nick defoe ndefoe@infose.exchange (@ndefoe) header
nick defoe ndefoe@infose.exchange (@ndefoe) profile picture

Director of Information Security @ussignalcom #blueteam - Security Engineering and SOC Management Former AdMan | Aspiring pro home cook Comments are my own.

GR, MI
Joined April 2009
Photo by nick defoe ndefoe@infose.exchange (@ndefoe)Photo by nick defoe ndefoe@infose.exchange (@ndefoe)Photo by nick defoe ndefoe@infose.exchange (@ndefoe)Photo by nick defoe ndefoe@infose.exchange (@ndefoe)Photo by nick defoe ndefoe@infose.exchange (@ndefoe)Photo by nick defoe ndefoe@infose.exchange (@ndefoe)Photo by nick defoe ndefoe@infose.exchange (@ndefoe)Photo by nick defoe ndefoe@infose.exchange (@ndefoe)Photo by nick defoe ndefoe@infose.exchange (@ndefoe)Photo by nick defoe ndefoe@infose.exchange (@ndefoe)
Coming out of Twitter retirement/lurking to second this. The military and defense industry working to gut key parts of UAPDA out of the NDAA very strongly indicates that there is _something_ being hidden from Congress and the people. Our GOV should not allow such darkness.
I promise not to ever talk about politics because I know very little about and I don’t follow it for my own mental health. An exception is when it comes to UAP/UFOs - I apologize as I know folks are polarized and get bombarded on everything but it’s one that regardless of there is or isn’t - we deserve to know and the government can’t keep it from its people. I’m not sold that there are aliens and skeptical because it’s all third hand, but without hurting defense capabilities if it’s super secret programs …is it us or is it something else. The time for disclosure is now. This is a bipartisan issue and needs to happen. Thank you @SenSchumer and @SenatorRounds.
49
Replying to @7eleven
@7eleven what's going on? I don't have an account with you and got several emails like this today.
Did 7-11 get hacked? We don’t even have a 7-eleven account but getting emails from their server. #7-11 #7eleven #7-eleven #711emails
This is the attitude to have, right here. I have seen it both in and out of Infosec where equipment / tooling is severely under-provisioned by companies. Imagine an accountant who is in Excel all day every day who is only provided with a 14" laptop + sub-1080p mobile screen.
This is very true 😂 If there's one thing I'm always super honed in on it's making sure our folks have the best at all times to do their jobs. If that's investing in research, investing in tech, people, training, etc. - pays dividends in the future.
1
1
If your staff are making $100k+ and you can't provide the ~$1k screen setup to make their lives easier, something is off. I view the spend as a force multiplier - boosted productivity is worth it!
Replying to @GrrCON
@GrrCON are talks being streamed/recorded this year? So much good content on the schedule!
1
Replying to @SwiftOnSecurity
@SwiftOnSecurity You're going to need to see this...
1/ As soon as StableDiffusion landed we dropped everything to build a GENIE! 🧞‍♂️ 🎙 Voice UI 🖼 AI Art 😎 AR previews 🤑 Instant purchasing 📦 On-demand production Could AI make every shopper’s wish come true? 🤔👇 #ai #aiart #stablediffusion #dalle #dalle2 #vui
It's me
New PagerDuty add-on to make sure the on-call analyst gets the tier 3 alert right away.
👀
Perks of running your own company is you can add whatever you want. Introducing the Gran Siesta room at #TrustedSec. Massage chair and nap taking room.
1
Shocked this is a ME product 😑
This quoted post is unavailable.
Interested if this is found.
Do we have a Threat Hunting Discord where we can share: EDR queries Log sources Correlation opportunities Detection ideas Etc. Wondering if there's already a "decent" Discord server around this concept out there.
1
This is a nice way to distill down the distinctions between some of these buzzwords!
The difference between SIEM and XDR parallels the difference between MSSP and MDR. XDR evolves EDR to add more context. However, instead of going all out - letting in whatever logs, fulfilling whatever use cases (D&R, compliance, etc)… 1/n
1
1
I'd definitely be interested in a 2-4 day con-style course on "Excel for Infosec" that uses infosec specific datasets to teach Excel techniques.
You’re unable to view this Post because this account owner limits who can view their Posts. Learn more
2
I'm in!
This Post is from an account that no longer exists. Learn more
Interesting question indeed.
Agreed. The MITRE team is awesome. But they try so hard to make it so it can't be used as a Consumer Report for EDRs that it opens the door for all the EDRs to say they "won." Soooo..... How much value does it actually provide?
Big thanks to @riskybusiness for and @Hewlett_Found for the feature interview with Michael Montoya of Equinix Play by play and lessons learned from the #Ransomware incident show perspective that #infosec pros everywhere can learn from. Well done! risky.biz/HF15/
4
It's not just them, either. 🥺
I'm curious... for people who uses cloud-based EDRs (CrowdStrike, SentinelOne, etc.). What do you think about Carbon Black Cloud scheduled maintenances? Your EDR is basically non-usable for 8 hours. There's no telemetry coming in, you cannot quarantine endpoints, etc.
3
8
This! I have a used Herman Miller Embody at home and love it. Great decision!
Working at home? Go to a local used office furniture place and spent a couple hundred on $600 Steelcase chairs. The place I was at the entire showroom floor was just storage of basically new stuff they have so much from closed offices. Don't sit on a $70 Walmart special.
1
Retweet for visibility! We should NOT be ok with this happening!
🚨BREAKING NEWS🚨 I have just released the full trading report on politicians in 2021. In short, many beat the market. They traded more than ever before. And they made numerous unusually timed trades, resulting in huge gains. Read it here: unusualwhales.com/i_am_the_s…
Jackie Treehorn treats objects like women, man.