1,629 Photos and videos
Before you speculate and dunk on Snowflake's Security team, remember they're real fucking good a threat detection. How would I know? I've built a threat detection program based off their Threat Detection Maturity Model: medium.com/snowflake/threat-… #hugops
1
6
528
You get “you up?” texts for booty calls. I get them from pager duty. We are not the same
20 Oct 2022
you get "you up?" texts for booty calls. i get them for honest star wars reviews. we are not the same.
8
I think that’s why an abstraction of asset management is interesting, like @jupiterone. Use current tooling to grab inventories, whether it be VM scanners, your CSPM product, EDR, doesn’t matter and dump into J1 for future querying.
1
1
Jimmy Vo retweeted
30 Sep 2022
So, I’m expecting in the next 2 weeks to have posted the following roles to join my team:
- Senior Compliance Lead
- Compliance Analyst
- Senior Risk Lead
- 3rd party Risk Lead
- Senior Technical Privacy Lead
- Security Awareness and Culture Lead
Feel free to DM, and please RT
1
22
18
Jimmy Vo retweeted
AWS She Builds is offering FREE training & cert vouchers for the AWS Solutions Architect Associate. Women will also join a community of learners & build connections to women in tech!
awsshebuildscloudupsaa.splas…
🎓Earn AWS Certs
📆 8-weeks
🤩Register by 10/15
🛑NO experience required
14
236
559
Vendors can ML all they want but out of the box detections often lack context of your environment. Consume raw EDR events and augment with custom detections. Same applies with control plane/data plane logs on your cloud provider.
An EDR/XDR isn't your be-all and end-all tooling to safeguard your environment against cyber incidents. You still need to manage it and update it. It's not a magic wand.
2
3
6
The security vendor space is interesting because there is incentive from an ARR perspective to become a platform which offers many prevention or detection capabilities by 1 vendor. When your VM vendor can do SIEM things, you can combine context (asset events). That's great.
1
1
Check out @daycyberwox’s channel if you haven’t yet. The content is geared towards those trying to get into security. Day has built an awesome community of folks who are trying to pivot into the field.
A Deep Dive into Wireshark for Security Analysts - Complete Wireshark Course for Beginners in Cybersecurity by @daycyberwox of @CyberwoxAcademy
youtube.com/playlist?list=PL…
1
6
21
I've been working on a few internal RFCs and various other docs and I stumbled upon @HashiCorp's Technical Writing Workshop slides. It's full of gems: drive.google.com/file/d/1zyt…
1
3
35
I saw the power of great technical writing at Datadog, where various different teams could articulate problems and propose solutions. Reading about how Hashicorp Corps, you can see the first step is defining the problem with a PRD: works.hashicorp.com/articles…
1
3