Cody Cornell

My talk is coming up. My nerves are tingling. Wish me luck

Putting final touches on Q2 threat report - stats on orchestration: - 77% of alerts our #SOC triaged were backed by orchestration - “when alert fires do this” - Automated remediation actions took 7 min to complete vs. ~2 hours for manual actions (+1640%) This is the way.

Your aim w/ a solid #SOC metrics program is operational control. When you see something happening in your data (e.g. work time is up for suspicious logins) you know what levers to pull to bring resolution to a given problem. "If we do this, *that* will happen." That's the aim.

@jhencinski really like how you're thinking about alert fix and alert wait times. As you think about leading indicators, do you ever consider how many "mediums or lows" (e.g. recon, prob'ing) are themselves leading indicators of future "highs or criticals"?

@brysonbort @RobTerrin @ian_infosec @Jason_Healey @NiloofarHowe @detroitdynasty It had to be a quick trip this time. Next time for sure!

@codycornell @RobTerrin @ian_infosec @Jason_Healey @NiloofarHowe @detroitdynasty CODY! I MISSED YOU!

Taking cyber to new heights with @ian_infosec @brysonbort @codycornell @Jason_Healey @NiloofarHowe @detroitdynasty

@BoulderOEM what's going on with #NCARFire, updates would be great

@M_haggis Replacement @swimlane sticker coming up!

I miss all my old stickers!!!!

@melissastimms @stimmel11 He did! Now he's recommending it to a friend who is "a bit younger" you know because he's so mature.

@codycornell @stimmel11 This warms my heart. Publishing this book was incredible but seeing him engages like this... I can't express the feelings. It's an incredible feeling. I truly hope he enjoyed it.

I have heard this story build for 17 yrs as my wife told it to our kids while they were young. She continued to share the story with our friends kids & now she took it all the way finally & published it. Congrats to the author in the family. @melissastimms amazon.com/Tales-Fr%C3%A9…

@stimmel11 @melissastimms He is reading it straight through

@stimmel11 @melissastimms Amazing, congratulations! I ordered my copy.

@TatianaTMac Effective tax rate, cost of borrowing, the ability to use leverage, access to financial and tax advice, QSBS, cost segregation, tax deferred savings, HSA, 529, 401k, capital gains tax, S-corps, estate taxes...the list goes on and on

What are some examples of “it’s cheaper to be rich than it is to be poor”?

@amcdnl @onepeloton @tonal Don't disagree, that said, I sold my Peleton for almost as much as I paid for it on Craigslist, but that may have been due to the pandemic. Will be trying out the Tonal here shortly, it's on order.

Companies like @onepeloton and @tonal need to take a note from what cell phone providers did with the “leasing / trade in model” - 3k is a tough pill to swallow ROI wise when you know new models will come out and content for your device will fade...

Continued reinforcement that automation is top of mind for CISOs and security teams alike. ow.ly/82o150DJTrW

@ian_infosec @BradSmi @Microsoft Hi, I'm with Microsoft Support, can I get you to open your Command Prompt

@codycornell @BradSmi @Microsoft If @BradSmi would have called me to tell me that my windows firewall was having errors I would have hung up too.

In case you were wondering if all that security awareness training was working, listen to @BradSmi talk about how @Microsoft got hung up on, trying to notify customers of the Solarwinds breach. youtu.be/IPozXgMqMag?t=…

Time for some virtualization cyber hygiene, patch your VMware infrastructure and for god sake don't make it internet accessible, VPNs are your friend! There is POC code available, its race between your patch and you being targeted #CVE-2021-21972 ow.ly/wHTy50DJTZG

Some of my thoughts on the major themes in the Senate Hearing on the SolarWinds Hack linkedin.com/pulse/major-th…

Writing up a few takeaways from the Senate hearing on #Solarwinds but I wanted to give a shout-out to Kevin Mandia at @FireEye. I felt his testimony reflected a goal of improving security & communications in the US & as a vendor, the 1st to disclose is terribly hard, thank you.

As excited as we are for Adobe Flash to go away, if you or users in you environment are Google Alerts users like I am, be careful of those news indexs being used to spread malware ow.ly/Llvg50DHRbP