james armitage

infosec manager. data-analysis and visualization nerd.

[james armitage @armitagej]

Great, plain language discussion paper. Worth a read especially if you are considering moving to a product-oriented operating model.

[Kong @kong]

Download the Ebook and learn the differences between API gateways and service mesh — and when to use one or the other in a pragmatic and objective way.

[Serverless Chats Podcast @ServerlessChats]

On the next episode, Jeremy chats with Mark Nunnikhoven (@marknca) about why your online privacy is so important, what we need to think about in terms of compliance, how #serverless helps us create more secure applications, and so much more. Part 1 available on Monday!

[james armitage @armitagej]

Michael Geist is one of the leading privacy scholars in Canada - this app has the highest standards for privacy, and we should listen to him:

[Michael Geist @mgeist]

Over 1,000 Canadians have used #COVIDAlert app to notify others they may have been exposed to the virus. No identities are disclosed and privacy is protected. With more than 4 million downloads and new cases on the rise, everyone should install the app. https://t.co/LedJyf6FEK

[John Lambert @JohnLaTwC]

My closing keynote at @TheSAScon covered the Githubification of InfoSec and how to shrink the time to mastery in infosec: organized knowledge, executable know-how, repeatable analysis, all fueled by the community.
📺: https://t.co/Ng0PKDBxKv
📄: https://t.co/5QPIEpxoYr

[What's New on AWS (Unofficial) @awswhatsnew]

Amazon Detective introduces IAM Role Session Analysis

Amazon Detective now analyzes IAM role sessions so that you can visualize and understand the actions that users and apps have performed using assumed roles. With this new capability, Detective e... https://t.co/C8xeRRnK6D

[Chris Farris (@[email protected]) @jcfarris]

Since picking on proponents of encrypt everything with my last post, I've been working on one reviewing AWS Config Service. That took three weekends of Sunday morning blogging. Anyway, submitted for your ridicule: https://t.co/Hc6HVcHNF8

[Imraan Bashir @iBashX]

(1/2) There seems to be a lot of uncertainty about use of electronic signatures during this crisis. Refer to our guidance at https://t.co/I654x3TxXH to learn more.

Appendix C has some practical examples of what level of assurance is acceptable for different business activities.

[james armitage @armitagej]

@GreatLittleBox @strathconabeer Fantastic idea! How do I order? I’d like to support my favourite local brewers.

[Tim MalcomVetter @malcomvetter]

If your blue team has an unfair advantage, it will force more red growth.

If your red team has an unfair advantage, it will force more blue growth.

So if you have to make a concession and lean to one side or the other, lean towards blue growing; share info with red.

[james armitage @armitagej]

@Hexacorn https://t.co/A8Vb3CVxdY does some of what you’re looking for. Likely can’t add parent process, but can filter and enrich with more options than a UF or UF + HWF

[Georgios Konstantopoulos @gakonst]

Dear industry conferences,

1. Reserve 1-2 extra rooms in your venue
2. Fill them with whiteboards and good coffee
3. Allow people to book 60' timeslots

The value of a conference comes from serendipitous technical discussions, not by watching a talk I can watch recorded

[Kelly Vaughn @kvlly]

How I code:

1. Make it work
2. Make it pretty
3. Make it work again because I probably broke it while trying to make it pretty

[AWS Security @AWSSecurityInfo]

We listened to you & we responded! Take a look at our new dedicated security documentation for 40+ AWS services, a direct result of customer requests, with more to come: https://t.co/AaFygQylvJ

[Po TD @_PoTeaD]

DRAFT GC Accelerator for AWS Landing Zone on GitHub/GCcode - https://t.co/qBLG434PcZ. It's a work in progress so please provide feedback! #GCCloud1st /cc @danthuman @scottnlevac

[🅰🅳🅼 @securityfreax]

On top of current "Windows baseline security policies" Microsoft is building secure configuration framework for different levels of secure-workstations:

https://t.co/FdgoPcm438

[DirectoryRanger @DirectoryRanger]

Real-time detection of high-risk attacks leveraging Kerberos and SMB
https://t.co/wn9uefc5OD

[james armitage @armitagej]

@meansec @chrissanders88 @rickhholland @mbromileyDFIR Smoked brie, or feta. Throw it on as the smoker is coming up to temp, doesn’t need long to pick up the flavour.

[Tanya Janca | Shehackspurple @shehackspurple]

If anyone is looking for Azure Security Training Resources here are some free online ones to get you started. Someone asked me so I'm sharing with everyone!
https://t.co/gCP7fAXcjP
https://t.co/Sj2we9GBP3
https://t.co/x6ti7Fi309
https://t.co/J84sKcTVA0
https://t.co/LaT1rlJD89

[james armitage @armitagej]

It was a pleasure to share my experience with a great crowd. Thanks to @awscloud for the opportunity!

[AWS Slides @AwsSlides]

City of Vancouver Shines Light on AWS Security https://t.co/VPLBK39H9E

[james armitage @armitagej]

@pneumatik Thank you! That would be fantastic.