{"id": 873095878730371076, "geo": null, "lang": "en", "text": "RT @XenoKovah: Remember that time we showed using AMT SOL for C2 from SMM...? https://t.co/cP8tYtT5hE section 6.2 https://t.co/Fdtrwq59fP", "user": {"id": 2695392493, "url": "https://t.co/M1Oty4CtZm", "lang": "en", "name": "Joanna Rutkowska", "id_str": "2695392493", "entities": {"url": {"urls": [{"url": "https://t.co/M1Oty4CtZm", "indices": [0, 23], "display_url": "blog.invisiblethings.org", "expanded_url": "https://blog.invisiblethings.org"}]}, "description": {"urls": []}}, "location": "Warsaw", "verified": true, "following": true, "protected": false, "time_zone": null, "created_at": "Thu Jul 31 10:24:07 +0000 2014", "utc_offset": null, "description": "Strategy & security at @golemproject. Previously: founder of @QubesOS and Invisible Things Lab. Distrusts computers.", "geo_enabled": false, "screen_name": "rootkovska", "listed_count": 696, "friends_count": 125, "is_translator": false, "notifications": false, "statuses_count": 5233, "default_profile": false, "followers_count": 26534, "translator_type": "none", "favourites_count": 2983, "profile_image_url": "http://pbs.twimg.com/profile_images/1002520385156509697/PhUHrM3y_normal.jpg", "profile_banner_url": "https://pbs.twimg.com/profile_banners/2695392493/1476009216", "profile_link_color": "303030", "profile_text_color": "333333", "follow_request_sent": false, "contributors_enabled": false, "has_extended_profile": true, "default_profile_image": false, "is_translation_enabled": false, "profile_background_tile": true, "profile_image_url_https": "https://pbs.twimg.com/profile_images/1002520385156509697/PhUHrM3y_normal.jpg", "profile_background_color": "131516", "profile_sidebar_fill_color": "EFEFEF", "profile_background_image_url": "http://abs.twimg.com/images/themes/theme14/bg.gif", "profile_sidebar_border_color": "FFFFFF", "profile_use_background_image": true, "profile_background_image_url_https": "https://abs.twimg.com/images/themes/theme14/bg.gif"}, "place": null, "id_str": "873095878730371076", "source": "<a href=\"https://about.twitter.com/products/tweetdeck\" rel=\"nofollow\">TweetDeck</a>", "entities": {"urls": [{"url": "https://t.co/cP8tYtT5hE", "indices": [78, 101], "display_url": "legbacore.com/Research_files\u2026", "expanded_url": "http://legbacore.com/Research_files/HowManyMillionBIOSesWouldYouLikeToInfect_Whitepaper_v1.pdf"}, {"url": "https://t.co/Fdtrwq59fP", "indices": [114, 137], "display_url": "twitter.com/msftmmpc/statu\u2026", "expanded_url": "https://twitter.com/msftmmpc/status/872469485126656001"}], "symbols": [], "hashtags": [], "user_mentions": [{"id": 2362664118, "name": "Xeno Kovah", "id_str": "2362664118", "indices": [3, 13], "screen_name": "XenoKovah"}]}, "favorited": false, "retweeted": false, "truncated": false, "created_at": "Fri Jun 09 08:34:13 +0000 2017", "coordinates": null, "contributors": null, "retweet_count": 65, "favorite_count": 0, "is_quote_status": true, "quoted_status_id": 872469485126656001, "retweeted_status": {"id": 873014843166531584, "geo": null, "lang": "en", "text": "Remember that time we showed using AMT SOL for C2 from SMM...? https://t.co/cP8tYtT5hE section 6.2 https://t.co/Fdtrwq59fP", "user": {"id": 2362664118, "url": "https://t.co/q5FcQ6x94K", "lang": "en", "name": "Xeno Kovah", "id_str": "2362664118", "entities": {"url": {"urls": [{"url": "https://t.co/q5FcQ6x94K", "indices": [0, 23], "display_url": "legbacore.com/Research.html", "expanded_url": "http://legbacore.com/Research.html"}]}, "description": {"urls": [{"url": "https://t.co/B571OncORA", "indices": [108, 131], "display_url": "OpenSecurityTraining.info", "expanded_url": "http://OpenSecurityTraining.info"}]}}, "location": "", "verified": false, "following": false, "protected": false, "time_zone": null, "created_at": "Wed Feb 26 13:15:10 +0000 2014", "utc_offset": null, "description": "Interested in reverse engineering, stealth malware, BIOS, UEFI, trusted computing, and training. Founder of https://t.co/B571OncORA. Now at Apple.", "geo_enabled": false, "screen_name": "XenoKovah", "listed_count": 204, "friends_count": 49, "is_translator": false, "notifications": false, "statuses_count": 1432, "default_profile": false, "followers_count": 6859, "translator_type": "none", "favourites_count": 2, "profile_image_url": "http://pbs.twimg.com/profile_images/440175648472977408/R1WzGyWZ_normal.png", "profile_link_color": "000000", "profile_text_color": "000000", "follow_request_sent": false, "contributors_enabled": false, "has_extended_profile": false, "default_profile_image": false, "is_translation_enabled": false, "profile_background_tile": false, "profile_image_url_https": "https://pbs.twimg.com/profile_images/440175648472977408/R1WzGyWZ_normal.png", "profile_background_color": "000000", "profile_sidebar_fill_color": "000000", "profile_background_image_url": "http://abs.twimg.com/images/themes/theme1/bg.png", "profile_sidebar_border_color": "000000", "profile_use_background_image": true, "profile_background_image_url_https": "https://abs.twimg.com/images/themes/theme1/bg.png"}, "place": null, "id_str": "873014843166531584", "source": "<a href=\"http://twitter.com\" rel=\"nofollow\">Twitter Web Client</a>", "entities": {"urls": [{"url": "https://t.co/cP8tYtT5hE", "indices": [63, 86], "display_url": "legbacore.com/Research_files\u2026", "expanded_url": "http://legbacore.com/Research_files/HowManyMillionBIOSesWouldYouLikeToInfect_Whitepaper_v1.pdf"}, {"url": "https://t.co/Fdtrwq59fP", "indices": [99, 122], "display_url": "twitter.com/msftmmpc/statu\u2026", "expanded_url": "https://twitter.com/msftmmpc/status/872469485126656001"}], "symbols": [], "hashtags": [], "user_mentions": []}, "favorited": false, "retweeted": false, "truncated": false, "created_at": "Fri Jun 09 03:12:13 +0000 2017", "coordinates": null, "contributors": null, "quoted_status": {"id": 872469485126656001, "geo": null, "lang": "en", "text": "PLATINUM attackers can use Intel AMT SOL for stealthy C2 even with network cards disabled. Analysis and demo at\u2026 https://t.co/Ur2CvNN46a", "user": {"id": 217462908, "url": "https://t.co/X6acP9myZA", "lang": "en", "name": "Windows Defender Security Intelligence", "id_str": "217462908", "entities": {"url": {"urls": [{"url": "https://t.co/X6acP9myZA", "indices": [0, 23], "display_url": "aka.ms/wdatp", "expanded_url": "http://aka.ms/wdatp"}]}, "description": {"urls": []}}, "location": "Redmond, WA", "verified": true, "following": false, "protected": false, "time_zone": null, "created_at": "Fri Nov 19 16:03:07 +0000 2010", "utc_offset": null, "description": "Security information, news, intelligence, and next-gen security technologies from Microsoft", "geo_enabled": false, "screen_name": "WDSecurity", "listed_count": 910, "friends_count": 860, "is_translator": false, "notifications": false, "statuses_count": 3144, "default_profile": false, "followers_count": 37338, "translator_type": "none", "favourites_count": 1150, "profile_image_url": "http://pbs.twimg.com/profile_images/936481295646859264/2gM3OvWY_normal.jpg", "profile_banner_url": "https://pbs.twimg.com/profile_banners/217462908/1512109690", "profile_link_color": "0078D7", "profile_text_color": "333333", "follow_request_sent": false, "contributors_enabled": false, "has_extended_profile": false, "default_profile_image": false, "is_translation_enabled": false, "profile_background_tile": true, "profile_image_url_https": "https://pbs.twimg.com/profile_images/936481295646859264/2gM3OvWY_normal.jpg", "profile_background_color": "0074C6", "profile_sidebar_fill_color": "DDEEF6", "profile_background_image_url": "http://abs.twimg.com/images/themes/theme14/bg.gif", "profile_sidebar_border_color": "FFFFFF", "profile_use_background_image": false, "profile_background_image_url_https": "https://abs.twimg.com/images/themes/theme14/bg.gif"}, "place": null, "id_str": "872469485126656001", "source": "<a href=\"http://www.hootsuite.com\" rel=\"nofollow\">Hootsuite</a>", "entities": {"urls": [{"url": "https://t.co/Ur2CvNN46a", "indices": [113, 136], "display_url": "twitter.com/i/web/status/8\u2026", "expanded_url": "https://twitter.com/i/web/status/872469485126656001"}], "symbols": [], "hashtags": [], "user_mentions": []}, "favorited": false, "retweeted": false, "truncated": true, "created_at": "Wed Jun 07 15:05:09 +0000 2017", "coordinates": null, "contributors": null, "retweet_count": 202, "favorite_count": 170, "is_quote_status": false, "possibly_sensitive": false, "in_reply_to_user_id": null, "in_reply_to_status_id": null, "in_reply_to_screen_name": null, "in_reply_to_user_id_str": null, "in_reply_to_status_id_str": null}, "retweet_count": 65, "favorite_count": 74, "is_quote_status": true, "quoted_status_id": 872469485126656001, "possibly_sensitive": false, "in_reply_to_user_id": null, "quoted_status_id_str": "872469485126656001", "in_reply_to_status_id": null, "in_reply_to_screen_name": null, "in_reply_to_user_id_str": null, "in_reply_to_status_id_str": null}, "possibly_sensitive": false, "in_reply_to_user_id": null, "quoted_status_id_str": "872469485126656001", "in_reply_to_status_id": null, "in_reply_to_screen_name": null, "in_reply_to_user_id_str": null, "in_reply_to_status_id_str": null}