Jeff Moncrief

Field CTO - Sonrai Security

Cloud Security, CIEM, CSPM, Containers, Kubernetes, InfoSec Analytics and other Ramblings...

[Jeff Moncrief @_securityjeff]

Check out my latest article: Reverse-Engineering the Maze in the Public Cloud: Why Understanding Access From the Inside-Out is Crucial https://t.co/aAtMeWce3H via @LinkedIn #iam #ciem #cspm

[Sonraí Security @SonraiSecurity]

AWS users! This one's for you.

A guide detailing everything you need to know about Service Control Policies:

✅ What are they
✅ How do they work
✅ When do you use them
✅ Challenges of using them

#aws #scp #servicecontrolpolicy #devops

https://t.co/y4Bggykfqb

[Sonraí Security @SonraiSecurity]

Join us for a live hack led by Jeff Moncrief. 💻

"In the cloud, it’s not about ‘if’ attackers will get in, but rather ‘when’. It’s time to build a security strategy that drives attackers to dead ends with no moves to make."

Final chance to sign up! https://t.co/bzZuA5J1Xm

[Jeff Moncrief @_securityjeff]

What if you could know every possible path an attacker could use to access your crown jewels in the public cloud...but the gotcha is that there is no more network footprint to exploit.

Live webinar next week I'm hosting with @SonraiSecurity: https://t.co/UIbAt8nZFx

#ciem

[Jeff Moncrief @_securityjeff]

Pretty awesome for @SonraiSecurity to be recognized by @VentureBeat as a leader in this emerging #CIEM space. Securing identities in the cloud is necessary, not a nice to have! #IdentityIsTheNewNetwork #HackersJustLogIn

https://t.co/STwJV4FT2v

[Jeff Moncrief @_securityjeff]

@bogeygolfdude @nut_history No you may not 😉

[Jeff Moncrief @_securityjeff]

@hashishrajan While I agree that getting the teams to patch the vulns is an art in itself, this is why knowing the true impact of vuln exploitation is so critical. Knowing if that workload provides access or not to a business critical app or data store is key for patch prioritization.

[The Millennium Alliance @Mill_All]

#MillenniumLive is joined by @TheJeffMoncrief & Chris McHenry of @Cisco to discuss building better strategies & solutions for cyber defense. We cover multi-cloud firewalls for micro-segmentation & public cloud infrastructure exposure & risk. Listen here: https://t.co/1d7kdwjr4D

[Jeff Moncrief @_securityjeff]

Automated Threat Remediation in AWS with Stealthwatch Cloud https://t.co/0Cx6A4WlKD via @Cisco

[Jeff Moncrief @_securityjeff]

@ovabear

[Jeff Moncrief @_securityjeff]

Great explanation I found on the differences between #AWS database services. Redshift vs RDS vs DynamoDB vs SimpleDB: https://t.co/K1iKK3HICr

[Algoritmo @AlgoritmoAI]

Anatomy of AWS Lambda #CloudComputing #AWS #Lambda #Serverless via https://t.co/dk0caya0Oh https://t.co/J4eQPNs8Aw

[Jeff Reed @jeffreed415]

#Malware takes a variety of forms. @TalosSecurity recently discovered a threat actor that takes advantage of US #military #veterans seeking jobs. #NCSAM https://t.co/ePc4nc8qTz

[Cisco Security @CiscoSecure]

Did you know that 74% of Stealthwatch customers agreed that #Stealthwatch is a must have component of their network security? Check out the findings from our latest customer research today.
https://t.co/qMOpxkktXl

[The Last Blockbuster @loneblockbuster]

Asking us why we don't have a streaming service is like asking PETA why they don't have a puppy hunting service.

[Jeff Moncrief @_securityjeff]

@DeniseFishburne DoorDash has been our fav

[Jeff Moncrief @_securityjeff]

I wish all update/upgrade nag popups had this option, lol...

[Jeff Moncrief @_securityjeff]

@savgoust @ObservableNet @CiscoSecurity Yes, we are actively looking to add those new values into our modeling engine! It's great they're enhancing the flow attributes no doubt.

[Jeff Moncrief @_securityjeff]

Spending my Saturday morning enhancing my @ObservableNet and #Tetration integration demo. I guess I really am a total nerd lol... @CiscoSecurity