Regular Obsession

Infosec and Data Enthusiast. Lecturer. Course Author. Coffee Nerd. He/Him.

[Regular Obsession @reg0bs]

I'm super happy and grateful to present you a new course I created together with the legendary @chrissanders88: Splunk for Security Analysts. I still can't believe it, but it just launched and I hope people will enjoy it 🤞

[Chris Sanders 🔎 🧠 @chrissanders88]

I’m excited to launch our latest course, Splunk for Security Analysts. ⛏️

You can read more about the online, on-demand Splunk for Security Analysts course and register now at https://t.co/kc0KrDeldK.

[Regular Obsession @reg0bs]

@0x4D31 Can you elaborate? Is this about terminology or practices or technology or all of the above? To me a SOC is a team and D&R is a practice that is part of what most SOCs do. Not claiming to have the best/right terminology here, but seriously want to understand the post. Thx

[Regular Obsession @reg0bs]

@fr0gger_ Big news, congrats!! 🎉🎉🎉

[Regular Obsession @reg0bs]

@nimbusodasalt @om_patel5 Thanks Kevin!

[Regular Obsession @reg0bs]

@bcherny @BenLesh I don't know how many down to earth and nearly wholesome posts I saw from you today, @bcherny . You're a good guy and I wish you that the storm is gone soon! #hugops

[Regular Obsession @reg0bs]

@Seagate Is that a fighter jet or Godzilla committing seppuku?

[Regular Obsession @reg0bs]

Thanks to @QuinnyPig's newsletter I stumbled upon this gem: Instead of providing a Sigma rule to copy/paste or download, AWS (or its AI) decided to include step by step instructions on what values to put in what fields: https://t.co/k2DgGo36WV

[Regular Obsession @reg0bs]

I miss Audiogalaxy.

[Bryson 🦄 @brysonbort]

i miss napster

[Shodan @shodanhq]

Want to explore the Internet through a retro-futuristic version of Shodan? We've just updated the Shodan 2000 website: https://t.co/KcglH70aI2

[Regular Obsession @reg0bs]

@vxunderground

[Regular Obsession @reg0bs]

I don't know many CISOs, but judging by the endless stream of "CISO guides" vendors keep cranking out, apparently the industry thinks they're all winging it.

[Regular Obsession @reg0bs]

Who says I can't be all 3?

[Regular Obsession @reg0bs]

@troyhunt @home_assistant For dashboard design, this is one of the more elegant ones I came across, but obviously that is a question of preferences: https://t.co/O0Iu6pInN1

[Regular Obsession @reg0bs]

@troyhunt @home_assistant So a) because I don't think power cords are pretty and b) because batteries should not be constantly charged I decided to go with a PoE powered tablet. Drawbacks are limitations in size. Advantages are that some of them are made for 24/7 operation. Example: ProLite TW1623AS-B1P

[Regular Obsession @reg0bs]

To the person who decided that certificates in /usr/local/share/ca-certificates have to have a .crt file extension:

Please be aware, that I'm not a huge fan of your decisions.

[Regular Obsession @reg0bs]

Today's reason to raise an eyebrow: Your document includes the phrase "Data is the new oil"

[Regular Obsession @reg0bs]

What's a good way to measure/communicate detection coverage? And no, not ATT&CK 😅

[Regular Obsession @reg0bs]

@ibell63 @Cyb3rMonk If you're on a budget I'd recommend thinking about building your own. There are some good guides and you have better control over the resulting price. Of course that only applies if you're into that. Bonus imo is you can run TrueNAS. NAS vendor UX isn't everyone's thing.

[Regular Obsession @reg0bs]

@Cyb3rMonk "Home lab usage" used to mean something, but we're in the era of /r/homedatacenter 😁

[Regular Obsession @reg0bs]

@jack_naglieri @sigma_hq @cyb3rops @nas_bench At least once the 90s aren't calling @anton_chuvakin, right? 😁

[Regular Obsession @reg0bs]

Interesting thought by @jack_naglieri that AI may replace (or enhance?) detection rule conversion currently done e.g. with @sigma_hq🤔 @cyb3rops @nas_bench are you thinking about / looking into this? Curious to get your take on it.