Hurricane Labs InfoSec Podcast

IoT: But y tho?

duh duh duhhhh the INTERNET OF THINGS *said in a loud, obnoxious wrestling announcer style voice* 

Podcast Topic (aka rant): On this episode Kelsey, Josh, Rob and Tim will be chatting (and yelling) about the Internet of Things...

Kelsey's Disclaimer: Kelsey personally apologizes for any vulgar language that may occur during the podcast XD 

Are you asking some of the same questions below? Then pop in those earpods and listen in!

• Why would I possibly want a smartwatch?
• What in the heck does "IoT" actually mean?
• Why would I want my toaster on the Internet?
• What makes security different for IoT devices?
• We can't even secure printers tho...?
• Is the "convenience" worth the risk?

Related articles and plugs: 

• Nest App for Splunk
• Confessions of a Consumer IoT Skeptic
• Hacker Claims He Hacked 150,000 Printers to 'Raise Awareness' About Hacking
• The 'internet of things' will invade your home, whether you like it or not
• The Internet of Things: Five critical questions
• IoT Series: "Roxanne" App for Splunk

If you have any thoughts, opinions, or just want to tell us how great you think we are, feel free to Tweet at us, leave us a comment on LinkedIn, Facebook, etc. And, as always, thanks for putting up with our shenanigans.

Hurricane Labs Podcast for Splunk: Third Edition

Hey Splunkers, it's been a while, but we're back! This is the Hurricane Labs Podcast for Splunk: Third Edition, and we're going to call this the "It's not magic, it's Splunk" segment. Your hosts on this podcast are Kelsey (marketing person who no longer wants to host this particular podcast), Steve (SOC department lead), Tom (Splunk admin department lead), and Tim (who gets told what to do by Steve and Tom, is the only one who actually does any work, and is one of HL's Splunk engineers). ;) 

In this podcast, we'll be discussing Tim and Tom's .conf presentation highlights surrounding Splunk and monitoring, as well as conversing about new and upcoming features that connect with the admin side of things and also some of the improvements we're seeing on the security side of things. 

Disclaimer: We like to keep these podcasts interesting and informative, as well as realistic and down to earth; however, gotta toss it out there that we do NOT speak on the entire behalf of Hurricane Labs, nor do we speak on the behalf of Splunk>. We're here to discuss our thoughts surrounding Splunk and hope you can fish something (anything) useful out of our deep pool of knowledge. 

Oh, and if you are going to be around tomorrow at our big annual Information Security Summit, make sure you check out Tom and Steve's talk (it's Thursday after the keynote, so you should be caffeinated and ready to hear about how you can win at compliance!!! Woo!). See presentation details here. 

Feel free to Tweet us with any questions, thoughts, concerns, and/or other random things. You can find us on Twitter at @hurricanelabs, or if you need someone to yell at you can always find Kelsey at @unfoldmybrain too. 

Isn't ransomware hosted in Transylvania?

(...but really). Is ransomware the biggest threat in cybersecurity right now? Which side of the "to pay, or not to pay" argument do we land on? What does the future of ransomware look like? How do enterprises and users avoid this malicious software that locks down their critical business data? 

These and other questions (that are less ridiculous than the podcast title), will be discussed by Kelsey Clark (host and marketing person), Corey Ham (penetration tester), Tom Kopchak (doer of stuff and things), and Marc Fears (SOC team and first time podcaster!). This is Episode .09: The "Isn't ransomware hosted in Transylvania?" Episode. Listen if you dare...

Articles of reference: 

• A Short History & Evolution of Ransomware
• Ransomware is now the biggest cybersecurity threat
• LA Hospital Hit By Ransomware Pays Hackers $17,000: Is It The Right Choice?
• FBI Reaffirms Stance Not to Pay Ransomware Attackers
• Canary in the ransomware mine
• Cisco Talos Blog - Ransomware: Past, Present, and Future
• Cryptoworms: The future of ransomware hell

Other shenanigans:

• Pittsburgh Splunk> User Group | Hurricane Labs
• "Splunkbuilders Association: Making Splunk ES Into Your Dream Home" blog post by Chris Crane
• "YARA: Incident Response Host Prioritization" blog post by Trevor Bammel
• "Gathering LDAP Identity Data with Splunk Cloud" blog post by Ryan O'Connor

Hurricane Labs Podcast for Splunk: Second Edition

Our big topic of discussion is Splunk Cloud - the good, the bad, and the ugly; we also cover some of the interesting features of Enterprise Security 4.0, including some things about Tim's favorite new feature; Cameron (CAMRON!) has *** Cameron's "Rant Sesh" Section***; Kelsey gets fired; and basically we have lots of opinions (as per usual) and a few REALLY amazing segues throughout our podcast. So, listen in to your hosts: Bill (@billford), Tim, Cameron, and Kelsey (@unfoldmybrain), (if you dare...) for some authentic Splunk insights.   

Kelsey's Announcements: 

On the podcast Kelsey gives a quick review of the Hurricane Labs Cleveland and Pittsburgh Splunk> User Groups we hosted in February. We're also looking to improve these events moving forward, so if you have any cool ideas that are more hands-on and interactive, or topics will generally be advantageous to you as the user, feel free to reach out to Kelsey at kelsey@hurricanelabs.com.  

Other Notes: 

If you're in any of these locations in March, April, and/or May, you will be graced with our presence at a few of the upcoming SplunkLive! events:  

• SplunkLive! Charlotte, March 29th, 2016
• SplunkLive! Altanta, April 21st, 2016
• SplunkLive! Chicago, May 5th, 2016

 

And, of course, check out Trevor Bammel's latest Splunk-savvy blog post: Splunk Geostats: Because Where in the World Is It? 

 

No, You Can't Close Pandora's Box

So, what's really going on with the Apple-FBI encryption debate and what are the major concerns surrounding it? Also, did you hear about that hospital that was hit by ransomware? Interested in some "official" Hurricane Labs tips on how you can avoid this type of attack? Listen in!

This is Hurricane Labs' InfoSec Podcast Episode .08: The "No, You Can't Close Pandora's Box" Edition, featuring Kelsey Clark (marketing person and list maker), Corey Ham (pen tester), Tom Kopchak (someone in charge of something), and Nathan Burrows (the thing Tom's in charge of). 

Show Articles:

• The war between the FBI and Apple just heated up again
• FAQ: Everything you need to know about Apple, encryption, and the FBI
• A Technical Perspective on the Apple iPhone Case
• Apple's Time Cook vs. the FBI, round two: "This case is about much more than a single phone"
• Ransomware Hackers A Bigger Threat Than Ever, Forcing Hospitals And Police To Pay Hostage Fees
• Hollywood hospital coughs up 40 bitcoins to ransomware crooks

Blurred Lines and the Murkiness of Cyberwar

What can, or should, the Internet and Social Media companies do to fight terrorism? How do we wade through the murkiness of cyber defense and offense when it comes to war? What happened with the DDoS attack on the Internet's backbone and is it worth worrying about? 

This is Episode .07: The "Blurred Lines and the Murkiness of Cyberwar" Edition, featuring Kelsey Clark (Host and Marketing Person), Tom Kopchak (Doer of Stuff and Things), Rob Palcisko (Intern turned Full-Time Network Engineer); and Neil Madaczky (Splunk and The Webs). 

Show note articles: 

• Terror on Twitter: How ISIS is taking war on social media - and social media is fighting back 
• What Can - Or Should - Internet Companies Do To Fight Terrorism?
• New Bill Would Force Social Media Companies To Identify Potential Terrorists, Report Them To Government
• Politico's The Agenda Cyber Issue: America's Secret Arsenal
• Attack floods Internet root servers with 5 million queries per second   
• It Works! Google's Quantum Computer is '100 Million Times Faster' than a PC

Hurricane Labs Podcast for Splunk: First Edition

No, you can't magic data... But we will be talking about some things you can do with Splunk! Welcome to the first edition of the Hurricane Labs Podcast for Splunk, with your hosts Bill (@billford), Tim, Ian (@ianisgood), and Kelsey (@k1clark).

 

Topics of Discussion: 

• Splunk 6.3 Release Overview
  Release Notes - Welcome to Splunk Enterprise 6.3 
• Our Splunk "Boos" and "Yays"
• Tim Baldwin's Related Blog Post -
  "Splunk All the Things: What will you see with 6.3?"
  
• Splunk IT Service Intelligence (ITSI App) 
• Impact on the Internet of Things
• Real-Life Security Use Cases 
• Best Practices and Approaches 

Side note... During our discussion about IoT, Fitbits, and exercise, we went on a thrilling tangent about "Zombies, Run!", which is an app that is supposed to simulate you being chased by zombies in order to help you during your running workout.

 

Check out Hurricane Labs Splunk Apps: Download for free here 

Join our Splunk-savvy LinkedIn Group: Just Splunk IT! 

 

Thanks for tuning in! 

 

Out of Sight and Beyond Oversight

This is Episode .06: The "Out of Sight and Beyond Oversight" Edition, featuring Kelsey Clark (Host), Corey Ham (Pen Tester), Tom Kopchak (Senior Security Engineer & Ops Team Lead), and first time podcaster John Haprian (Director of Technical Services). Episode .06 topics of discussion include: EMV stuff, Volkswagen probs, something about 'Whammies,' and more.  

Interested in keeping closer tabs on when our podcast episodes are released? 

Subscribe to our Weekly Beacon to catch all the top Hurricane Labs content, along with the best centralized collection of InfoSec Headlines, Software Updates, and General Tech Articles of the week. 

Subscribe here: https://beacon.hurricanelabs.com

Oh, so life really can slap you with consequences...

This is Episode .05: The "Oh, so life really does have consequences..." Edition, featuring Kelsey Clark (Marketing Person), Corey Ham (Pen Tester), Tom Kopchak (Senior Security Engineer & Ops Team Lead), and Barton Yadlowski (Splunker & Data Scientist).  

Just a quick show note: Tom references a blog article he wrote a while back during the podcast, which is called "Watch Your Backdoors." So, check that out if you haven't already. 

Also, if you have any thoughts, comments, or ideas about topics you would like us to discuss on our podcast, feel free to reach out to Hurricane Labs on Twitter (@hurricanelabs) and Kelsey via email at kelsey@hurricanelabs.com. 

[Play Episode Below]

"Don't Bother Trusting, Verify Everything" - Feat. Wolfgang Goerlich, Cyber Security Strategist, CBI

This podcast was recorded by the Hurricane Labs crew, and special guest Wolfgang Goerlich, at the 2015 Converge Conference. Topics of discussion (and witty banter) include: FBI anti-encryption rhetoric; the Hacking Team hack; Google's social responsibility; and more. Converge and BSides Detroit were fantastic - if you didn't get the chance to make it out this year, you can still view the video presentation recordings here: Converge 2015 Videos. Thanks to Wolf and all the sponsors, volunteers, speakers and everyone who made these conferences possible! 

Twitter and things...

 

Wolfgang Goerlich - @jwgoerlich

Tom Kopchak - @TomKopchak

Nick Jacob - @MortiousPrime

Calvin Hedler - @001SPARTaN 

Kelsey Clark - @k1clark

Hurricane Labs - @hurricanelabs

Converge Detroit - @ConvergeDetroit