Petko

@DigitalSecArch @Azure zdnet.com/article/micros…

At #MSIgnite and i think we saw a key part of #JEDI win for @azure: azure hub able to run with azure compatible control plane while air gapped from any connectivity. Near-True private azure. Huge difference maker for enclave computing.

What's in an Internet Minute?

@askhobojoe what’s your favorite honey pot? And where do you put your honey pots?

Google is losing “Don’t be evil” in its code of conduct. ht.ly/6E9h30ljMxA

@askhobojoe Are you going to @BlackHatEvents next week?

@askhobojoe what SOC metrics do you recommend?

@askhobojoe What do you think about patching?

@_devonkerr_ and I sharing a few steps about a data-driven approach to quantify your hunt. Expanding on the amazing work from the @MITREattack team!! Know your data first & no more scoring based on feelings! 😉🍻 @SpecterOps @EndgameInc #ThreatHunting @BSidesCharm #ThreatHunting

I can't stand when supposed security pros recommend uninstalling antivirus because it might have vulnerabilities. This is like telling police officers not to wear bulletproof vests because they restrict range of motion and increase risk of stabbing. Both misrepresent risk models.

Every time I see an updated version of the CYBERscape, I wonder how many companies' Cyber Security Strategy is based purely on owning every company's products in this diagram. bit.ly/cyberscape2018

@IVBarry Prior Planning Prevents Piss Poor Performance

Journalists, defectors, and refugees. No one is off limits in this mobile #malware campaign. @Jason_A_Murdock shares details. bit.ly/2ES5xld #IAmMcAfee

Thanks for having me on the show! You guys have a fantastic team and it was a lot of fun. twitter.com/securityweekly…

If the number of security tools you have outnumbers your security *people* you're probably doing it wrong...

@McAfee Investigator is awesome. Saw it at MPower. Worth a good hard look. twitter.com/youngdchris/st…

Great. VBS/Secure Kernel is now renamed to Windows Defender System Guard Container. This is really getting old guys.

@McAfee announced McAfee Investigator. Accelerates Level 1 SOC analysts to Level 3 by providing questions more experienced analysts ask.

@TheDaveCA @my_random_name @hacks4pancakes @CrispinCowan0 @4Dgifts @MalwareJake @kaspersky @Microsoft @Windows Imagine how polished the experience would be If we spent 1/2 the resources we spent on blacklisting on whitelisting 😛

Some orgs think they can just "buy" a threat hunting tool and forget about the people and process. Your only as low as your lowest level.