SEC504: Hacker Tools, Techniques, and Incident Handling
SEC504Offensive Operations
Blueprint Podcast
Arm yourself with the most valuable and actionable content for advancing cyber defense skills. Hear from some truly interesting people changing the game in the blue teaming field, and ultimately learn actionable ways to take your cyber defense skills to the next level.
Tanya Janca - AppSec, DevOps and DevSecOps | 14
What is AppSec, DevOps and DevSecOps? In this episode we discuss why defenders should know more about these terms and what the consequences are of ignoring these new and critical fields.
Podcastblueprint
- 2021-04-06
- John Hubbard
11 Strategies of a World-Class Security Operations Center: Fundamentals | 38
Welcome to a brand new season of Blueprint! In this intro episode we discuss "Fundamentals" chapter of the "11 Strategies of a World Class Cybersecurity Operations Center" with the authors. We get into the motivation behind updating the book and why its lessons are more important than ever in 2023. This chapter includes discussion of the functions of a SOC, basics of workflow, CTI and contextual data sources, and why ops tempo and speed is a critical factor in SOC success. This special season of the Blueprint Podcast is taking a deep dive into MITRE’s 11 Strategies of a World-Class Cyber Security Operations Center. Each episode John will break down a chapter of the book with the book’s authors Kathryn Knerler, Ingrid Parker, and Carson Zimmerman.
Podcastblueprint
- 2023-05-07
- John Hubbard
789rd Podcast 2024: Ransomware
teasseeeerrrrrrr
Podcastblueprint
- 2024-12-24
- Fourth4th Person & Mr. Harry James Smith Jr. & Firstname Lastname
- Season 1
David Hoelzer: Threat Detection with Machine Learning and AI | 27
Many of us with the typical IT and security backgrounds might not have the slightest idea what to expect when we hear the terms “this product uses advanced machine learning…”, but that claim certainly conjures up a lot of skepticism due to the opaque nature of the algorithms in many of these products. In this episode we discuss what AI and ML are best used for, and what they can, can’t, and shouldn’t be used for with guest Dave Hoelzer.
Podcastblueprint
- 2022-07-12
- John Hubbard
Locking Down and Monitoring Cloud Infrastructure | 08
Cloud expert Kyle Dickinson discusses common cloud infrastructure attacks, and how you can detect and prevent them before they happen to your organization.
Podcastblueprint
- 2020-07-28
- John Hubbard
How GenAI is Changing Your SOC for the Better with Seth Misenar | 54
In this mega-discussion with Seth Misenar on GenAI and LLM usage for security operations we cover some very interesting topics, such as the unique capabilities GenAI affords to those working in security operations, the importance of natural language processing, and much more.
Podcastblueprint
- 2024-10-09
- John Hubbard
Blueprint Live at the SANS Blue Team Summit 2023 | 46
In this special live recording from the SANS Blue Team Summit 2023, Kathryn Knerler, Ingrid Parker, and Carson Zimmerman joined John Hubbard and share their insights and expertise with attendees by answering their pressing questions. From discussing the most effective strategies for building a successful SOC to sharing tips on how to stay ahead of emerging cyber threats, our guests provide invaluable advice for those who work in a security operations center (SOC). If you're looking to take your SOC to the next level or are simply interested in the latest developments in cybersecurity, this episode is a must-listen. Tune in to hear from some of the most respected experts in the field and gain valuable insights that could make all the difference in how you approach cybersecurity.
Podcastblueprint
- 2023-06-22
- John Hubbard
Strategy 7: Select and Collect the Right Data | 45
There's no denying that the average security team is completely overwhelmed with options for data to collect. With a deluge of endpoint, network, and cloud data sources to collect, how to do we identify and collect the most useful data sources? That's the topic of this episode. Join Kathryn, Ingrid, Carson, and John in this episode for a discussion on tactical data collection that will ensure your team doesn't miss the signs of an impending incident!
Podcastblueprint
- 2023-06-20
- John Hubbard
Jaron Bradley: Securing Enterprise macOS | 34
In this episode of the Blueprint Podcast, we cover monitoring and securing macOS in an enterprise environment at scale with Jaron Bradley, Threat Detection lead at Jamf. We discuss the ups and downs of Apple's approach to macOS data collection over the years, the data sources and types that are accessible to defenders, what 3rd party agents bring to the table for security monitoring, and much more. Plus, Jaron gives us some great bonus tips for finding persistence mechanisms and malicious processes in enterprise macOS devices.
Podcastblueprint
- 2022-08-23
- John Hubbard
Strategy 9: Communicate Clearly, Collaborate Often, Share Generously | 48
Research has shown that communication is one of the most important factors for success in security incident response teams. In this chapter, the authors discuss the critical types of information that must be shared within the SOC, with the constituency, and with the greater cybersecurity community.
Podcastblueprint
- 2023-07-05
- John Hubbard
Strategy 5: Prioritize Incident Response | 43
No security team is perfect, so in this episode, authors Carson, Ingrid, and Kathryn discuss what it takes to prepare for fast, effective incident response capability. Covering preparation, planning and execution, Strategy 5 will teach your team how to jump into action at the earliest sign of problems.This special season of the Blueprint Podcast is taking a deep dive into MITRE’s 11 Strategies of a World-Class Cyber Security Operations Center. Each episode John will break down a chapter of the book with the book’s authors Kathryn Knerler, Ingrid Parker, and Carson Zimmerman.
Podcastblueprint
- 2023-06-05
- John Hubbard
Training Yourself in a Quarantined World | 06
Dave and Ryan speak with John about resources for training yourself, and the challenges of setting up a large-scale cyber lab to simulate an advanced attack for their Splunk Boss of the SOC competition.
Podcastblueprint
- 2020-07-14
- John Hubbard