SECTION 9 Cyber Security podcast

Player FM - Internet Radio Done Right

215 subscribers

Dodano seven lat temu

Treść dostarczona przez Support and SECTION 9. Cała zawartość podcastów, w tym odcinki, grafika i opisy podcastów, jest przesyłana i udostępniana bezpośrednio przez Support and SECTION 9 lub jego partnera na platformie podcastów. Jeśli uważasz, że ktoś wykorzystuje Twoje dzieło chronione prawem autorskim bez Twojej zgody, możesz postępować zgodnie z procedurą opisaną tutaj https://pl.player.fm/legal.

SECTION 9 Cyber Security

Udostępnij

Źródło serii•Feed

Just two people trying to do IT and Security the right way.

139 odcinków

#Tech News #Security #Software Development #SECTION 9 #Tech #Podcasting Education #News #Support #Microsoft 365

SECTION 9 Cyber Security

215 subscribers

updated 2 lata temu

Udostępnij

Źródło serii•Feed

Just two people trying to do IT and Security the right way.

139 odcinków

#Tech News #Security #Software Development #SECTION 9 #Tech #Podcasting Education #News #Support #Microsoft 365

Wszystkie odcinki

1
The NIST Cyber Security Framework 30:31

2 years temu30:31

Na później

Listy

Polub

Polubione

30:31

Time to start looking into cyber security frameworks. For this episode we’re looking at the the NIST Cyber Security Framework. We’re also explaining what a cyber security framework is and how they can help. LINKS 1. NIST Cyber Security Framework (CSF) FIND US ON 1. Twitter - DamienHull 2. YouTube

1
Time For a Maintenance Review - 259 23:44

2 years temu23:44

23:44

Time for another maintenance episode where we review our systems and management process. This time were looking at our Digital Ocean servers, Automox patch management, Fortinet Firewalls, and the password manager Bitwarden. FIND US ON 1. Twitter - DamienHull 2. YouTube

1
How do you roast a server to death? - 258 11:20

2 years temu11:20

11:20

Almost roasted our VMware server to death. Don’t do what I did. Enjoy! LINKS 1. VMware Server: Super Micro SYS-E300-9D-8CN8TP 2. Fans: Noctua NF-A4x20 PWM FIND US ON 1. Twitter - DamienHull 2. YouTube

1
How do we evaluate the LastPass hack for Section 9? - 257 36:14

2 years temu36:14

36:14

LastPass was hacked last year. As LastPass customers we need to evaluate the impact that has on Section 9. Should we continue to use the product? Should we migrate to a different password manager? How do we evaluate a password manager? Consider this the start of a longer conversation about LastPass and password managers. FIND US ON 1. Twitter - DamienHull 2. YouTube…

1
SANS and BHIS Videos for Hacking - 256 25:02

2 years temu25:02

25:02

Found some really interesting and helpful videos. One walks you through an Active Directory hacking lab. Another talks about default configurations and bad passwords as a way to hack into systems. The last one is about building a home lab. These are just what I needed. LINKS 1. SANS Workshop – NTLM Relaying 101: How Internal Pentesters Compromise Domains 2. The Top $ num Reasons You Got Hacked in 2022 with Kent & Jordan | 1 Hour 3. How to Build a Home Lab for Infosec with Ralph May | 1 Hour FIND US ON 1. Twitter - DamienHull 2. YouTube…

1
The Active Directory Lab - 255 20:57

2 years temu20:57

20:57

Found a video that walks you through the process of setting up an Active Directory Lab for hacking. I wouldn’t be able to do this without a starting point. LINKS 1. Mitre ATT&CK Matrix 2. How to Build an Active Directory Hacking Lab FIND US ON 1. Twitter - DamienHull 2. YouTube

1
Using the MITRE ATT&CK Matrix in a lab - 254 21:35

2 years temu21:35

21:35

Last episode was about my crazy study plan, or lack of one. Time to put together a proper study plan. One that works. FIND US ON 1. Twitter - DamienHull 2. YouTube

1
A Better Study Plan - 253 17:20

2 years temu17:20

17:20

Last episode was about my crazy study plan, or lack of one. Time to put together a proper study plan. One that works. FIND US ON 1. Twitter - DamienHull 2. YouTube

1
Learning All At Once - 252 27:01

2 years temu27:01

27:01

Time to jump into my crazy, unorganized study process. Trying to study or learn the CISSP, pentesting, risk assessments, and keep up with my current certification requirements. I’ve also signed up for two Antisyphon classes. Beginner Classes 1. SOC Core Skills 2. Getting Started In Security With BHIS and Mitre Att&ck 3. Active Defense & Cyber Deception Advanced Classes 1. Introduction to Pentesting 2. Red Team: Getting Access 3. Professionally Evil CISSP Mentorship Program FIND US ON 1. Twitter - DamienHull 2. YouTube…

1
Asset Management Policy - 251 13:30

3 years temu13:30

13:30

Time to create a policy for asset inventory. This will help us define what we need in our asset inventory. It will also help us define what we need in our procedures. The process we use to manage the inventory. LINKS 1. Enterprise Asset Management Policy Template FIND US ON 1. Twitter - DamienHull 2. YouTube…

1
Discovering Devices With runZero - 250 18:15

3 years temu18:15

18:15

We’re scanning our network with runZero to get an inventory of devices. What did it find? What can we learn from this inventory? How well does it work? LINKS 1. runZero - Active discovery tool for asset inventory FIND US ON 1. Twitter - DamienHull 2. YouTube

1
Do we have adequate security controls in place? - 249 22:19

3 years temu22:19

22:19

We’re in the process of implementing the CIS controls. This will take time. We’re also very busy. Are there any gaping security holes that we need to fix? Do we have any security controls in place? Can we wait to implement the CIS controls? LINKS 1. runZero - Active discovery tool for asset inventory 2. Enterprise Asset Management Policy Template FIND US ON 1. Twitter - DamienHull 2. YouTube…

1
CIS Controls: Hardware Inventory Part 1 - 248 13:07

3 years temu13:07

13:07

Time to get an accurate inventory of the devices on our network. Once we have an inventory, we can move on to policies and procedures. LINKS 1. runZero - Active discovery tool for asset inventory 2. Enterprise Asset Management Policy Template FIND US ON 1. Twitter - DamienHull 2. YouTube

1
Going Back to the CIS Controls - 247 17:17

3 years temu17:17

17:17

Time for another maintenance episode. This time were going back to the CIS Controls. This time were using version 8. Hoping to implement the first 7. FIND US ON 1. Twitter - DamienHull 2. YouTube

1
Azure Testing - 246 14:17

3 years temu14:17

14:17

Time to start learning Azure. We’ve had Azure AD and Microsoft 365 for years. Just added Azure to the mix. Lots to learn. LINKS Free Azure Account FIND US ON 1. Twitter - DamienHull 2. YouTube

Zapraszamy w Player FM

Odtwarzacz FM skanuje sieć w poszukiwaniu wysokiej jakości podcastów, abyś mógł się nią cieszyć już teraz. To najlepsza aplikacja do podcastów, działająca na Androidzie, iPhonie i Internecie. Zarejestruj się, aby zsynchronizować subskrypcje na różnych urządzeniach.