BS2 - Supply Chain Attacks, Breach Forums and UK Police Honeypots

SOCTales

#Tech #News #Tech News #Business #Matt Forde #SOC #Security Operations #Cybercrime #Hacking #Digital Forensics

22:08

Host Francesca Amiker sits down with directors Joe and Anthony Russo, producer Angela Russo-Otstot, stars Millie Bobby Brown and Chris Pratt, and more to uncover how family was the key to building the emotional core of The Electric State . From the Russos’ own experiences growing up in a large Italian family to the film’s central relationship between Michelle and her robot brother Kid Cosmo, family relationships both on and off of the set were the key to bringing The Electric State to life. Listen to more from Netflix Podcasts . State Secrets: Inside the Making of The Electric State is produced by Netflix and Treefort Media.…

2 years ago 17:32

MP3•Episode home

The second episode of our SOCTales BS where we look into the supply chain attack with 3CX and their response, we talk a bit more about the ongoing story with Breach forums and also how the UK Police set up a honeypot to catch DDossers.
...and yes, you can hear my doorbell go off in the middle, such is the life of an amateur podcaster!

Support the show

18 episodes

SOCTales

BS2 - Supply Chain Attacks, Breach Forums and UK Police Honeypots

SOCTales

published 2 years ago

MP3•Episode home

Support the show

18 episodes

#Tech #News #Tech News #Business #Matt Forde #SOC #Security Operations #Cybercrime #Hacking #Digital Forensics

All episodes

1
S1:E12 - Oh, For SOC's Sake! - How do you manage your SOC? 53:07

1 year ago53:07

53:07

For our Season finale we chat to the amazing Eliza-May Austin , CEO and Co-Founder of https://th4ts3cur1ty.company/. Eliza has a degree in Digital Forensics, is SANS trained in Network Forensics, PurpleTeaming and Penetration Testing. She has previously worked in cyber defence in a number of FTSE100 companies and founded the Ladies Hacking Society, We talk quite candidly about their approach to Managed SOC, Technical skills within the industry, what people are doing wrong, or right, how Sandra Bullock was her guiding light and the fact she might be overpaying for her haircuts.. *Sandra Bullock appears in the podcast by name only, any suggestions she is a guest is purely deception on my part. Visit out Merch Store!: https://soctales.myshopify.com/ Support the show…

1
S1E11 - Just how Intelligent is Threat Intel? 37:46

1 year ago37:46

37:46

We talk to Jason Steer, CISO at Threat Intelligence company Recorded Future about where Threat Intel has evolved over time from "just" a list of Hashes or IOC's, where it sits within a Security Platform, the importance of being able to curate and understand billions of information entities and what that could mean for a modern day SOC Also, another great "For SOC's sake" at the end here... Enjoy! Support the show…

1
S1E10 - Can we make GRC Sexy? 41:46

2 years ago41:46

41:46

SOCTales is delighted to welcome Stuart Wright, Global Head of GRC at Nettitude, onto the Podcast to discuss where GRC comes into play for business, where to focus your time, what it means (and what it doesn't) and tries to answer me very loaded and tongue in cheek question, Can we make GRC Sexy? Stuart also touches on Neurodiversity not only within his own experiences, but also that of something within the IT Industry both as an employee and a hiring manager. In addition, For SOC's Sake at the end I think is something we can all agree with! Note - There are a couple of F-Bombs dropped in this episode, so be careful around the kids. Support the show…

1
S1E9 - Junior Pentester and Blackhat trainer 56:49

2 years ago56:49

56:49

In this Episode we chat with Chris Humphries, Adversarial Engineer on TeamARES at CyberOne Security based in the US. We talk about his background in Applications before the move into Cyber Security, passing the OSCP, setting up and delivering training at Blackhat and more. Support the show

1
S1E8 - 20,000 Routers under the Sea - Working in Cyber aboard a £3bn Nuclear Submarine 52:13

2 years ago52:13

52:13

In this Episode we talk with Dave Kennedy, a 14yr Veteran of the Royal Navy and now Cyber and Information Security Consultant with tmc3. The chat focuses not only on the SatCom and IT work he performed while aboard a £3bn Vanguard Class Submarine ( "Are you telling me this sucker is Nuclear? - Marty McFly, 1985" ) but also the help and support received when he decided to join Civilian life. Dave is also a Founder and Lead Advisor for Cybervets, a group that aims to assist and support those leaving the Armed Forces and move into a career within Cyber Security. You can find his LinkedIn Profile here As an added treat, details on what a Vanguard Class Submarine is can be found here Support the show…

1
BS5 - Insider Threats, 20,000 bikes under the C2 and Ransomware MQ 11:38

2 years ago11:38

11:38

For SOCTales BS this week we look at three news stories that an cover insider threat, but with a difference, the shutting down of a Suzuki factory due to a Cyberattack and the Ransomware MQ (Malicious Quartile) Support the show

1
BS4 - www.podcast.zip and the Tik Tok countdown in Montana. 12:56

2 years ago12:56

12:56

Another SocTales BS Episode where we offer up a Brief Summary of the IT Security news from this week, including the security implications of the new TLD's that are available, the banning of Tik Tok in Montana and a new RaaS group that are specifically targeting ESXI hosts. Support the show

1
BS3 - Ransomware Breaches, again, and Infosec Industry Misogyny, again 16:04

2 years ago16:04

16:04

SOCTales BS is back with a brief summary of the week and we're introducing one of our new Co-Hosts in Liz Pinder, experienced TI and SOC analyst, to help with the weekly chit chat. This week, Misogyny at RSA and is this ok? (Spoiler: it isn't) and news on a couple of Ransomware breaches including a 4TB Data Exfil from Australia. Support the show…

1
BS2 - Supply Chain Attacks, Breach Forums and UK Police Honeypots 17:32

2 years ago17:32

17:32

The second episode of our SOCTales BS where we look into the supply chain attack with 3CX and their response, we talk a bit more about the ongoing story with Breach forums and also how the UK Police set up a honeypot to catch DDossers. ...and yes, you can hear my doorbell go off in the middle, such is the life of an amateur podcaster! Support the show…

1
BS1 - Ferrari, Breach Forums and Dodgy USB Keys 16:26

2 years ago16:26

16:26

Fancy 15 minutes over a coffee to catch up on some of the news stories of the week? Need a Brief Summary while you're procrastinating over the next task and need an excuse for a break? Got 15 minutes in the car while you're waiting to pick the kids up from ballet practice? You do? Great, go listen to me spouting some BS. Fordy. Support the show…

1
S1E7 - The Art of Social Engineering - The Psychology, The Approach, The Flowers and The Keylogger Man 54:43

2 years ago54:43

54:43

In this Episode we chat to Richard De Vere, Head of Social Engineering at Ultima Business Solutions. We get a great insight into the art of Social Engineering, how he approaches various engagements from OSINT through to wearing the right colour tie, and delve into the mind games that can be played. We talk physical access, scoping the engagements, what works and what doesn't, and a great For SOC's sake at the end that I whole heartedly agree with. Oh, and the Keylogger Man. We also reference a Blog of Richards during the podcast, that you can find here: https://theantisocialengineer.com/2021/07/15/worlds-worst-phishing-campaign/ Support the show…

1
S1E6 - Incident Response, Digital Forensics and a 1940's German era Powerplant in Norway 48:28

2 years ago48:28

48:28

In Episode 6 we chat to Jack Hughes, head of Digital Forensics and Incident Response at Unit42, the DFIR and Threat Intelligence company. We chat about how malicious actors get into environments, dwell time, lateral movement and how it can be tracked. In addition, Jack talks about his own experiences within the industry not only in his current role but also his career in getting to that stage and where those looking to get into DFIR can concentrate their learning efforts. We also look at preparation for a SOC, with elements such as table top exercises as well as personal on the job investigations that Jack has been involved in. It took a few months to arrange this interview given that Jack is "Always out saving the world" according to his colleagues, so it was great to get him on the show and it was certainly worth it. Support the show…

1
S1E5 - Dark Web Threat Intel, TOR, Phish Kits and a 44 yr old Woman from Norfolk 55:43

2 years ago55:43

55:43

In Episode 5 we chat to Amir, CEO of SOS Intel, a Threat Intelligence monitoring company who help to scour the Dark Web for a wide range of specific TI, from Phished accounts and scam money laundering sites, to active insider access and breach forums. We discuss how there is more than just TOR used to access these areas, exactly how anonymous you are, how much it costs to buy a disgruntled employee, where Law Enforcement are involved and bust a few myths in the process. Support the show…

1
S1E4 - SOC Management, Threat Hunting and IOC's.. or should that be Ohhhh, I See..... 1:02:02

2 years ago1:02:02

1:02:02

Episode Four is with the brilliant Shaun Lynn, SOC Manager with Socura. Shaun and I discuss what it's actually like working in a SOC, how we use Alert Logic to deal with all the noise we hear, how to best deal with and Manage IOC's, burn out and Mental Health, career advice and more. Oh, and check out the "For SOC's Sake" at the end... IOC should probably be, Ohhhh, I see..... Support the show…

1
S1E3 - Recruitment Special - Job hunt Honeypot with Paddy and Rosie 1:01:18

2 years ago1:01:18