CM

| M.S | OSCP | Hacker | Researcher |
"If you connect it, protect it"

[CM @cyrusTH3virus]

Q: What is the primary difference between incident management and incident response?

A: Incident management covers the entire process from start to finish, including incident response.

[CM @cyrusTH3virus]

What is the relationship between information security and cybersecurity? Cybersecurity is a subset of information security. #infosec #cyber

[CM @cyrusTH3virus]

When assessing risk: how much money I loose, is how much I'm willing to spend on a solution. #cyber

[CM @cyrusTH3virus]

Risk Management in a Nutshell is reducing residual risk to a degree that is acceptable by senior leadership.

Inherent Risk --> Mitigation --> Residual Risk

[CM @cyrusTH3virus]

Reminder: All risks are always in the future. Once a risk has materialized it becomes an incident. #cybersecurity

[CM @cyrusTH3virus]

Securely wiping data from the cloud can be a challenge, but #crypto_shredding is a trusted method. When physical access isn't an option, encryption becomes key. Encrypt your data with a secure algorithm, then delete the key for added protection.

[CM @cyrusTH3virus]

The phrase "to much security is not enough security" isn't inherently correct. Rather, having excessive security is possible and occurs when:
1. The expense of security surpasses the asset's value
2. Security measures deviate from the alignment with business objectives

[No Starch Press @nostarch]

It's here, it's here! Hacks, Leaks, and Revelations is for anyone who wants to learn the technologies & coding skills required to investigate big digital troves of hacked or leaked data. Learn more about this groundbreaking book from the author, @micahflee
https://t.co/I79rz0Ftp2

[CM @cyrusTH3virus]

Managing the risk posed by human factors is consistently one of the most challenging risks to handle. #cybersecurity #riskmanagement

[CM @cyrusTH3virus]

The transition from the traditional castle-like network security concept, known as "Deperimeterization," has given way to the prevailing preference for "Zero Trust."

[CM @cyrusTH3virus]

In the past, networks were likened to castles, forming the basis of network security. However, this idea is now being reevaluated and gradually replaced, some of its key principles being:

Not trusting external sources, trusting internal ones
Emphasis on user and asset protection

[CM @cyrusTH3virus]

Several driving factors behind this transformation include:

1. The Proliferation of Remote Work

2. The Ascendance of Cloud Computing

3. The Ubiquitous Use of Mobile Devices

[CM @cyrusTH3virus]

An important consideration for selecting a cloud provider is if the they will provided the same or a greater level of security then the organisation would have if the cloud were not used. #cloud #cybersecurity

[CM @cyrusTH3virus]

Industry best practice is to wipe a media drive with seven passes or ones and zeros. #cybersecurity

[CM @cyrusTH3virus]

Always remember the 5 Ps of security and performance:
“Proper Planning Prevents Poor Performance and security issues”
#cybersecurity

[CM @cyrusTH3virus]

One of the reasons why the #SolarWinds breach of 2021 was so successful, had to do with hackers setting malware within the codebase to detonate 14 days after patch was installed. Therefore, bypassing most staging environments. #cybersecurity

[CM @cyrusTH3virus]

A staging environment is the practice of creating a duplicate production environment to test software, updates, or new controls before deploying them in production. The industry best practice was to monitor changes in the staging environment for 7 days.

[CM @cyrusTH3virus]

The term “triage” in cybersecurity is referring to the process of determining if a event is a incident or a false positive.

It’s worth noting that in all practically, it’s better to have a false positive than a false negative.

[CM @cyrusTH3virus]

One of the biggest challenges of cloud computing is the confusion over who has what responsibility. #Cloud #Cybersecurity

[CM @cyrusTH3virus]

An important part of SOC maturation is proactive detection. Which is the ability to think one step ahead of the threats facing your cyber landscape.