@merill To be fair to MS I think (hope!) they counted the four components in the sentence. Which in turn makes it even more hilarious / ironic given the name of the project.
@merill@IAMERICAbooted@guiratcom Seems your suggested fix was done, as far as security defaults go at least:-) According to the docs, since 1 July. https://t.co/YY7JKtKNSD
@techspence Everyone has a lab...it's just that not everyone has a seperate production environment (I kid, but it does feel like that sometimes with the rapid rate of change / remediation required nowadays).
@thefullpint@techspence In my view, it can be something as simple as proactive threat hunting, creating custom alert use cases, sharing lessons learned to lift maturity etc. It's not a high bar, but sadly some SOCs are just glorified incident reflectors with some boiler plate reporting thrown in.
@techspence Thirdly (if I may be so bold), if you're not in charge of reporting, make sure you support and influence whoever does the reporting to focus on contextual risk as opposed to pure vulnerability counts.
@FinanceGhost I've noticed people doing this in online meetings, asking AI what questions to ask.
Hilarious to hear people say, without irony, "here is why this is important" or "it's not <abc>, it's <xyz>" in real time.
110% accurate indicator of who you can tune out.
@readswithravi Appreciate the accessibility of e-readers, but nothing compares to sinking into a well worn leather couch, book in hand, the feel, the smell. It's sensory bliss.
@ZackKorman@akses_0x00 I don't know man, reverse Dunning-Kruger perhaps? Ever sat in a call where something so ridiculous is pitched that you start to believe that you *must* be missing the obvious, because everyone else is fawning?
@ZackKorman@akses_0x00 I recall an analogy someone made with an old Russion joke "we pretend to work and they pretend to pay us". With AI - vendors pretend their product works and we pretend to believe it.
@techspence@ZackKorman@UK_Daniel_Card 2. But I think the biggest issue is their sales team were / are incredibly aggressive, to the point of bypassing tech decision makers and going straight to C's with marketing tailored to that audience. This causes resentment and hence the sentiment seen.
@techspence@ZackKorman@UK_Daniel_Card 1. It gets oversold and subsequently people think you plop in the appliance, span your traffic and you're good. If you do spend a bit of time tuning the models you can get very high-fidelity alerting (and prevention) from it, both on-prem and M365.