ǝɔuıʌ

Most Interesting from #ThreatHunting & #IncidentResponse Summit & Training 2019 (based on my opinion:) #Jupyter Notebooks & Pre-Recorded Data Sets https://www.sans.org/cyber-security-summit/archives/file/summit-archive-1569948711.pdf … @Cyb3rWard0g & @Cyb3rPandaH Awesome work!

The Stress and Joy of Security Jobs. A thread. A few months ago there was this whole thing about the stress of security roles, CISOs self-medicating, and a whole range of burn-out talk. Ok, yes, security is a tough job. A very tough job. 1/14

Cybersecurity is not the only technology risk. A thread (hopefully obvious). In fact, when you total up actual losses it is likely not even the biggest risk. Although I think it is the risk which is increasing the most and has the highest potential existential impact. 1/15

"How can management tell you're doing a good job Mr Hunt guy" "99.9% of the red team's campaigns were caught using custom rules made by the hunt team using log telemetry and not ids/ips systems" "Yeah but other than that"

In what's sure to be an unpopular sentiment, my suggestion at security conferences is to have less "talks" & more training on how to be effective at doing the basics in information security. Methinks there's a huge need for training in the community due to diff levels of exp.

Just as we talk about the need for secure products, not just security products, we also have to shift our perspective on people and say: we need the people we already have to be more productive - and we need more security minded people not just more security people. So.... 4/15

100% free and production-grade Ansible playbooks available here. Most are deployed at my current customer for more than a year. http://njrusmc.net/code/code.html  For those already using them, let me know what business case they are helping you solve!

I'm giving away a free @nostarch ebook (up to $50) to a college student in an #infosec related program or to anyone already in the field with two years or less experience. Reply to this tweet telling me what book you'd choose and why. I'll select a winner on 11/19. Please RT.

Regarding Programming and it’s necessity in InfoSec: Is programming a core requirement of entry to get into every aspect of InfoSec? No. Do you need to learn, at some point, programming in order to advance in many areas of InfoSec? Yes, in some areas (but not all).