
Reposted by DDI Training
Net-NTLMv1 is dead. Rainbow tables are now public, making cracking trivial. If it’s still lurking in your environment, now’s the time to root it out. Inventory, detect, and kill it before an attacker does.
cloud.google.com/blog/topics/...
cloud.google.com/blog/topics/...
Releasing Rainbow Tables to Accelerate Protocol Deprecation | Google Cloud Blog
Mandiant aims to lower the barrier for security professionals to demonstrate the insecurity of Net-NTLMv1.
cloud.google.com
January 20, 2026 at 6:24 PM
Net-NTLMv1 is dead. Rainbow tables are now public, making cracking trivial. If it’s still lurking in your environment, now’s the time to root it out. Inventory, detect, and kill it before an attacker does.
cloud.google.com/blog/topics/...
cloud.google.com/blog/topics/...
Reposted by DDI Training
Hunting MongoBleed (CVE-2025-14847)
Detecting CVE-2025-14847 Exploitation with Velociraptor
blog.ecapuano.com
December 27, 2025 at 3:42 AM
Reposted by DDI Training
I have PR'd a new @velocidex.com Artifact to the Exchange to hunt for exploitation of #CVE-2025–14847.
As far as I know, this is the only defensive signature for this CVE that exists currently.
github.com/Velocidex/ve...
As far as I know, this is the only defensive signature for this CVE that exists currently.
github.com/Velocidex/ve...
Create Linux.Detection.CVE202514847.MongoBleed.yaml by ecapuano · Pull Request #1161 · Velocidex/velociraptor-docs
Add Linux.Detection.CVE202514847.MongoBleed Artifact
Summary
This artifact detects evidence of CVE-2025-14847 (MongoBleed) exploitation on MongoDB servers by analyzing connection patterns in MongoD...
github.com
December 27, 2025 at 1:52 AM
I have PR'd a new @velocidex.com Artifact to the Exchange to hunt for exploitation of #CVE-2025–14847.
As far as I know, this is the only defensive signature for this CVE that exists currently.
github.com/Velocidex/ve...
As far as I know, this is the only defensive signature for this CVE that exists currently.
github.com/Velocidex/ve...
Reposted by DDI Training
Friendly reminder to my #DFIR friends... If you ever need an offline triage collector in a pinch, @whit.zip and I maintain one for you!
Powered by latest version of Velociraptor, preconfigured to get all the important pieces for investigation.
1. Download
2. Execute
3. Find bad guys
triage.zip
Powered by latest version of Velociraptor, preconfigured to get all the important pieces for investigation.
1. Download
2. Execute
3. Find bad guys
triage.zip
Triage.zip - Collector Package
triage.zip
December 5, 2025 at 9:08 PM
Friendly reminder to my #DFIR friends... If you ever need an offline triage collector in a pinch, @whit.zip and I maintain one for you!
Powered by latest version of Velociraptor, preconfigured to get all the important pieces for investigation.
1. Download
2. Execute
3. Find bad guys
triage.zip
Powered by latest version of Velociraptor, preconfigured to get all the important pieces for investigation.
1. Download
2. Execute
3. Find bad guys
triage.zip
Same awesome tool, new look -- triage.zip got a facelift!
Also, updated to work with latest changes to Velociraptor's new Triage Targets: triage.velocidex.com
This project made possible due to the epic team behind @velocidex.com 💙 We only aim to make it even more accessible to the masses. #DFIR
Also, updated to work with latest changes to Velociraptor's new Triage Targets: triage.velocidex.com
This project made possible due to the epic team behind @velocidex.com 💙 We only aim to make it even more accessible to the masses. #DFIR
November 24, 2025 at 8:04 PM
Same awesome tool, new look -- triage.zip got a facelift!
Also, updated to work with latest changes to Velociraptor's new Triage Targets: triage.velocidex.com
This project made possible due to the epic team behind @velocidex.com 💙 We only aim to make it even more accessible to the masses. #DFIR
Also, updated to work with latest changes to Velociraptor's new Triage Targets: triage.velocidex.com
This project made possible due to the epic team behind @velocidex.com 💙 We only aim to make it even more accessible to the masses. #DFIR
We are launching a Black Friday deal on our most popular course, Threat Hunting & Incident Response w/Velociraptor! From now until midnight (EST) 11/28, enjoy 40% off our best-selling on-demand course.
Register: ddi.sh/thvr-bf-2025
Use Code: blackfriday2025
#DFIR #ThreatHunting
Register: ddi.sh/thvr-bf-2025
Use Code: blackfriday2025
#DFIR #ThreatHunting
November 24, 2025 at 2:30 PM
We are launching a Black Friday deal on our most popular course, Threat Hunting & Incident Response w/Velociraptor! From now until midnight (EST) 11/28, enjoy 40% off our best-selling on-demand course.
Register: ddi.sh/thvr-bf-2025
Use Code: blackfriday2025
#DFIR #ThreatHunting
Register: ddi.sh/thvr-bf-2025
Use Code: blackfriday2025
#DFIR #ThreatHunting