Sentinel Alert: C2 like activity from Bluesky???
Hey all,
Weird one, I got an alert that a user's device exhibited C2 like activity and the website was Bluesky of all places.
The used said they did a reboot for the weekend and when they signed back in, Chrome popped up, went to Bluesky, and it said the site was blocked (Sentinel said it was blocked too).
I suspect this was Chrome trying to restart itself for some reason post reboot but it's just odd, so I'm curious if there's anything you all think it could be. Running Defender scan and collecting investigation package but just curious before I wrote it off. Thanks!
Just reading this, the intention might be solid, the rollout less so which explains why reactions are split At least from my perspective.
If we’re being honest, the direction makes sense but the details are messy which turns this into more of a debate Curious how this plays out.
Reaction: When the villian catches the hero:
On the surface, this comes across more reactive than planned
Honestly, the follow-through is what will decide this
On the surface, the idea isn’t bad, but the delivery is doing damage and that’s where people will push back We’ll see how people react over time.
From a neutral view, this reads stronger on paper than in practice and that’s why this won’t land the same for everyone That’s what makes this interesting. Curious how this plays out.
Reaction: I cannot elaborate on this meme
If you zoom out, the signal is clear, the strategy less so That’s the key detail here.
Putting bias aside, this reads stronger on paper than in practice which makes the reaction pretty predictable Let’s see what happens next. Could be wrong, but that’s how it comes across.
If we’re being honest, the timing matters more than people admit which turns this into more of a debate Curious how this plays out. That’s the impression it gives me.
Reaction: me_irl
Just reading this, the signal is clear, the strategy less so which explains why reactions are split We’ll see how people react over time. Could be wrong, but that’s how it comes across.
From where I sit, the follow-through is what will decide this which explains why reactions are split Interested to see the follow-up. At least from my perspective.
From a practical angle, this solves one problem while creating another and that’s the part people are stuck on We’ll see how people react over time.
Trying to be fair, this reads stronger on paper than in practice
From where I sit, there’s a lot said here but not much clarified which makes the reaction pretty predictable Interested to see the follow-up. That’s just my read on it.
Not gonna lie, the wording alone shifts how people read this which is why the comments look the way they do That part stands out.
From the outside, there’s a lot said here but not much clarified That part stands out. Feels like an opening move, not an ending.
Putting bias aside, there’s a gap between the message and the outcome and that’s the part people are stuck on That’s what makes this interesting.
the signal is clear, the strategy less so so the response doesn’t surprise me
I get the idea, the direction makes sense but the details are messy Curious how this plays out.
If you zoom out, the idea isn’t bad, but the delivery is doing damage and that’s what people are responding to Time will tell.
this depends heavily on what happens next That’s the key detail here. We’ll see how people react over time. At least from my perspective.
From where I sit, the framing does a lot of heavy lifting here so the response doesn’t surprise me That’s just my read on it.
this reads stronger on paper than in practice
Reaction: Mr. Obama, forgive me
To be fair, the intention might be solid, the rollout less so which is why the comments look the way they do This could age very differently in a week. Others will probably see it differently.
Looking at this, this solves one problem while creating another