Chris Sanders 🔎 🧠

Hi, Y'all! I tweet about the intersection of cyber security investigation doctrine, cognitive psychology, and education. Also BBQ. 👨🏻‍🏫 Online Courses I Teach: networkdefense.co/courses/ 📚 Books I've Written: chrissanders.org/publications/ 🌎 Blog & More Links: chrissanders.org/links/

Investigation Scenario 🔎 An instance of chome.exe executed with the --load-extension option. What do you look for to investigate whether an incident occurred and its source? #InvestigationPath #DFIR #SOC

I’m so excited to share this with my students! If you haven’t purchased yours yet, you need to. Thank you, @chrissanders88

Glad to help! I hope it's a tremendous school year!

Investigation Scenario 🔎 A middle school IT admin noticed a Chrome Extension added to a student's laptop with permissions ["proxy", "webRequest", "tabs"]. What do you look for to investigate if an incident or policy violation occurred? #InvestigationPath #DFIR #SOC

Our book launch and signing for Milo and the Midnight Meteorite today! We enjoyed sharing the book and some meteorites with local folks ☄️ #space #STEM #astronomy #science

Investigation Scenario 🔎 A detection tool indicated a host might be infected with the Lumma stealer, but the signature is not visible. What do you look for to investigate whether an infection from this malware has occurred and how it got there? #InvestigationPath #DFIR #SOC

We’re giving rural teachers a little more time to apply for Infinite Sky! ☀️ It’s summer, after all. You now have until Wednesday at midnight to apply to bring space industry STEM to your classroom 🛰️ ruraltechfund.org/infinitesky #InfiniteSkySTEM

I'm crossing the streams a bit, but here's a video with some clips of my finding the Georgia Meteorite that fell last week... youtube.com/shorts/_x-U5YV… #meteorites #space #astronomy

Only 5 days left! Rural teachers: Infinite Sky STEM gives your students a hands-on look at the commercial space industry, right from your classroom. Apply now to join the next cohort before the deadline passes! 🛰️ ruraltechfund.org/infinitesky #InfiniteSkySTEM

You don't need your company name on the side of a race car. You don't need an army of sales folks getting paid 3x what your engineers are. You don't need to spend half a million on a conference booth. Your security tool just needs to be good and help people at a reasonable price.

Successful day hunting the Georgia meteorite! These were floating around in space yesterday, and now I’m holding them in my hand 😍☄️