Improving Security Defenses with MITRE ATT&CK: Part 2

In part 2 of this podcast series, Heather Terry welcomes members of the Hurricane Labs SOC team, Brian Karrigan, Kurt Wolfe, and Meredith Kasper, to continue the discussion about the MITRE ATT&CK framework. This episode provides a few more details about what setting up the framework is like and what our team is excited about with MITRE as we move forward. 

Also, make sure you check out some of the related resources mentioned during this episode:

• MITRE ATT&CK Framework Q&A: What Red and Blue Teamers Should Know blog post by Meredith Kasper, Pentester, Hurricane Labs
• MITRE ATT&CK: Finding the Right Frame(work) for Your Map blog post by Brian Karrigan, SOC Analyst Tier II / Implementation, Hurricane Labs
• Man and Machine: A Look at Neurotechnology blog post by Jeremy Nenadal, Splunk Admin II, Hurricane Labs
• A Day in the Life of a SOC Architect blog post by John Blainer, SOC Analyst II, Hurricane Labs
• Hurricane Labs Careers – We are currently hiring for SOC and Splunk Development positions. Apply today! 

Click here for a transcript of our chat.

Improving Security Defenses with MITRE ATT&CK: Part 1

On today's show, Heather Terry welcomes Bill Mathews, Hurricane Labs' Owner and CTO, and Josh Silvestro, Hurricane Labs' SOC Tier II Team Lead, to discuss the MITRE ATT&CK framework. This conversation provides insight into what the framework is and its value to security teams. 

Also, make sure you check out some of the related resources mentioned during this episode: 

• MITRE ATT&CK Framework Q&A: What Red and Blue Teamers Should Know blog post by Meredith Kasper, Pentester, Hurricane Labs
• MITRE ATT&CK: Finding the Right Frame(work) for Your Map blog post by Brian Karrigan, SOC Analyst Tier II / Implementation, Hurricane Labs

Click here for a transcript of our conversation.

Straight from the SOC: Team Interview with Heather Terry and Hurricane Labs

On today’s show, Heather Terry welcomes three members of the Hurricane Labs' SOC (security operations center) team to share a bit about their career journeys, to answer some of the infosec questions we’ve been asked via social media, and to talk about how they deal with burnout. 

Also, make sure to check out some of the resources mentioned during this episode: 

• Building Virtual Machine Labs: A Hands-On Guide book by Tony Robinson, Senior Security Operations Analyst, Hurricane Labs
• 5 Insider Tips for Preventing Burnout in Cybersecurity blog post by Meredith Kasper, Pentester, Hurricane Labs
• MITRE ATT&CK Framework Q&A: What Red and Blue Teamers Should Know blog post by Meredith Kasper, Pentester, Hurricane Labs
• MITRE ATT&CK: Finding the Right Frame(work) for Your Map blog post by Brian Karrigan, SOC Analyst Tier II / Implementation, Hurricane Labs

Click here for a transcript of the discussion.

The Women in Tech-quila Episode: Raising a Toast to Women in STEM

Reflections on the Technical Communication Summit 2020

In this podcast, Hurricane Labs Technical Writer Heather Terry talks about her experience at the Technical Communication Summit of 2020. 

Read the episode here.

Hurricane Labs Podcast for Splunk: The “We may be broken, but we still know some stuff about Splunk” Episode

Welcome back to the Hurricane Labs Podcast for Splunk! Your podcast hosts on this episode are Kelsey, Tom, and Brian (somehow all of us are apparently very broken, but we've still managed to get a few thoughts out about Splunk). 

In this episode we will be discussing quite a few topics, including:

• [0:00 - 0:36 seconds] 
  Time dedicated to our absolutely amazing host intros... 

• [00:37 - 4:25 minutes]
  The Hurricane Labs in-house created Broken Hosts App for Splunk, because we don't want you to find out your data is missing before you go to search for it. You can find the app on the featured section of our very own Splunk Apps page.

• [4:26 - 9:18 minutes]
  Some of the cool new features that are a part of Splunk 7.1 (Note: there are a few things mentioned here that have either come and gone, or that Splunk has addressed since the recording of the podcast). We have also created a couple of related screencasts about Goodbye Changeme and an overview of what the 7.1 UI looks like. Make sure you check those out too.
• [9:19 - 17:10 minutes]
  Phantom - how it's helping security teams with automation and orchestration, and also why we're excited about it. 

• [17:10 - 24:25 minutes]
  A few fun stories about Splunk's Annual Partner Symposium and then it pretty much goes downhill from there. Thanks for listening in! 

P.S. As Tom so nicely mentioned at the end, if you've been willing to put up with us for this podcast you should definitely do yourself a favor and check out our Splunk Tutorials Page and some of our other helpful resources on the Hurricane Labs website. Anddd we're on Twitter to, if that's your thing: @hurricanelabs. Thanks!

IoT: But y tho?

duh duh duhhhh the INTERNET OF THINGS *said in a loud, obnoxious wrestling announcer style voice* 

Podcast Topic (aka rant): On this episode Kelsey, Josh, Rob and Tim will be chatting (and yelling) about the Internet of Things...

Kelsey's Disclaimer: Kelsey personally apologizes for any vulgar language that may occur during the podcast XD 

Are you asking some of the same questions below? Then pop in those earpods and listen in!

• Why would I possibly want a smartwatch?
• What in the heck does "IoT" actually mean?
• Why would I want my toaster on the Internet?
• What makes security different for IoT devices?
• We can't even secure printers tho...?
• Is the "convenience" worth the risk?

Related articles and plugs: 

• Nest App for Splunk
• Confessions of a Consumer IoT Skeptic
• Hacker Claims He Hacked 150,000 Printers to 'Raise Awareness' About Hacking
• The 'internet of things' will invade your home, whether you like it or not
• The Internet of Things: Five critical questions
• IoT Series: "Roxanne" App for Splunk

If you have any thoughts, opinions, or just want to tell us how great you think we are, feel free to Tweet at us, leave us a comment on LinkedIn, Facebook, etc. And, as always, thanks for putting up with our shenanigans.

Hurricane Labs Podcast for Splunk: Third Edition

Hey Splunkers, it's been a while, but we're back! This is the Hurricane Labs Podcast for Splunk: Third Edition, and we're going to call this the "It's not magic, it's Splunk" segment. Your hosts on this podcast are Kelsey Clark (marketing person who no longer wants to host this particular podcast), Steve McMaster (SOC department lead), Tom Kopchak (Splunk admin department lead), and Tim Baldwin (who gets told what to do by Steve and Tom, is the only one who actually does any work, and is one of HL's Splunk engineers). ;) 

Isn’t ransomware hosted in Transylvania?

Hurricane Labs Podcast for Splunk: Second Edition