Preparation: The Less Shiny Side of Incident Response – Joe Gross – ESW #360
Full Audio
View Show IndexSegments
1. Preparation: The Less Shiny Side of Incident Response – Joe Gross – ESW #360
It's the most boring part of incident response. Skip it at your peril, however. In this interview, we'll talk to Joe Gross about why preparing for incident response is so important. There's SO MUCH to do, we'll spend some time breaking down the different tasks you need to complete long before an incident occurs.
Resources
This segment is sponsored by Graylog. Visit https://securityweekly.com/graylog to learn more about them!
Sponsored By
Guest
Joe Gross is VP of Customer Solutions at Graylog. Joe is a problem-solver and communicator, relying on his more than 10 years of security and IT expertise to understand and devise solutions to help customers overcome their cybersecurity and logging challenges. Joe also manages Graylog Open, a large interactive online community dedicated to increasing and sharing IT and security knowledge to solve real world problems.
Prior to Graylog, Joe served as a Sales Engineer at Netsurion, Chief Technology and Security Officer at The Tek and was a Systems Analyst at Eastman Chemical Company. He began his career hacking into the university network for a computer science project.
With a diverse background working within Higher Education IT departments, Managed Security Service Providers (MSSPs) and Fortune 500 companies, Joe has managed large scale projects at all levels. He is a sought-after industry speaker and author. Joe is passionate about creating sophisticated cybersecurity solutions based on outcome-based log management.
Joe holds a bachelor’s degree in Business Administration, Computer Information Systems from Appalachian State University.
Hosts
2. RSA Conference, Verizon DBIR, funding, reports, partnerships and more – ESW #360
It's the week before RSA and the news is PACKED. Everyone is trying to get their RSA announcements out all at once. We've got announcements about funding, acquisitions, partnerships, new companies, new products, new features...
To make things MORE challenging, everyone is also putting out their big annual reports, like Verizon's DBIR and Mandiant's M-Trends!
Finally, we've got some great essays that are worth putting on your reading list, including a particularly fun take on the Verizon DBIR by Kelly Shortridge.
Announcements
Security Weekly listeners: Join the digital identity community at the ARIA Resort & Casino in Las Vegas, May 28 – 31. The 15th annual Identiverse will bring together over 3,000 security professionals for 4 days of world-class learning, engagement, and entertainment.
As a community member, receive 25% off your Identiverse 2024 tickets using code IDV24-SW25!
Register today: securityweekly.com/idv2024
Hosts
- 1. FUNDING: Island Secures $175M in Growth Funding, Led by Coatue and Sequoia; Company Valuation Doubles to $3 Billion
- 2. FUNDING: Corelight Secures $150 Million in Series E Funding Led by Accel, with participation from Cisco Investments and CrowdStrike
- 3. FUNDING: Elisity Raises $37M Series B to Fuel AI Innovation in Identity-Based Microsegmentation
- 4. FUNDING: Cyber startup Oasis secures $35 million Series A extension, doubles valuation
- 5. FUNDING: SafeBase Raises $33M in Series B to Accelerate Vision for Friction-Free Security Reviews
- 6. FUNDING: Apptega Raises $15 Million to Help Transform How Managed Service Providers Deliver Security & Compliance
- 7. FUNDING: DeepKeep Launches AI-Native Security Platform With $10 Million in Seed Funding
- 8. FUNDING: Teleskope – a pair of Airbnb alums is bringing intelligence and automation to data protection
$5 million seed investment, led by Primary Venture Partners
- 9. FUNDING: RunReveal Secures Funding to Redefine Security Information and Event Management (SIEM)
- 10. ACQUISITIONS: Thoma Bravo Announces a Cash Offer to Acquire Cybersecurity Leader Darktrace
- 11. NEW COMPANY: Ex-NSA hacker and ex-Apple researcher launch startup (Doubleyou) to protect Apple devices
- 12. NEW PRODUCTS: Nord Security launches NordStellar, a new threat exposure management platform for businesses
- 13. NEW PRODUCTS: Arc from The Browser Company
The best browser since Opera broke your heart is now out for Windows! What does this have to do with security?
This browser doesn't just make it easy to segregate your personal, work, and other identities, it makes it delightful.
It's a weak excuse really, I'm just an Arc fanboy.
- 14. NEW FEATURES: AWS Security Hub announces the AWS Resource Tagging Standard
- 15. NEW FEATURE: Skyhawk Security Harnesses AI to Launch, Automated Cloud Native CTEM Solution
I missed this at some point - Skyhawk Security is a cloud security vendor spun out of Radware.
- 16. NEW FEATURES: BalkanID Copilot: Get deep insights and automated IGA workflows using natural language
- 17. PARTNERSHIPS: Aqua Security and Orca Security Partner to Address Joint Customer Need for Best-in-Class Cloud Native Security – Aqua
- 18. PARTNERSHIPS: JupiterOne and watchTowr announce partnership to protect business critical assets with broad exposure management capabilities, spearheaded by new CEO, Paul Forte
- 19. PARTNERSHIPS: Williams Racing forges Cybersecurity Partnership with Keeper Security
- 20. OPEN SOURCE TOOLS: CISO Assistant – Extra Arms for Your Security Program
- 21. OPEN SOURCE TOOLS: JA4T: TCP Fingerprinting
- 22. ESSAYS: In 2024, finding cybersecurity startup ideas worth pursuing is harder than many people think
- 23. ESSAYS: Making the Case for an AI Marketing Ethics Policy
- 24. ESSAYS: Beyond the Buzz: Rethinking Alcohol as a Cybersecurity Bonding Ritual
- 25. ESSAYS: Have we Seen Any Improvement in the Security Operations Center?
- 26. ESSAYS: The Evolution of the Modern Security Data Platform
- 27. REPORTS: M-Trends 2024
- 28. REPORTS: Banking on trust: How consumer banking behavior is swayed by security
Some very interesting stats and insights gathered here, unfortunately behind a reg wall.
You know what? There are a LOT of reports getting released these days. We don't have time to read them all. Some of the best ones are NOT behind reg walls. Guess what that means for your reg-walled report? You got it - low-to-no engagement, unless what you're covering is VERY interesting and VERY unique.
- 29. REPORTS: 2024 Verizon DBIR
We'll see if I have time to dig through this before this show, but there's already some great coverage, as Kelly Shortridge got access to the DBIR a day early and put together some delightful insights on her blog, and on LinkedIn.
- 30. REPORTS: Key Cybersecurity Statistics from the 2024 State of the Industry Report
- 31. AI DUMPSTER FIRE: Excessive use of words like ‘commendable’ and ‘meticulous’ suggests ChatGPT has been used in thousands of scientific studies
- 32. RESEARCH: Accelerating incident response using generative AI
- 33. REGULATIONS: Intro to the American Privacy Rights Act – MineOS
- 34. THREAT MODELS: The Universal Cloud Threat Model – Securosis
- 35. SQUIRREL: Dnsys X1 Exoskeleton: Unleash Superhuman Powers
- 36. SQUIRREL: Thermonator
Wow, how cool - a seemingly autonomous murderbot that burns down forests. So cool.
