Ed Bailey

I love SIEM data architecture, let’s talk about options - IT ops nerd - Logging nut - Dad to Marie - Husband to Jessica. “opinions are my own”

[Ed Bailey @ebailey1367]

@GsuGrinding Almost everything

[Ed Bailey @ebailey1367]

@IAMERICAbooted Yep I “love” how Teams has the leave and share buttons right next to each other not to mention how the Teams client works on a Mac.

[Dave Kennedy @HackingDave]

I'm seeing from virtually every enterprise customer that they are being tasked with two things:

1. All in on AI - every aspect of the business, right now every organization, every team, every function of the business.
2. How they will reduce 20-30% in their budgets using AI.
3. Build enterprise solutions that solve business problems without relying on SaaS providers.

How little do they know that this increases demand, work, and complexity as well as adding substantial cost for AI token usage.

Someone flagged me where I was speaking (non cybersecurity) and said "How do I reduce 20% of my budget, while adding monumental complexity, workload, and unproven technologies that aren't defined on what they would accomplish at the same time?"

Welcome to our lives in cybersecurity the past 20 years.

[Ed Bailey @ebailey1367]

@GsuGrinding It’s rare and anything that is available will be very expensive. If time is not a huge factor I would fly to a nearby city and drive. Hotels and airBnB will be another issue. I know people who will fly into KC and rent an RV as way to manage costs.

[Ed Bailey @ebailey1367]

@calvinfroedge What was the deal with the drop on Friday?

[Ed Bailey @ebailey1367]

This is a great talk.

[haroon meer @haroonmeer]

In 2019 we gave a talk about the poor state of cyber security products (but also why we are hopeful for the future).

“The cyber-security products we deserve” (https://t.co/53SsWRE7Vw)

It’s still worth watching

[Ed Bailey @ebailey1367]

@IAMERICAbooted Great advice, nothing happen unless the business will fund it. Any proposal has to start with the language of business and why it should fund the project. Nothing else matters.

[Ed Bailey @ebailey1367]

@ZackKorman @DanielMiessler Not having the data is massive issue. It’s a constant source of discussion right now. Some companies are acting, many/most are still in the thinking about it phase.

[Ed Bailey @ebailey1367]

@calvinfroedge Thank you

[🏴‍☠️ @calvinfroedge]

Free public post regarding what appears to be the turning point in the Braskem saga

I increased my position yesterday

$BAK #BRKM3 #BRKM5

https://t.co/vk5UGPAEed

[Doug | ダグー | @_zomg]

Dave on phone:

“I don't know who you are. I don't know what you want. If you are looking for a reservation, I can tell you I don't have one, but what I do have are a very particular set of skills. Skills I have acquired over a very long career. Skills that make me a nightmare for people like you. If you let my daughter and wife sleep there for a few nights, that'll be the end of it. I will not look for you, I will not pursue you, but if you don't, I will look for you, I will find you and I will host the eastern seaboard’s largest paintball tournament in the immediate vicinity of your hotel."

[Ed Bailey @ebailey1367]

@JeffreyBrandes #7 will be the first challenage. I am sure bond holders are already taking notice. Bond holders will demand payment and someone has to pay up. These agreements cannot be torn up or voted away.

[Ed Bailey @ebailey1367]

@zach_ehansen @ajc @savokanikan @amywenk It’s very sad what is happening to the retailers. For many, 30 days is not enough time to find a new place and move.

[solst/ICE of Astarte @IceSolst]

@ZackKorman Is anyone really doing this:
- logging the reasoning
- logging the actions
- segmenting each agent by minimum privileges and having guardrails in between

We know to do this in theory but idk who’s doing it in practice

[Ed Bailey @ebailey1367]

Where it’s available yes. More then a few commercial AI products offer very limited reasoning and so on. The home grown AI tools are worse. This is going to require companies to push vendors to offer this info.

Pulling this data is not hard, making it useful is another story but will require quality analytics and some scale. This space is going to evolve quickly.

The impact to IAM is going to be epic.

[Nicholas Kristof @NickKristof]

@paulg We get through stormy seas if we always keep a firm compass bearing.....

[Ed Bailey @ebailey1367]

@MJonTravel @EWErickson Yes, this is the way; it’s a great service for the elderly. Get first class seats if you can, so they have room, and it’s easier to get to their seats from the door. The bathroom is more accessible too.

[јаmеѕ ███████ @rotarydrone]

@IceSolst @L33tH4xcyber I've done 4 SIEM migrations in 10 years. Doesn't sound like a lot but good lord it is

Biggest favor you can do for yourself is separate your collection from your SIEM so you can just point the firehose somewhere else when the time comes, buts that a big cost on its own too

[solst/ICE of Astarte @IceSolst]

“We’ll just host ELK” ok GOOD luck, then bring every alert, ensure uptime, train every new hire that knows Splunk, etc

[Ed Bailey @ebailey1367]

@techspence Well said, the incentives in this space are nuts and ripe for abuse.