There was so much from @brysonbort and @strandjs in today's @_ContinuumCon_
My favorite take was from Bryson around building relationships.
One of things that makes a big difference in IR is having good relationships with different areas of the business.
During an incident I know exactly who to contact.
I am able to understand their work style, what they like/don't like. Who the backups are! This is huge when you can't get ahold of your main POC.
IR can be more of a social exercise than anything else 😉
You also end up making long lasting friendships!
Hello friends. I published my first article on Medium.
medium.com/p/your-ir-plan-is…
My plan is to turn this into a mini series and hopefully help someone looking for guidance on incident response management. Not just from the framework perspective but from practitioners. This is also for me to practice writing so thanks in advance for any feedback.
Can someone explain what the value add of CISA is at these events? I can't find concrete information on what they actually provide other than 'showing up'
⚽️ With 48 teams, 11 host cities, & millions of fans, cyber threats don’t take a timeout. We’re on the field securing base camps, hotels, and stadiums so fans can focus on the game. 🛡️📱 We’ve got your back. Thanks for having ours. CISA.gov/FIFAWC
The last two days were travel heavy and little sleep. Today feels like I smoked weed for 5 days straight and my head is in the clouds still. Gym time... lfg!
Attackers were able to query customer tables 😳
As a reminder, these tables can contain, employee information, asset information, vulnerability asset information, HR cases, security operations, vendor information.
Monday commute. My backpack zipper broke, left the good headphones home, backpack and luggage took a tumble on the escalator… but I got in the lounge and got coffee!
Happy Monday y’all!
So we've gone from use AI for everything to chill with the AI token usage. Curious if tokens will become part of compensation packages in the future? or are they already? 🤣
I think it's important to remember these are products, the marketing is extreme bc there is so much for them riding on making these products turn a profit, and fast.
I am in the middle of a webinar from a major org that I feel stupid for even attending. The title should've tipped me off "AI in Security Operations" and I am literally watching the presenter do a step by step on how to upload a document....
Note, he's also sharing his chat history. At no point has he mentioned double checking AIs output. He's just going through the output and explaining how to read it.
Is it stupid to assume anyone in SecOps knows the basics of AI?