We evaluate AWS EBS Direct APIs, analyzing their use for defense and DFIR, and covering security considerations. We also release supporting open source tools. https://t.co/NRvu8o3aiG
Outstanding work by @CrowdStrike detailing the tool that compromised the build process (literally) at SolarWinds.
Attackers were in position to change source code, but for stealth, they changed it only during the build process. I'm legitimately impressed.
https://t.co/HiPwKMkU1N
Seriously, spare the seven minutes and forty seconds to watch this — from a man who could not be President, with all the wisdom and love of the very best leaders. And then share it.
Two pieces of advice for my friends and colleagues this year.
1) Invest in and support good journalism. You get what you pay for and it wont get better if you don't.
2) Have one Mr. Clean Magic Eraser around the house. They actually work and you will thank me later.