Qualified triples from the transcripts. Origin, speaker, and evidence stay attached. These are not independently verified facts.
Alethe Denis USES LORD
Alethe played LORD, or Legend of the Red Dragon, on her school's LAN and wanted to code to hack the game.
Explicit Confidence 98% · Alethe Denis EP 107 Details
“hack this game that we would play just on the LAN at the school that was called LORD”
Alethe Denis USES Pretexting
Alethe develops and uses pretexts to impersonate employees or trusted vendors during calls.
Explicit Confidence 99% · Alethe Denis EP 107 Details
“I’ve kinda got an idea of what type of pretext I’m gonna use”
Alethe Denis USES credential harvesting
In phishing engagements, Alethe sets up pages to collect credentials and tests whether she can capture them.
Explicit Confidence 99% · Alethe Denis EP 107 Details
“I will set up a landing page that is to collect credentials”
Alethe Denis USES Glassdoor
Alethe uses Glassdoor to learn about company culture and employee experiences during target research.
Explicit Confidence 99% · Alethe Denis EP 107 Details
“I’ll move into company review websites like Glassdoor and Indeed to learn about company culture”
Critical Insight USES penetration testing
Critical Insight provides penetration testing to clients.
Explicit Confidence 99% · Jack Rhysider EP 107 Details
“Critical Insight which does provide penetration testing to clients”
Alethe Denis USES Vishing
Alethe says her work includes vishing engagements.
Explicit Confidence 99% · Alethe Denis EP 107 Details
“to do more vishing, phishing, and more actual social engineering physicals”
Alethe Denis USES Indeed
Alethe uses Indeed as a company-review and target-research source.
Explicit Confidence 99% · Alethe Denis EP 107 Details
“company review websites like Glassdoor and Indeed”
Alethe Denis USES security awareness training
Alethe consults on and delivers security-awareness training for clients.
Explicit Confidence 99% · Alethe Denis EP 107 Details
“I started doing security awareness training”
Alethe Denis USES Instagram
Alethe uses Instagram location searches to find geotagged workplace photographs and information such as badges and exposed monitors.
Explicit Confidence 99% · Alethe Denis EP 107 Details
“I will put that address into Instagram, into the location search”
Alethe Denis USES IRC
Alethe spent years communicating with people in IRC chat rooms.
Explicit Confidence 99% · Alethe Denis EP 107 Details
“for years, I had been hanging out in IRC chat rooms”
Alethe Denis USES Turbo Pascal
Alethe learned to code in Turbo Pascal during school.
Explicit Confidence 99% · Alethe Denis EP 107 Details
“I learned to code in Turbo Pascal.”
Alethe Denis USES social engineering
Alethe works in social engineering and describes it as her professional specialty.
Explicit Confidence 99% · Alethe Denis EP 107 Details
“my core interest is growing our social engineering side”
Marq verified that credentials posted by other hackers gave access to a real Ring camera account, then reported the exposure.
Explicit Confidence 98% · Marq EP 108 Details
“I did sign onto one of the accounts just to see if I could see through her Ring camera and see if this was real, and it was”
Marq ASSOCIATED_WITH Insider threat
Lisa says Marq was technically an outsider when he acted, but discusses his case as an example of the circumstances and tipping points associated with insider threats.
Attributed Confidence 86% · Lisa Forte EP 108 Details
“in this particular case, I suppose technically at the time he did it, he was an outsider. But it’s no – there’s no bad apple that exists in an organization.”
Lisa Forte ASSOCIATED_WITH Insider threat
Lisa Forte consults with companies about handling insider threats and explains the circumstances that can produce them.
Explicit Confidence 99% · Jack Rhysider EP 108 Details
“Lisa consults with companies to help them handle insider threats.”
Amazon is described as the parent company for Ring and responded to Marq's report about the exposed accounts.
Explicit Confidence 99% · Jack Rhysider EP 108 Details
“Then Amazon, the parent company for Ring, responded to Marq and sorted it out.”
Jack Rhysider AUTHORED Darknet Diaries
Jack identifies himself as the person making the Darknet Diaries show.
Explicit Confidence 99% · Jack Rhysider EP 108 Details
“This show is made by me, a citizen of the Metaverse, Jack Rhysider.”
Binary Defense DEVELOPED_BY Dave Kennedy
Binary Defense is described as having been founded by Dave Kennedy.
Explicit Confidence 99% · Jack Rhysider EP 108 Details
“a well-known IT security company called Binary Defense, founded by Dave Kennedy”
David Petraeus MEMBER_OF Central Intelligence Agency
David Petraeus is described as having been director of the CIA.
Explicit Confidence 99% · Jack Rhysider EP 108 Details
“Petraeus was director of the CIA”
Marq was hired by Microsoft and worked there as an Exchange engineer.
Explicit Confidence 99% · Marq EP 108 Details
“I went through the interviewing process and I was hired. At Microsoft, I was a Exchange engineer”
Oracle hired Marq after a recruiter found his resume, and he worked there for about a year and a half.
Explicit Confidence 99% · Jack Rhysider EP 108 Details
“a recruiter from Oracle found it and reached out, and Oracle hired him.”
“He worked there about a year and a half”
Omar USES Web Tech Plus
Omar accessed the dealership's Web Tech Plus system and used it to disable customers' cars and make them honk continuously.
Explicit Confidence 99% · Jack Rhysider EP 108 Details
“The first thing he goes for is their Web Tech Plus system.”
“Omar gets into that system and starts typing customer names that he remembers, and he just starts clicking on them and disabling cars”
Marq USES Unauthorized access using retained credentials
Two months after being fired, Marq used retained credentials to access his former employer's administration portal and customer servers.
Explicit Confidence 99% · Marq EP 108 Details
“I just checked to see if I still had access to one of the servers where we administered several of our clients. I still had access to everything.”
“He had remembered his username and password to get into that dashboard when he worked there, and he tried to log into the portal, and it worked.”
Marq USES Event logs
Because he had administrator access, Marq deleted event logs showing his login and download activity to conceal the intrusion.
Explicit Confidence 99% · Jack Rhysider EP 108 Details
“he could just delete the event logs which showed his login and download activities.”
Omar USES Unauthorized access using retained credentials
Omar used another employee's still-active login after his own dealership account had been disabled.
Explicit Confidence 99% · Jack Rhysider EP 108 Details
“He was able to use this other employee’s login to access the computers at this car dealership.”