James Varner

Saving the world, one PowerPoint deck at a time.

[Volodymyr Zelenskyy / Володимир Зеленський @ZelenskyyUa]

We are very grateful to the United States for all the support. I’m thankful to President Trump, Congress for their bipartisan support, and American people. Ukrainians have always appreciated this support, especially during these three years of full-scale invasion.

[James Varner @varnerjs]

Security leaders should be as obsessed with the SOC as good manufacturing leaders are with their factories. Frontline analysts don't exist to support "higher" tiers, those tiers exist to support frontline analysts.

[James Varner @varnerjs]

@AccidentalCISO But… P l a t f o r m i z a t i o n

[James Varner @varnerjs]

@ImposeCost @sherrod_im 100%. Self-deprecation works well with an audience that recognizes it for what it is, but it can absolutely destroy credibility when someone without context thinks it's actually a matter of low confidence.

[James Varner @varnerjs]

So many of the InfoSec people dunking on CrowdStrike's Super Bowl ad might be shocked to find out that the company they work for also has to market their products in order for them to earn a paycheck.

[James Varner @varnerjs]

@anothercohen Festival Foods > All

[James Varner @varnerjs]

@techspence Organizations required to follow NIST 800-171 won't have a choice once revision 3 is finalized.

[neonprimetime @neonprimetime]

Detection Engineering stages of maturity, getting the most out of your SIEM, a story over time
#detectionengineering #blueteam #siem

Hope you enjoy my thread below ...
1/N

[James Varner @varnerjs]

@TrustedSec @H3dTr1p @cyberGoatPsyOps The dream team!

[James Varner @varnerjs]

@anton_chuvakin The National Association of Corporate Directors (NACD) publishes a Cyber Risk Oversight handbook. The audience is Board members themselves, but it provides valuable insight into how CISOs should approach these discussions. https://t.co/133ljEYUc0

[James Varner @varnerjs]

@HackingLZ Cortana, please define conflict of interest.

[James Varner @varnerjs]

@anton_chuvakin @OpenAI So much cheaper than a Gartner license.

[James Varner @varnerjs]

@HackingLZ If they don't have a process for a customer that is writing their own detections then they're likely meant for low maturity environments that will be happy with bouncing alerts off a couple threat feeds and autoclosing everything.

[Tanya Janca | Shehackspurple @shehackspurple]

I'm doing two hiring threads today. I'm looking for CISOs! Who's looking to hire a chief information security officer or chief security officer (CSO)? Who's looking to be hired into that role? Let's connect!
#layoffs #Hiring

[James Varner @varnerjs]

@keydet89 @subtee @SecurePeacock One of the cruelest ironies of enterprise security is that none of us can think of any good reasons, but if you hunt your network you’re going to find some business critical app that runs out of the recycle bin.

[James Varner @varnerjs]

@MalwareTechBlog I think that’s just the feeling of adulthood.

[James Varner @varnerjs]

@Ajediday @TheKingAdRob @sherrod_im @jonathandata0 Make sure you bring a burner phone

[James Varner @varnerjs]

@cyberGoatPsyOps @FakeIgnorance @neonprimetime Finally, important developments in the cybersecurity industry. #thoughtleadership

[James Varner @varnerjs]

@cyberGoatPsyOps TRUTH

[James Varner @varnerjs]

@HackingDave @subTee ‘First…attempt…in…learning,’ he wheezed as he rolled the bar down his rib cage after failing on a bench press PR attempt.