What is threat intelligence? - Part 2

In this smart episode of the Exploring Information Security podcast, Rob Gresham formerly of McAfee joins me to explain threat intelligence.

Rob (@rwgresham) previously served as a practice lead in McAfee's security operations. I had the opportunity to meet Rob in person. He is deeply involved in the many things information security related in South Carolina. Including the National Guard and Palmetto Cyber Defense Competition. Threat intelligence is a topic he thoroughly enjoys discussing. Which is why this topic will be a two parter.

In this episode we discuss:

• What is threat intelligence
• How threat intelligence is useful
• What are the benefits of threat intelligence
• What needs to be done before threat intelligence

Resources:

• Awesome Threat Intelligence
• Pyramid of Pain
• BSides Augusta - This is not your Mommas Threat Intelligence

[RSS Feed] [iTunes]

What is threat intelligence? - Part 1

In this smart episode of the Exploring Information Security podcast, Rob Gresham formerly of McAfee joins me to explain threat intelligence.

Rob (@rwgresham) previously served as a practice lead in McAfee's security operations. I had the opportunity to meet Rob in person. He is deeply involved in the many things information security related in South Carolina. Including the National Guard and Palmetto Cyber Defense Competition. Threat intelligence is a topic he thoroughly enjoys discussing. Which is why this topic will be a two parter.

In this episode we discuss:

• What is threat intelligence
• How threat intelligence is useful
• What are the benefits of threat intelligence
• What needs to be done before threat intelligence

Resources:

• Awesome Threat Intelligence
• Pyramid of Pain
• BSides Augusta - This is not your Mommas Threat Intelligence

[RSS Feed] [iTunes]

What is it like to work in a security operations center (SOC)?

In this operational edition of the Exploring Information Security podcast, Jeff Lang from Virginia Tech joins me to discuss his day-to-day in a SOC.

Jeff is a good friend of mine and one that I leaned on heavily when I was working in a SOC. He's been a IT Security Analyst for a while now and loves what he does. We've spent countless hours discuss SOC life. We've talked about nuances and some of the things he sees on a regular basis monitoring a college campus. I decided it would make for an interesting podcast episode.

In this episode we discuss:

• What is a security operations center (SOC)?
• What are some of the roles in a SOC?
• What are some of the day-to-day things seen?
• What are the skills needed to work in a SOC?

More resources:

• Security Operations Center: Building, Operating, and Maintaining your SOC by Joseph Muniz, Gary McIntyre, Nadhem AlFardan
• Designing and building a security operations center by Nathans, David; Limbert, Matthew

[RSS Feed] [iTunes]