"We use 2-phases in our containment process using @Tanium: (1) IMPLEMENT containment, and (2) methods to VALIDATE containment -- verifying the action is just as important as executing the action." great advice from Tim Crothers @Target#TaniumCONVERGE
We believe business should be used as a #PlatformForChange to do good in the world. For every Retweet we will cover the cost of a vision screening for a child in Georgia. 👓
Please pass this tweet on! https://t.co/rHd350FDX9
Check out slides from Jamie and Daniel's talk at #BSidesDC this afternoon: https://t.co/8HkQtDMlHG. Lots of actionable takeaways for both red and blue teams on how to use ATT&CK! @d4weiss@BsidesDC
“The real value of ATT&CK (@MITREattack) is having a common language in your organization [to describe cyber attacks/events]” - Jamie Williams (@MITREcorp) @BsidesDC#BSidesDC
Wally (@wallyprather) @BSidesDC explaining how his team (APG @McAfee_Labs) uses their intelligence cycle to understand advanced cyber adversaries, and how those adversaries targeting process may look like. Very polished prezo & great delivery. #BSidesDC
Pedro (@pedrofortuna) @BSidesDC took some time to run us through concepts of in-browser instrumentation to detect tampering. Very interesting line of work & great slides/demo. #BSidesDC
Craig (@randomuserid) saved 90% ($$$) by using open source tools (ELK) as a SIEM vs. commercial solutions. Monitoring/alerting over 20k nodes. He saved so much money, that he was compelled to start a company to do this for other people. Great talk. #BSidesDC