7.4K
Downloads
32
Episodes
Exploring the defensive side of cybersecurity through the eyes of the experts and innovators.
Episodes
Sunday Oct 17, 2021
Sunday Oct 17, 2021
In this episode, we brought back our good friend Lenny Zeltser. Lenny is Chief Information Security Officer at Axonius. He's developed a mindset of looking at security components as building blocks to create a holistic security environment. To this day, even while operating as an executive, he has wisdom that anyone can learn from.
Quite often, the less sexy aspects of information security are ignored, when in reality, you need to understand what resources you're supposed to protect, which assets are compromised, and the infrastructure for your organization. People jump right into fighting the big fires, and as you know, there is a reason why there are so many day-to-day urgent activities.
To start moving in a positive direction, Lenny shares this advice, “Understand what the major data sources you can tap into rather than thinking ‘let me create this one new way of serving everything I have are.’” The information is there. Think about three sources of information that might get you the biggest bang for the buck!
Key Takeaways:
0:00 Previously on the show
1:40 Lenny introduction
2:05 Episode begins
3:10 What Lenny is doing today
5:35 The evolution of Lenny’s career
8:30 Parallels between beginning and now
10:38 Journey and growth of REMnux
13:00 Challenges Lenny has faced
15:21 Collaboration surprises
17:18 Horror stories
20:18 Enforcing policies
23:34 Asset management
26:08 New tech and trends
28:45 Biggest discovery about self
32:38 Advice for others
34:24 Keeping up with Lenny
Links:
Learn more about Hacker Valley Studio
Support Hacker Valley Studio on Patreon
Follow Hacker Valley Studio on Twitter
Sunday Oct 17, 2021
Sunday Oct 17, 2021
In this episode of Hacker Valley Blue, we brought in a guest who has been on a journey of transformation of self and technology. Our guest is Chani Simms, managing director of Meta Defence Labs. We talk about what is essential for cybersecurity. If there was a magic box that could solve an issue, what problem would Chani want solved? “People!” They need to be trained, and care, and have buy in. They must be devoted to what they’re doing. They need cultural awareness and support – it isn’t easy and the hardest job.
When it comes to leadership, organizations need to use people already in the organization. It is important to know what they’re trying to do. You have to use security as an enabler. Leadership is responsible for communicating objectives and goals.
Key Takeaways
0:00 Previously on Hacker Valley Blue
1:36 In this episode
3:10 Background and day job
5:37 Cyber essentials
13:46 Keeping up to date
15:26 Access control
17:07 Security hygiene
19:48 Magic box
21:32 Leadership fundamentals
26:22 Formula 1 analogy
28: 46 Wrap up
Links:
Email: info@metadefencelabs.com
Sponsored by Axonius
Sunday Oct 17, 2021
Sunday Oct 17, 2021
Know thy organization is key! Wise words from the powerful Marcus J. Carey. Don’t be afraid to admit the bad stuff and be honest about the situation. Most of the time people get fired because they are scared to admit the failure.
You have to build a tight network of people you trust who will be brutally honest with you. You need those people who are going to tell you the truth. Other people will see your superpowers before you do. Superman didn’t know he was different, but others saw the differences and the strengths he didn’t even realize he had. Always pay attention to how people react to what you do, then you will figure out what you are really good at. We over emphasize what we suck at and ignore what we are good at. Don’t do that. You need to understand how amazing, awesome and beautiful you are. Double down and double down hard. Do not be afraid to show your talents and be confident in your superpower.
In security, there is a role for everybody.
Key Takeaways:
1:40 In this episode
2:12 Welcome
3:40 Marcus background
4:57 What lead Marcus to cyber
7:09 Self discovery
9:48 Creations and inventions
14:22 Gathering and retaining information
17:53 Auxiliary skill
21:35 Abilities and mission
25:26 Overlooked areas
31:44 Advice to others
35:41 Staying up-to-date with Marcus
Links:
Learn more about Hacker Valley Studio
Support Hacker Valley Studio on Patreon
Follow Hacker Valley Studio on Twitter
Sunday Oct 17, 2021
Sunday Oct 17, 2021
Welcome to Hacker Valley Blue Season 2 “Know Thyself”. Instead of focusing on the enemy – threat intelligence and environment, we are focusing on knowing yourself and security stack. You need to know the business, but also the fundamentals of security landscape. Without the fundamentals, you cannot reach the level of success you desire. Getting laser sharp on computer networks and how computers speak to each other. Without understanding how each of the pieces work together, you cannot make strategic decisions. We have many guests this season that will teach more about the fundamentals. Stop ignoring the fundamentals and find synchronicity among your team. Building this team makes an impact for the business. You will have positive outcomes. Stop sweeping the issues under the rug to make better decisions.
Cybersecurity is a lot like playing a game of chess using pieces, policies, and guidelines. Opponents use the same things but don’t play by the rules. You continually must up your game and face the opponent who isn’t playing fairly.
Knowing business, team, story and self is so important and that is what is coming up on the rest of the season.
Key Takeaways
0:00 Welcome
2:00 Kick-off
3:13 The fundamentals
5:46 How do you get people excited?
7:07 Making an impact on a business
8:43 Where does one begin to know thyself
10:32 Formula 1 analogy
12:32 Leadership
16:00 Superpowers
19:38 Three Rs of memory
24:58 Chaos engineering
27:56 The brother’s trip
30:11 Stepping into unknown
31:15 Play at work
32:00 Season recap
Links:
Learn more about Hacker Valley Studio
Support Hacker Valley Studio on Patreon
Follow Hacker Valley Studio on Twitter
Sunday Oct 17, 2021
Sunday Oct 17, 2021
In this episode of the Hacker Valley Studio podcast’s Hacker Valley Blue series, Ron and Chris wrap up the season with a recap of its past episodes and major takeaways, as well as a look at what’s to come for them personally and for the podcast.
Looking back on the season, Ron and Chris consider the importance of communication in the field of threat intelligence, specifically thinking of insights from their talk with D’Arcy and lessons in poetry and delivery from Valentina. They cover the surprise of Jack’s willingness to share personal thoughts, review their discussions of bias (specifically highlighting talks with Jon and Susan), and recount things learned about the concept of unhackability. Listeners will hear about the inevitability of mistakes in threat intelligence work, the “easy button” framework, the season theme of sharpening oneself outside of work, and the dynamic of a threat intelligence team.
0:47 - Ron and Chris talk about the importance of communication in the field of threat intelligence.
2:56 - What was one surprise in this season?
3:52 - The hosts review their conversations about bias.
6:55 - The episode turns to the “easy button” framework and the need for personal sharpening outside of work.
16:15 - Ron and Chris consider the inevitability of analysts missing things and the building of a team.
20:22 - What is the future of threat intelligence for Chris and Ron?
27:50 - The hosts review their insights about the possibility of an unhackable device or app.
29:43 - What is next for the Hacker Valley Studio podcast?
Links:
Learn more about Hacker Valley Studio
Support Hacker Valley Studio on Patreon
Follow Hacker Valley Studio on Twitter
Follow Ronald Eddings on Twitter
Sunday Oct 17, 2021
Sunday Oct 17, 2021
Ron and Chris host their vocal coach, D’Arcy Webb, for this episode of the Hacker Valley Studio podcast’s Hacker Valley Blue series. Since threat intelligence is a communications-based function, Ron and Chris look to “The Speech Diva” for insight. She has experience as an actress, was a coach for TEDxCambridge, and loves teaching people how to access the power of language to touch people’s hearts and change their minds.
As the conversation begins, D’Arcy explains her background to listeners. She explains how an acting incident early in her career turned her attention to the topic of vocals, and clarifies that she has spent the last 25 years teaching and exploring this aspect of performance. D’Arcy is passionate about treating the voice as the instrument that it is, and she works with students such as Chris and Ron to help them discover the musical and magical components to language and improve their own speaking practice. The way we speak, she insists, impacts people, and so it is well worth pursuing excellence in this area.
1:29 - Listeners are introduced to D’Arcy.
4:35 - The group considers Ron and Chris’s progress in speech.
6:08 - D’Arcy believes that magic and music are inherent in language.
8:48 - Who are D’Arcy’s favorite speakers, and what is the value of pauses?
12:03 - People wanting to grow need to learn the fundamentals.
17:05 - D’Arcy addresses filler words.
19:31 - The group thinks about comfortable technique, Pablo Neruda, onomatopoeia, and more.
27:52 - D’Arcy speaks to the power of speech and the importance of proper breathing.
Links:
Learn more about Hacker Valley Studio
Support Hacker Valley Studio on Patreon
Follow Hacker Valley Studio on Twitter
Follow Ronald Eddings on Twitter
Follow Chris Cochran on Twitter
Connect with D’Arcy on Facebook
Email D’Arcy at darcy@darcywebb.com
Sunday Oct 17, 2021
Sunday Oct 17, 2021
This episode of the Hacker Valley Studio podcast’s Hacker Valley Blue series is a bit unique. It features Brandon Dixon, the VP of Strategy at RiskIQ, a major sponsor of the podcast. Brandon co-founded Passive Total in 2014, and it was later purchased by RiskIQ. He is the quintessential guest, invested in fitness, philosophy, tech, and leadership. He is an expert in both the practice and business of threat intelligence, and he shares with Ron and Chris about himself, his work, and the field.
Much of the conversation focuses on Brandon and his work background. Brandon explains his journey into the threat intelligence field, from his early interest, through jobs in tech and academia, and to work in espionage research. Eventually, he and friend Steve McGinty saw a need and tried to solve it; their efforts took shape in the company they co-founded, Passive Total. Brandon explains to listeners the process by which he and Steve created Passive Total, as well as the way in which they arrived at the deal to sell Passive Total to RiskIQ. Brandon was heavily involved in the integration of Passive Total into RiskIQ, before eventually settling into a specific role within RiskIQ that capitalizes his love of the business side of the field. He aims to work in light of his personal philosophy on life and success, which he also details.
0:26 - The conversation begins with an introduction to this unique episode, its guest, and his background.
2:43 - The group considers the changing business of threat intelligence and what drives Brandon.
8:24 - The next topics are bias and intelligence collection, as well as what surprises Brandon.
13:00 - Brandon shares the story of Passive Total and its integration into RiskIQ, also addressing the business side of the field and lessons learned through his experience.
24:04 - Brandon addresses intelligence leads and the question of unhackability.
34:44 - What is Brandon’s philosophy on life and success?
39:37 - Brandon explains what threat intelligence leaders need to do to improve their programs.
Links:
Learn more about Hacker Valley Studio
Support Hacker Valley Studio on Patreon
Follow Hacker Valley Studio on Twitter
Follow Ronald Eddings on Twitter
Follow Chris Cochran on Twitter
Sunday Oct 17, 2021
Sunday Oct 17, 2021
This episode of the Hacker Valley Studio podcast is the fifth installment in this first season of the Hacker Valley Blue series, and features guest Susan Peediyakkal, an expert in building threat intelligence programs. Susan is a cyber threat intelligence consultant, the founder of BSides Sacramento, and a member of the advisory boards for several cybersecurity companies. She joins hosts Ron and Chris to speak to her background, the future of threat intelligence, and much more.
Susan first details her background, running through the highlights of her approximately 16 years in cybersecurity, which have focused mostly on threat intelligence. Susan began her career in the air force, and is still a reservist. She worked with radar, and eventually decided to cross-train and branch into IT. The following years saw her in a number of roles with various organizations, and move decisively into the threat intelligence field. Eventually, Susa noticed that her career trajectory was moving her toward building threat intelligence programs for government entities. She built programs for such varied clients as the government of Abu Dhabi, USPS, US courts, and industry leaders. She recently paused her work to pursue further education, but has since returned to work as a threat intelligence practitioner.
1:40 - Listeners are introduced to the episode and today’s guest, Susan Peediyakkal; Susan then shares her background.
5:41 - The group considers the importance of community, misconceptions Susan has noticed about her field, and the artistry and human element of threat intelligence.
16:02 - What kind of bias is Susan running into, and where do analysts go wrong with regard to bias?
21:38 - Susan addresses the term “unhackable.”
24:35 - Susan and her hosts turn to matters of podcasting, voice, and speaking.
31:40 - What do people outside the field get wrong about it?
33:48 - What’s the future look like for Susan, her field, and the workforce?
Links:
Learn more about Hacker Valley Studio
Support Hacker Valley Studio on Patreon
Follow Hacker Valley Studio on Twitter
Follow Ronald Eddings on Twitter
Follow Chris Cochran on Twitter
Sunday Oct 17, 2021
Sunday Oct 17, 2021
This episode of the Hacker Valley Studio podcast features Jon DiMaggio, a Senior Threat Intelligence Analyst at Symantec. Jon is a researcher and longtime bad guy chaser, and Ron and Chris fill this installment of Hacker Valley Blue with Jon’s thoughts on ransomware, threat research, attribution, and more!
1:41 - Listeners are introduced to Jon DiMaggio and the episode before Jon explains his background..
5:04 - The first major topic Jon shares about is that of nation-states, specifically speaking to the work of combating nation-state attackers.
12:57 - The conversation turns to the economics of ransomware.
18:39 - What are Jon’s thoughts on the possibility of another major worm attack?
20:26 - Jon is asked about how people can enter his field or that of hacking.
24:54 - How should listeners approach attribution and bias, and how has Jon navigated bias in his own life?
31:31 - The group considers Jon’s mental organization, his recall of information, and the topic of communication.
Links:
Learn more about Hacker Valley Studio
Support Hacker Valley Studio on Patreon
Follow Hacker Valley Studio on Twitter
Follow Ronald Eddings on Twitter
Follow Chris Cochran on Twitter
Access the recent work and research on Symantec’s threat intelligence feed
Sunday Oct 17, 2021
Sunday Oct 17, 2021
In this episode of the Hacker Valley Studio podcast, hosts Ron and Chris welcome Valentina Palacín for the third episode in the Hacker Valley Blue series. Valentina is a threat hunter who used to work as a translator, and she is currently a senior cyber threat intelligence analyst. She joins Ron and Chris to talk about her background in languages, poetry and the impact of words, and much more.
As the conversation gets underway, Valentina explains her background to listeners. She studied translation before starting her career in that field, but transitioned to information technology about two years ago. In her free time, she researches threat hunting in her home country of Argentina. It was challenging for Valentina to change her career path, since she had no background in computer science, but she took multiple steps - working in web development, learning to do programming, taking courses, and more - ultimately becoming a threat intel analyst and speaker. Though the journey was difficult, Valentina feels she was born to work in her current field, and has found her past experience, including knowledge of over 7 languages, to be helpful in her work.
1:38 - Listeners are introduced to Valentina, her background, and her challenging process to enter into the large intel community in Argentina .
5:24 - Did knowledge of language impact Valentina’s threat intelligence work?
7:55 - Valentina shares about her programming experience and details her journey into threat intel.
14:23 - What are Valentina’s thoughts about MITRE and the relation between intelligence and threat hunting?
18:06 - The group considers how to keep up with changes in the field, and acknowledges that threat intelligence will not catch everything.
22:48 - One thing that Valentina is passionate about pursuing is hobbies outside of work.
27:56 - Does poetry help with threat intelligence work?
32:53 - The conversation turns to Valentina’s community, focusing on BlueSpace Security.
Links:
Learn more about Hacker Valley Studio
Support Hacker Valley Studio on Patreon
Follow Hacker Valley Studio on Twitter
Follow Ronald Eddings on Twitter
Follow Chris Cochran on Twitter
Connect with Valentina Palacín on Twitter