APT Presentation from July 2008
Some of you may remember me mentioning the 2008 SANS WhatWorks in Incident Response and Forensic Solutions Summit organized by Rob Lee. I provided the keynote and really enjoyed listening to the presentations, which Rob has graciously made available at http://files.sans.org/summit/forensics08/ . One of the presentations, by Mandiant consultant Wendi Rafferty and then-Mandiant consultant (now GE-CIRT incident handler) Ken Bradley, was titled Slaying the Red Dragon . As you can see from the …
Related Posts
One of the presentations I delivered at the Information Security Summit last month discussed Network Security Monitoring. The Security Justice guys recorded audio of the presentation and posted it here as Network Security Monitoring and Incident Response. The audio file is InfoSec2009_RichardBejtlich.mp3. Copyright 2003-2009 Richard Bejtlich and...
In December 2007 I wrote Predictions for 2008 . They included 2) Expect greater military involvement in defending private sector networks; 3) Expect increased awareness of external threats and less emphasis on insider threats; and 4) Expect greater attention paid to incident response and network forensics, and less on prevention. All three of...
A blog reader emailed the following question. We recently had a CISO change, and in the process of doing an initial ops review and looking at organizational structure, one of the questions the new CISO has is about the viability of offshoring incident response… I would be very interested in your views on this matter, and would appreciate...
Thanks to everyone who attended the Bejtlich and Bradley Webcast for SANS yesterday. We recorded that Webcast (audio is now available ) to start a discussion concerning professional incident detection. I’m pleased to publish the following tentative speaker list for the SANS WhatWorks in Incident Detection Summit 2009 on 9-10 Dec in Washington,...
Matt Olney and I spoke about the role of a Product Security Incident Response Team ( PSIRT ) at my SANS Incident Detection Summit this month. I asked if he would share his thoughts on how software vendors should handle vulnerability discovery in their software products. I am really pleased to report that Matt wrote a thorough, public blog post...
In my off time I’m still busy organizing the SANS WhatWorks in Incident Detection Summit 2009 , taking place in Washington, DC on 9-10 Dec 09. The agenda page should be updated soon to feature all of the speakers and panel participants. Wednesday is the last day to register at the discounted rate . I wrote the following to provide more information...
We had a great SANS WhatWorks in Incident Detection Summit 2009 this week! About 100 people attended. I’d like to thank those who joined the event as attendees; those who participated as keynotes (great work Ron Gula and Tony Sager), guest moderators (Rocky DeStefano, Mike Cloppert, and Stephen Windsor), speakers, and panelists; Debbie Grewe...
I took a few notes at the SANS Incident Detection Summit keynote by Tony Sager last week. I thought you might like to see what I recorded. All of the speakers made many interesting comments, but it was really only during the start of the second day, when Tony spoke, when I had time to write down some insights. If you’re not familiar with...
If you want to read a concise yet informative and clue-backed report on advanced persistent threat , I recommend completing this form to receive the first Mandiant M-Trends report. Mandiant occupies a unique position with respect to this problem because they are one of only two security service companies with substantial counter-APT consulting...
Ken Bradley and I will conduct a Webcast for SANS on Monday 2 Nov at 1 pm EST. Check out the sign-up page. I’ve reproduced the introduction here. Every day, intruders find ways to compromise enterprise assets around the world. To counter these attackers, professional incident detectors apply a variety of host, network, and other mechanisms...
Related Tweets from Twitter
|
creoLeREDD (Creole) : this song reminds me of gainesville dam i miss my apt.. sippin wine blowin kush all day (btw) the real kush some niggas think they b on dat.. Updated : 2010-03-11T23:19:57Z | Reply | View Tweet |
|
ange77h (Angela Higgins) : #bbcqt this topic's quite apt just now, the guy from my corner shop has just been hospitalised by a someone wielding a hammer! terrible... Updated : 2010-03-11T23:19:48Z | Reply | View Tweet |
Related News from Digg
-
McCain’s Tax Cuts Benefit the Rich Even More Than Bush
[US Elections 2008]
Examining McCain’s shifts on taxes today, the Wall Street Journal’s Martin Vaughan writes that “an apt description” for McCain’s tax proposals would be to say “that the wealthy would benefit most.” In fact, as the Cato Institute’s Chris Edwards points out, McCain’s proposals are aimed at the wealthy “even more so than Bush’s”...
1720 Diggs, 328 Comments
-
Architect Secretly Builds Epic Scavenger Hunt into NYC Apt
[Odd Stuff]
Eric Clough isn't your typical architectural designer. That's why, when given the opportunity, he secretly built an incredible scavenger hunt into a $8.5-million, 4,200-square-foot Park Avenue apartment that included ciphers, riddles, poems and a lot of hidden doors and compartments.
1891 Diggs, 178 Comments
-
APT-GET WIFE (pic)
[Linux/Unix]
A excellent geek perceptive of the way to get Married...
2916 Diggs, 356 Comments
-
xkcd presents: ZEALOUS CONFIG
[Comedy]
I'd add an apt description, but in the rush to post it on Digg, I haven't actually read it yet.
2544 Diggs, 264 Comments
-
The REAL Camera Behind Cloverfield
[Gadgets]
For those who've seen the unique monster movie Cloverfield, you know that the story is supposed to be shot by the aptly-named character "Hud" from a cheapo handheld consumer camera. Convincing the audience of that point was one of the movie's most successful angles.
2076 Diggs, 315 Comments