Hurricane Labs InfoSec Podcast

An Inside Look at the Collegiate Penetration Testing Competition

Curious about the Collegiate Penetration Testing Competition (CPTC)? In this podcast, Heather welcomes Tom Kopchak, Josh Neubecker, and Meredith Kasper to chat about their experiences working to bring the competition to life.

Learn more about CPTC from Tom's blog posts and by visiting the CPTC website and Twitter profile: 

• CPTC Review Part 1: The Setup, Part 2: The Ethics, Part 3: The Process, and Part 4: The Data blog series by Tom Kopchak
• How to Use the 2019 CPTC Security Dataset in Splunk tutorial by Tom Kopchak
• Explore the GlobalCPTC website
• Find @nationalcptc on Twitter

Click here for a podcast transcript.

Creating a Vulnerability Management Policy

In this podcast, Heather chats with Roxy, our Vulnerability Management Specialist, and Bill Mathews, our Chief Technical Officer and owner of Hurricane Labs, about preparing vulnerability management policies.

Be sure you check out some of the related resources mentioned during this episode: 

• How to Write a Vulnerability Management Policy by Roxy
• NIST
• PCI
• SOC

Click here for a transcript of our chat. 

FireEye & SolarWinds Follow-Up with Senior SOC Analyst Tony Robinson

In this podcast, Heather welcomes Senior SOC Analyst Tony Robinson back for a follow-up discussion about the FireEye and SolarWinds breaches. 

Related resources: 

• FireEye and SolarWinds Breaches Q&A with Senior SOC Analyst Tony Robinson by Heather Terry
• Security Advisory Regarding SolarWinds Supply Chain Compromise by Tony Robinson
• Security Advisory Regarding the Recent FireEye Breach Reports by Tony Robinson

Click here for a transcript of our chat.

FireEye and SolarWinds Breaches Q&A with Senior SOC Analyst Tony Robinson

In this podcast, Heather welcomes Senior SOC Analyst Tony Robinson to talk about the FireEye and SolarWinds breaches in a Q&A. 

Be sure you check out some of the related resources mentioned during this episode: 

• Security Advisory Regarding SolarWinds Supply Chain Compromise by Tony Robinson
• Security Advisory Regarding the Recent FireEye Breach Reports by Tony Robinson

Click here for a transcript of our chat.

Improving Security Defenses with MITRE ATT&CK: Part 2

In part 2 of this podcast series, Heather Terry welcomes members of the Hurricane Labs SOC team, Brian Karrigan, Kurt Wolfe, and Meredith Kasper, to continue the discussion about the MITRE ATT&CK framework. This episode provides a few more details about what setting up the framework is like and what our team is excited about with MITRE as we move forward. 

Also, make sure you check out some of the related resources mentioned during this episode:

• MITRE ATT&CK Framework Q&A: What Red and Blue Teamers Should Know blog post by Meredith Kasper, Pentester, Hurricane Labs
• MITRE ATT&CK: Finding the Right Frame(work) for Your Map blog post by Brian Karrigan, SOC Analyst Tier II / Implementation, Hurricane Labs
• Man and Machine: A Look at Neurotechnology blog post by Jeremy Nenadal, Splunk Admin II, Hurricane Labs
• A Day in the Life of a SOC Architect blog post by John Blainer, SOC Analyst II, Hurricane Labs
• Hurricane Labs Careers – We are currently hiring for SOC and Splunk Development positions. Apply today! 

Click here for a transcript of our chat.

Improving Security Defenses with MITRE ATT&CK: Part 1

On today's show, Heather Terry welcomes Bill Mathews, Hurricane Labs' Owner and CTO, and Josh Silvestro, Hurricane Labs' SOC Tier II Team Lead, to discuss the MITRE ATT&CK framework. This conversation provides insight into what the framework is and its value to security teams. 

Also, make sure you check out some of the related resources mentioned during this episode: 

• MITRE ATT&CK Framework Q&A: What Red and Blue Teamers Should Know blog post by Meredith Kasper, Pentester, Hurricane Labs
• MITRE ATT&CK: Finding the Right Frame(work) for Your Map blog post by Brian Karrigan, SOC Analyst Tier II / Implementation, Hurricane Labs

Click here for a transcript of our conversation.

Straight from the SOC: Team Interview with Heather Terry and Hurricane Labs

On today’s show, Heather Terry welcomes three members of the Hurricane Labs' SOC (security operations center) team to share a bit about their career journeys, to answer some of the infosec questions we’ve been asked via social media, and to talk about how they deal with burnout. 

Also, make sure to check out some of the resources mentioned during this episode: 

• Building Virtual Machine Labs: A Hands-On Guide book by Tony Robinson, Senior Security Operations Analyst, Hurricane Labs
• 5 Insider Tips for Preventing Burnout in Cybersecurity blog post by Meredith Kasper, Pentester, Hurricane Labs
• MITRE ATT&CK Framework Q&A: What Red and Blue Teamers Should Know blog post by Meredith Kasper, Pentester, Hurricane Labs
• MITRE ATT&CK: Finding the Right Frame(work) for Your Map blog post by Brian Karrigan, SOC Analyst Tier II / Implementation, Hurricane Labs

Click here for a transcript of the discussion.

The Women in Tech-quila Episode: Raising a Toast to Women in STEM

In this podcast, Hurricane Labs Technical Writer Heather Terry, and VIP guest Hurricane Labs Director of Marketing Kelsey Clark, raise a toast to the Women in Tech 24-hour Virtual World Tour and chat about the highlights of their experience. Thanks for tuning in. Cheers!

 

Also, make sure you check out some of the fabulous resources we mention on the episode:

• Women in Tech
• The S.H.E. Strategy
• 5 Things First-Time Virtual Conference Goers Should Know

Click here for a transcript of our chat.

Reflections on the Technical Communication Summit 2020

In this podcast, Hurricane Labs Technical Writer Heather Terry talks about her experience at the Technical Communication Summit of 2020. 

Read the episode here.

Hurricane Labs Podcast for Splunk: The "We may be broken, but we still know some stuff about Splunk" Episode

Welcome back to the Hurricane Labs Podcast for Splunk! Your podcast hosts on this episode are Kelsey, Tom, and Brian (somehow all of us are apparently very broken, but we've still managed to get a few thoughts out about Splunk). 

In this episode we will be discussing quite a few topics, including:

• [0:00 - 0:36 seconds] 
  Time dedicated to our absolutely amazing host intros... 
  
  
• [00:37 - 4:25 minutes]
  The Hurricane Labs in-house created Broken Hosts App for Splunk, because we don't want you to find out your data is missing before you go to search for it. You can find the app on the featured section of our very own Splunk Apps page.
  
  
• [4:26 - 9:18 minutes]
  Some of the cool new features that are a part of Splunk 7.1 (Note: there are a few things mentioned here that have either come and gone, or that Splunk has addressed since the recording of the podcast). We have also created a couple of related screencasts about Goodbye Changeme and an overview of what the 7.1 UI looks like. Make sure you check those out too.
  
  
• [9:19 - 17:10 minutes]
  Phantom - how it's helping security teams with automation and orchestration, and also why we're excited about it. 
  
  
• [17:10 - 24:25 minutes]
  A few fun stories about Splunk's Annual Partner Symposium and then it pretty much goes downhill from there. Thanks for listening in! 

P.S. As Tom so nicely mentioned at the end, if you've been willing to put up with us for this podcast you should definitely do yourself a favor and check out our Splunk Tutorials Page and some of our other helpful resources on the Hurricane Labs website. Anddd we're on Twitter to, if that's your thing: @hurricanelabs. Thanks!