Cyber. Motorcycles. Cars. Jiu-Jitsu.
Joined March 2009
- Tweets438
- Following768
- Followers441
- Likes442
Alejandro Mayorkas, Secretary of the US Department of Homeland Security: “We need you [the hacker community].”
#defcon31 @AliMayorkas
89
Thanks to @anton_chuvakin for our @SANSInstitute webinar on "SOC, Meet Cloud. Cloud, Meet SOC. What Changes — and What Stays the Same?" We also gave cloud detection examples for @splunk & @microsoft Sentinel & how to validate & test them. sans.org/webcasts/soc-meet-c…
#SIEM #SecOps
3
346
Looking forward to an educational and entertaining conversation with @anton_chuvakin in our upcoming @SANSInstitute webinar on how #Cloud changes #SecOps! Register: hubs.li/Q01y_22S0 @CardinalOps
Many traditional #SOC teams have been challenged by the move to the #cloud and how this can change threat detection and IR. Reserve your spot for our live webinar (Jan 26 @ 1PM ET) produced by the @SANSInstitute and featuring @anton_chuvakin
Register: hubs.li/Q01y_22S0
Big thanks to @anton_chuvakin for presenting at our Black Hat webinar, "SOC Modernization: Where Do We Go From Here?" Anton talked about why we need both process consistency (automation) and human creativity in the SOC. Watch on-demand: event.on24.com/wcc/r/3978280…
@CardinalOps #cyber
How to communicate cyber risk to the C-level? Make it real (to the business), give examples, and keep it simple. @JohnBrennan #GartnerSEC
At #GartnerSEC, @JohnBrennan suggests Congress needs to change our statutory framework to allow govt. agencies to be more proactive in defending private sector from cyberattacks (since 85% of critical infrastructure owned by private sector)… maybe even retaliate? #CyberSecurity
2
2022 data-driven report on #MITRE ATT&CK coverage gaps in enterprise SIEMs shows actual detection coverage & detection quality are far below what most organizations assume. Thanks to @anton_chuvakin
for his best practice recommendations in the report. prnewswire.com/il/news-relea…
SANS webinar featuring @anton_chuvakin about the future of #SIEM – and why many problems that plagued early SIEM users are still with us today. We'll also describe the state of @MITREattack coverage in real-world SIEM deployments. Register: sans.org/webcasts/anton-chuv… @SANSInstitute
"Hackers live in a realm between spaces and times, looking at the hidden connections and occasionally playing a chord on the threads." @daveaitel from "General Relativity is Not Evenly Distributed"
“By promising to be API compatible (including offering S3's eleven-nines durability guarantee and free infrequent access), Cloudflare has cut off nearly all of AWS' remaining "liberties", putting it in "atari".” … and thanks to SCOTUS (ORCL v. GOOGL), you can’t copyright an API. – at Newton, MA
To quote Wikipedia, a move that overwhelmingly compels a player into a particular follow-up move is said to have "sente" (先手), or "initiative". In most games, the player who maintains "sente" most of the time will win.
swyx.io/cloudflare-go/
“When a security person sees a vulnerability, they zoom out and see risk—they see an attacker and what they can access. On the other hand, when a developer thinks about a vulnerability, they see the app—what might go wrong and the maintenance cost of mitigating it.” – at New York, USA
New Developer Den interview out with @guypod, Founder & President of @snyksec! Hear from Guy on optimizing developer experience, the best path to becoming a CTO, when to offer a freemium product, advice for devs early in their career + more.
osohq.com/post/developer-den…
2
Learn why Microsoft scored highest in threat visibility coverage for @MITREattack for ICS — and why lack of visibility into multi-stage IT/OT attacks like TRITON is a key ops risk. Thanks to @ojalexander + team for helping the community with this effort! aka.ms/MITREforICSEvaluation…
2
"Companies that view ransomware as a threat to core business operations rather than a simple risk of data theft will react and recover more effectively." Companies should "immediately convene their leadership teams" to assess their risk exposure.
cnn.com/2021/06/03/politics/…
Check out my latest article: DHS Cyber Guidelines Could Serve as Model for Other Sectors linkedin.com/pulse/dhs-cyber… via @LinkedIn
1
I just subscribed to Zero Day zetter.substack.com/?utm_med… Insightful article today by @KimZetter about the discovery of new C2 servers delivering 2nd-stage malware to #SolarWinds victims. – at Newton, MA
2
Check out my latest article: White House Plan to Strengthen Security for Power Grid, Gas Pipeline Operators, Water Utilities linkedin.com/pulse/white-hou… via @LinkedIn
3
Check out my latest article: Cyber Highlights from 2021 Threat Assessment by US National Intelligence Community linkedin.com/pulse/cyber-hig… via @LinkedIn
Check out my latest article: Ann Neuberger Keynote at Today's SANS ICS Security Summit linkedin.com/pulse/ann-neube… via @LinkedIn
Winter reminds us that darkness, not only light, is part of the recurring rhythm of what it means to be human. #makelifearide #spiritofgs #r1200gs #advrider #motophotography #bmwgspictures #bmwmotorrad instagram.com/p/CJTtEs1Hc4R/… – at Littleton, MA
1
