Phillip

@wolramp

DevSecOps Hacker/Engineer. MSISE candidate at SANS Technology Institute. Not speaking for my employer.

Vrijeme pridruživanja: kolovoz 2017.

Tweetovi

Blokirali ste korisnika/cu @wolramp

Jeste li sigurni da želite vidjeti te tweetove? Time nećete deblokirati korisnika/cu @wolramp

  1. proslijedio/la je Tweet
    13. sij

    In 2020, stop underestimating the value of culture.

    Poništi
  2. proslijedio/la je Tweet
    16. sij

    When you are standing there, scratching your head, wondering why on earth anyone would have made some particular decision... The answer is almost always “It seemed like a good idea at the time.” 1/7

    Prikaži ovu nit
    Poništi
  3. proslijedio/la je Tweet
    15. sij

    If you're doing the same thing ten times a day, automate it. If you have a regular task and it's eating into your time, automate it. If you have a bunch of noisy data and you're manually filtering through it, automate it. Retyping the same thing? SCRIPT IT AND AUTOMATE IT

    Prikaži ovu nit
    Poništi
  4. proslijedio/la je Tweet

    I am reading the list of CVEs announced by US-Cert today and thinking a good question for vendors is how they feed this information back to employees to prevent repeat mistakes.

    Poništi
  5. proslijedio/la je Tweet
    20. pro 2019.

    Sigma2Attack generates ATT&CK navigator heat maps from a set of rules by Pull Request - already merged into master ATT&CK Navigator

    Poništi
  6. proslijedio/la je Tweet
    20. pro 2019.

    "We must elevate improvement of daily work over daily work itself" If you don't do this, you will simply never find any time to improve. Such an important concept that everyone should know in their bones! It's only one of the treats in 's The Unicorn Project.🦄 (1/2)

    Prikaži ovu nit
    Poništi
  7. proslijedio/la je Tweet

    This is getting to be a GOOD habit -- once again we salute our Cyber professionals who competed with hundreds of military, civilian individual and team champions in SANS NetWars competitions. Read the full story at

    Poništi
  8. proslijedio/la je Tweet
    18. pro 2019.

    1/ The Phoenix Project is *free* today (Dec 19) on & other bookseller sites. If there’s someone you think should read it, now’s your chance. Retweet + tag your friends, colleagues, bosses. Link: (A Thread)

    Prikaži ovu nit
    Poništi
  9. 17. pro 2019.

    Another Christmas present to myself. Looking forward to playing this. Thanks for making these!

    Poništi
  10. 16. pro 2019.

    Another Tournament of Champions is in the books!

    Poništi
  11. proslijedio/la je Tweet

    ARCYBER Soldiers teamed up to compete against the top cyber teams from the other Services for the 2019 NetWars Services Cup, while other Soldiers and Civilians competed against 500 others, individually or in teams, at the SANS Core NetWars Tournament Dec. 15-16 at DC Hilton.

    Poništi
  12. 14. pro 2019.

    Got an early Christmas present for myself. Thanks , this looks like a good one!

    Poništi
  13. proslijedio/la je Tweet

    Some parting advice: set these goals for your security team in 2020.

    Poništi
  14. proslijedio/la je Tweet
    5. pro 2019.

    Things might be woefully broken and you may not be able to fix them, but I'll be damned if I'm not about to put fucking bells on everything so I'm alerted to anomalous activity

    Poništi
  15. proslijedio/la je Tweet
    11. stu 2019.

    FW and port blocks were supposed to be a temp solution in order to give us time to address the root cause which IMHO, is insecure software. Treating the net as a defense component doesn't make sense anymore. Hacker goals: 1) steal/disclose/destroy valuable data 1/n

    Prikaži ovu nit
    Poništi
  16. proslijedio/la je Tweet
    31. lis 2019.
    Prikaži ovu nit
    Poništi
  17. proslijedio/la je Tweet
    30. lis 2019.

    Don't get frightened by not knowing things. I have approximate answers, and possible beliefs, and different degrees of certainty about different things, but I'm not absolutely sure of anything. There are many things I don't know anything about. It doesn't frighten me.

    Poništi
  18. proslijedio/la je Tweet
    29. lis 2019.

    And an announcement from the stage of a release of mappings from CIS controls to MITRE ATT&CK coming later this year!

    Prikaži ovu nit
    Poništi
  19. proslijedio/la je Tweet
    22. lis 2019.

    The man, the legend, Security feedback too late in SDLC Solution: Transfer Adversarial skillz to Product Teams 💪

    Poništi
  20. proslijedio/la je Tweet
    16. lis 2019.

    twitter: Security is a component of quality, not a separate concern. Vendors hijacked the term to sell tools. InfoSec teams buy "DevSecOps" tools and call it done. If you want to make an impact on security, roll up your sleeves and contribute to Dev & Ops.

    Poništi

Čini se da učitavanje traje već neko vrijeme.

Twitter je možda preopterećen ili ima kratkotrajnih poteškoća u radu. Pokušajte ponovno ili potražite dodatne informacije u odjeljku Status Twittera.

    Možda bi vam se svidjelo i ovo:

    ·