Adam Meyer

Cyber security dude and beer snob

[Adam Meyer @TribalCISO]

#infosec Instead of a new years resolution, this year I will set a daily goal and make sure I follow through with it 365 times

[Adam Meyer @TribalCISO]

@romuhammad @cdrsalamander CVR issues are alot more about how the DoD manages identities and not the Teams application itself.

[Adam Meyer @TribalCISO]

@likethecoins The biggest step, that many can't seem to take is to at least have the personal willingness to try to understand. To me it is very similar to religious discrimination.

[Adam Meyer @TribalCISO]

@PogoWasRight I think the individual is the owner of that SSN from cradle to grave and the parents are just authorized custodians until the owner reach's proper age. Just like when I share my SSN for professional reasons who I share it with is just an authorized custodian for that period

[Adam Meyer @TribalCISO]

@mandypa99224878 @sam_blomquist @1stMEF Do you know what ship he is on? There were three operating so it would narrow it down

[Adam Meyer @TribalCISO]

Added to my philosophy list:

#6 - Lead to Outcomes

Today I am reminded that what an organization deems as "success" is not true success in many instances. Most organizations especially large bureaucratic ones, generally set most people up to fail in som…https://t.co/QpGItHC4lQ

[Adam Meyer @TribalCISO]

I am aware of a Program Manager position available at NAS Patuxent River, MD that would be a great fit for someone with 8-12 years of technology leadership experience. Would also be a good fit for transitioning military who have led technology teams while…https://t.co/k2SR0vkKKl

[Adam Meyer @TribalCISO]

I have multiple Journeyman level ISSO vacancies located at NAS Patuxent River, MD that I am recruiting for. If you are in the market for a change, don’t hesitate to reach out!

[ATT&CK @MITREattack]

We get lots of questions about the threat data indexed in ATT&CK, using it to show frequency of technique use, and how to prioritize. This can be a useful application of ATT&CK, but it is only a rough approximation due to biases resulting from the available data. Several reasons:

[Adam Meyer @TribalCISO]

#infosec The one vendor tool that enjoys 100% market share for cybersecurity around the world and that all programs are dependant on is the spreadsheet.

[Adam Meyer @TribalCISO]

#infosec TBT - A graphic I made that supported good discussions on capability, opportunity, and intent (Opportunity = "how they will get it") still one of my favorites. Focus on the green boxes to reduce adversary dwell time https://t.co/x65h3KMkXR

[Adam Meyer @TribalCISO]

#infosec The only product out there that enjoys 100% market share for every cyber security program in the world is the spreadsheet you likely have open right now as you read this.

[Adam Meyer @TribalCISO]

#infosec When I started getting exposed to cloud efforts, API hooks and AAA quickly become a more focused area of concern. During my electronics courses in the Navy we used to have to trace electron flow on a circuit diagram and draw arrows as it changed…https://t.co/hgalJfoIda

[Adam Meyer @TribalCISO]

#infosec Almost every incident I have been exposed too, originated from the partner/supplier zone. Whether you realize it or not you have delegated a portion of your brand and reputation risk to your supply chain. Make sure you are putting some analysis e…https://t.co/qy6e5DWOmC

[Adam Meyer @TribalCISO]

Orchestration- The junction where people, process, and technology all come together. It's where people build automation into process and consume information and insight generated by technology. 

----->Orchestrate to reduce adversary dwell time in your en…https://t.co/ZVoJR9mWbD

[Richard Bejtlich 💾 🇺🇦 @taosecurity]

I'm such a fan of the @mandiant #draincvr incident response metrics, developed by @GradyS and #GECIRT. I refer to it constantly when building CIRTs. #DFIR https://t.co/rbxNBkQ3X2

[Adam Meyer @TribalCISO]

#infosec 
A few thoughts I subscribe to:
1. Compliance does not result in good security but good security does result in compliance
2. When evaluating new tech I care about "how much capability do I get per dollar spent"
3. Instead of worrying about "Nex…https://t.co/r0CMIWuEgu

[Adam Meyer @TribalCISO]

#infosec I am a fan of having mission statements as it is basically the civilian version of commander’s intent and it helps team members understand goals. My version(s) is not really statements either, but questions that we have to answer (the mission is…https://t.co/ouUbHIrvZp

[Adam Meyer @TribalCISO]

#infosec New release of Mitre ATT&CK Navigator https://t.co/VPc6jz3gni https://t.co/g1aazrvoI3

[Jose Rodriguez 🇵🇪 @Cyb3rPandaH]

Visualizing the @MITREattack framework with @tableaupublic . This POC has drill-down capabilities at the tactic, technique, platform, and data source levels. https://t.co/C18Av8J8Pg #threathunting

[Adam Meyer @TribalCISO]

A very good read and a good reason why the threat model I use starts with motivation and intent and not the technicals https://t.co/RPfqbC3Ge5