Good stuff. Now I’m keen to see your view on the TI matter. What happens when the same scenarios pop up for 5 different clients and it turns out to be the same everytime? I also get clients that say: “oh yeah we red team already, you don’t need to tells us what it is” (1/2)
Just published some thoughts on red teaming, how to approach it, procure it and get in to it...https://link.medium.com/eV1myC6NM2
-
-
-
TIBER addresses this with a GTL report which is supplemented with a smaller FI TI and targeting exercise, it minimises duplication given many FIs face similar risks from similar actors, particularly when there’s regional similarities
- Još 5 drugih odgovora
Novi razgovor -
-
-
Interesting read Dom, I agree that a red team that is working predominantly in one sector will probably be able to predict TI output. My experience is ‘good TI’ is invaluable for creating credible scenarios for nonstandard (non-finance?) targets; however not all TI is ‘good-TI’.
-
Thanks Simon, it's very true - TI quality seems to vary quite a lot and personally I find it's most valuable and realistic when combined with intelligence sourced from the target
- Još 3 druga odgovora
Novi razgovor -
-
-
Never go full thought leader!
-
It’s way easier tbh, you can write posts from your phone without even opening a debugger!
Kraj razgovora
Novi razgovor -
-
-
Excellent post Dominic. Been nodding my head throughout reading it.pic.twitter.com/7gXUp9k7te
-
Thanks Marc, just some Xmas musing in between turkey and cake
Kraj razgovora
Novi razgovor -
-
-
Amazing post
-
Thanks chirag
Kraj razgovora
Novi razgovor -
Čini se da učitavanje traje već neko vrijeme.
Twitter je možda preopterećen ili ima kratkotrajnih poteškoća u radu. Pokušajte ponovno ili potražite dodatne informacije u odjeljku Status Twittera.