Brakeing Down Security Podcast

Preston Pierce is a recruiter. We wanted to have him on to discuss some issues with our industry. So we had him on to discuss hiring practices, how a recruiter can help a company recruiter better talent, and how to stop companies looking for the 'unicorn' candidate.

This was the 3rd year of our "Podcast with Podcasters" at Derbycon. I swear it gets larger every year... but only with more podcasters! SUPER NOT SAFE for kids (and probably adults, come to think of it). Really this is just us riffing about derbycon (and I really love @oncee, and wished I'd gone to his stable talk

Zane Lackey (@zanelackey on Twitter) loves discussing how to make the DevOps, and the DevSecOps (or is it 'SecDevOps'... 'DevOpsSec'?) So we talk to him about the best places to get the most bang for your buck getting security into your new DevOps environment. What is the best way to do that? Have a listen...

Everyone should be doing incident response tabletops, even if it's not a dedicated task in your organization. It allows you to find out what you might be lacking in terms of processes, manpower, requirements, etc. We discuss what you need to do to get ready for one, and how those should go in terms of helping your organization understand how to handle the aftermath. Andif you've been under a rock #equifax was breached.  143 million credit records are in the ether. We discuss the breach.

This week, we met up with Robert Sell to discuss competing in the DefCon Social Engineering CTF. You're gonna learn how he prepared for the competition, and learn about some of the tactics you could use to compete in future SE CTF events.

This week, we discuss the lack of information and where you might find more information about certain vulnerabilities. Seems like many companies fail to give out necessary and actionable information without paying an arm and a leg. We also go over our DerbyCon CTF walkthrough, and discuss the steps to solve it.

If you are a blueteamer and make use of the "Windows Logging Cheat Sheet", you are aware of how important it is to log certain events, and to set hostile conditions to make malware/Trojans/virus have a harder time avoiding detection. What if I told you the same updates we suggested last week to NEVER delay actually undoes all your hardening on your system even after you've assured your users they are safe to update?

This week went in a different direction from what we normally do. We discussed some news, a twitter conversation about someone from the 'ahem' "media" that suggests that you disable Windows Update on your home devices. We discuss the pros and mostly cons of doing that, and alternatives to protect your home and work devices from that.

Ally Miller (@selenakyle) joined us this week to discuss Machine Learning and #Artificial #Intelligence. It seems like every new security product employs one or both of these terms. We asked Ms. Miller to join us here to discuss what ML and AI are, how algorithms work to analyze the data to come to the right conclusion. What is required to get a useful algorithm, and how much or little human interaction is required?

2017-025-How will GDPR affect your Biz with Wendyck, and DerbyCon CTF info

2017-024-infosec_mental_health_defcon_contest-with-rand0h-and-tottenkoph

2017-023-Jay_Beale_Securing Linux-LXC-Selinux-Apparmor-Jails_and_more

2017-022-Windows Hardening, immutable laws of security admins, and auditpol

2017-SPECIAL- Michael Gough and Brian Boettcher discuss specific ransomware

2017-021-small_biz_outreach-614con-prenicious_kingdoms-ransomware-bonus