Jeremy

@strandjs use it for server and app event analysis. Flexible tokenization logs/data. Powerful rules engine. Woodles for custom data gathering (external cloud providers, tooling, etc.) and integrations (forward events to external apps based upon rules) provides endless possibilities

Thoughts on Wazuh for endpoint protection? wazuh.com

Me: You gotta patch this public sftp box Dir of Ops: My guys don’t know how. Sounds like project. Expect 6+ months Me: It’s CentOS w/ OpenSSH DoO: Oh, then we need a senior admin. Will take even longer. Me: Run yum update DoO: Can’t. We don’t have any tooling or docs Me: ...

Hey @SANSInstitute, you know @edskoudis @joswr1ght @evanbooth and co are giving away a bunch of awesome learning over @KringleCon for the #HolidayHack ... for FREE?!?! Better get your legal dept moving before they do something crazier like give away #SANSTraining ! kthxbai

Thx to @SecInnovation for running CMD+CTRL Cyber Range @BASConf. Learned a lot and had great fun. Coming in first and winning an Amazon gift card was nice, too!