This is so useful. Thank you @heartwon 🙏

Singing the Blues:
Taking Down an Insider Threat

"I had all of the advantages. I was already inside the network. No one suspected me. But they found my hack, kicked me off the network...

...and physically hunted me down."

Many pentests start from the outside, wanting to see how the perimeter might be breached.

This pentest started from the inside. My client wanted to assume they had already been breached, and, if breached, how far could an attacker go.

Could they stop me once I was inside?

So they snuck me in. Disguised me as a new employee. Gave me a work computer, an ID badge, an account in their system... hell, I even had a cubicle w/my assumed name on it.

The only person who knew who I really was was their CISO. Everyone else thought I was Jeremy in Marketing.

During most of the first morning, I completed onboarding, made introductions, and completed menial tasks.

But I had to act quick. I only had a week onsite. I had to hack their network while not raising suspicion.

So I set about it.

You have to understand... most "Internal Pentests" are straight forward. The hard part is breaching the network, but once you're inside, it's a target rich environment. End of Life computers, default passwords, everyone a Local Administrator...

LING PURANA: IMPORTANCE AND CHARACTERISTICS

Reading Ling Purana provides bhog and moksha to the reader and listeners. It is about Shiva's sermon to Brahma when Shiva entered the Agni Ling and preached about Dharma sidhhi through the stories of Agni Kalp.

Vyasji divided this into two parts. This book is different from others and has eleven thousand shlokas which depict the glory of Shiva. This Puran is the summary about importance of Tridev.
It starts first with a questions. Then it describes the Shrishti in brief.

Then there is description of Yog and Kalp. Next is the evolution of Ling and its puja Vidhi. It consists of dialogue between Sanat Kumar and Shail etc. It also mentions the character of Dadhichi, the dharma representation of that yug, Bhuvan kosh description,

Chandravansh and Surya vansh. Next there is elaborate description of Shrishti, story of Tripur, Ling and Pashu Paash vimoksha, Vrats for Shiva, Discipline, Repentance, Arisht, description of Shri Shail. Next is the story of Andhakasur, Varah, Narsingh,

k¡lling of Jalandhar, Shiv sahastra naam, story of Daksha's yagya and its destruction, killing of Madan and marriage of Parvati.

Next is Vinayak katha, Shiv tandav, Ambrish katha and Upmanyu .

Shy people are either overthinking or highly observant of the social setting.

And in many cases it can be both.

'So what do I do?'

You learn the 75/25 law.

'What is that?'

The law of charisma...👇

Let's address the over thinkers first.

Do you have any idea why you overthink?

'Yea. Because others are judging how shy I am.'

Incorrect.

Others are thinking about themselves, not you.

But the fact that you think they are thinking about you, you fuck up the interaction.

Now you stay in your head too much & avoid the present moment.

A major no no in the social world.

Your tendency to think that others are judging you for being shy, coincidentally makes you more shy.

And that's when you start giving off a strange vibration to the social setting.

This is when you begin attracting comments like 'why are you so quiet?'

On December 25 Mr Pool retweeted August 16 message about the Phoenix and that the worst was still on the horizon to come. 1/*

Maybe now we can assume that November 3 message meant "FUD" nor "FUN". Putting the word in capital letters seems to indicate the aspect the word fud has in our space, FUD. 2/*

Brad started it on December 22 (1/3 posts (Don't say? Sure) = 13 = Plan B). 3/*

And immediately the SEC followed dropping the bomb (1.3 billions (Don't say? Sure) = 13 = Plan B). 4/*

FUD materializes, Bitstamp is one of the first that haltes XRP trading and so on. 5/*

(MAJOR NOTE) The reason Manafort took over Trump's campaign in just 3 weeks despite being hired as a mere delegate counter is that ROGER STONE initiated a whisper campaign against Corey Lewandowski. That campaign started...days after Manafort returned from meeting with WikiLeaks.

2/ Stone and Manafort are longtime business partners; we'd expect Manafort to tell Stone what Assange told him, and for him to expect Stone to then pressure the campaign not only to hire him but quickly elevate him.

And who was Stone in touch with at the campaign? Trump himself.

3/ I bet you Manafort's late March emails are very interesting and that some of them are to/from his longtime business associate Roger Stone. And I bet Roger Stone's late March phone calls are very interesting and that some of them are to/from his longtime friend Donald Trump.

4/ At the end of March 2016, Trump suddenly convenes a NatSec meeting. At that meeting he directs his NatSec team to change the RNC platform in July to benefit Putin. Who later takes credit for that change?

Paul Manafort's business associate, Kremlin agent Konstantin Kilimnick.

5/ Why did Donald Trump suddenly convene a NatSec meeting 3 days after he finally hired Manafort? Why did he issue a pro-Kremlin directive at that meeting that Manafort's camp would later take credit for? What did Manafort tell Trump in the days leading up to that NatSec meeting?