← @kwm Twitter archive

Keith

@kwm

A small time delta between event and initial observation = detection fun:

- binary signing
- compilation
- domain registration

9/11/2017, 10:36:10 AM

Favs: 4

Retweets: 1

Keith

@kwm

Binary attributes in particular have led to good finds. Very rare to receive legit, local binaries within hours (or even ~day) of signing.

9/11/2017, 10:38:32 AM

Favs: 1

Retweets: 0