In this final edition of the Exploring Information Security podcast, I talk about my reasons for stopping production on episodes. This isn’t the easiest thing to do. Now that I’m writing the podcast post after recording and editing the podcast, I have a sense of relief. For the last month plus, I’ve tried to decide whether or not to shut down the podcast. The fact that it took this long to record a final episode tells me that it was time. I wrote about my reasoning in a blog post on the main page. This may or may not be the end. That largely depends on if someone would like to pick up the podcast and produce it themselves. I’d love to guide and mentor someone on the journey. The podcast has been beneficial to me and the many people who have reached out providing appreciative feedback. I’d love to see it continue. I’m also content that this is the end of the podcast. I will be at BSides Nashville shooting pictures and very likely be at DEFCON manning the Social Engineering door. Come see high or reach out to me on social media (@TimothyDeBlock) or email (timothy[.]deblock[@]gmail[.]com).

In this final edition of the Exploring Information Security podcast, I talk about my reasons for stopping production on episodes. This isn’t the easiest thing to do. Now that I’m writing the podcast post after recording and editing the podcast, I have a sense of relief. For the last month plus, I’ve tried to decide whether or not to shut down the podcast. The fact that it took this long to record a final episode tells me that it was time. I wrote about <a href="http://www.timothydeblock.com/blog/2019/3/6/life-and-podcast-update" rel="nofollow" target="_blank">my reasoning in a blog post on the main page</a>. This may or may not be the end. That largely depends on if someone would like to pick up the podcast and produce it themselves. I’d love to guide and mentor someone on the journey. The podcast has been beneficial to me and the many people who have reached out providing appreciative feedback. I’d love to see it continue. I’m also content that this is the end of the podcast. I will be at BSides Nashville shooting pictures and very likely be at DEFCON manning the Social Engineering door. Come see high or reach out to me on social media (<a href="https://twitter.com/TimothyDeBlock" rel="nofollow" target="_blank">@TimothyDeBlock</a>) or email (timothy[.]deblock[@]gmail[.]com).

The Final Episode

In this inagural stream of the Exploring Information Security podcast, Daniel Ebbutt and Kyle Andrus join me to talk about Emotet.Daniel (@notdanielebbutt) and Kyle (@chaoticflaws) are the two guys I go to for clicking on suspicious links. Recently, I’ve been seeing more Emotet. So, I wanted to have the guys on to talk about the malware that is making a comeback. The CFP is open for Converge Conference. The conference is May 16 and 17. They’ll have one day for blue team topics and one day for red team topics. Make sure to submit your malware related talk topics. Also make sure to check out MiSec if you’re in Michigan.In this episode we discuss:How is Emotet being constructedWhat are some of the indicators of Emotet?How Emotet is being mitigatedWhat does Emotet do? [RSS Feed] [iTunes]      

In this inagural stream of the Exploring Information Security podcast, Daniel Ebbutt and Kyle Andrus join me to talk about Emotet.Daniel (<a href="https://twitter.com/notdanielebbutt" rel="nofollow" target="_blank">@notdanielebbutt</a>) and Kyle (<a href="https://twitter.com/chaoticflaws" rel="nofollow" target="_blank">@chaoticflaws</a>) are the two guys I go to for clicking on suspicious links. Recently, I’ve been seeing more Emotet. So, I wanted to have the guys on to talk about the malware that is making a comeback. The CFP is open for <a href="https://www.convergeconference.org/" rel="nofollow" target="_blank">Converge Conference</a>. The conference is May 16 and 17. They’ll have one day for blue team topics and one day for red team topics. Make sure to submit your malware related talk topics. Also make sure to check out <a href="https://www.misec.us/" rel="nofollow" target="_blank">MiSec </a>if you’re in Michigan.In this episode we discuss:<ul><li>How is Emotet being constructed</li><li>What are some of the indicators of Emotet?</li><li>How Emotet is being mitigated</li><li>What does Emotet do?</li></ul> [<a href="http://www.timothydeblock.com/eis?format=rss" rel="nofollow" target="_blank">RSS Feed</a>] [<a href="https://itunes.apple.com/us/podcast/eis-podcast-timothy-de-block/id1026428940" rel="nofollow" target="_blank">iTunes</a>]

What is Emotet?

In this end of the year podcast, I discuss the state of the podcast for 2018 and what’s ahead for 2019.2018 was a good year. I made some format changes that I’m really happy with. I picked up some new audio equipment. I resolved my recording process (I think). I’m not a big statistics guy. I don’t really care if two people or 200 people listen. I’m just happy to have some really great conversations with people and contribute back to the community. 2018 StatisticsHere’s a really interesting graph of my RSS Subscribers.  No, I don’t have 40,000 listeners. Some of that is inflated by other podcast directories ripping my feed. What I look for is a steady increase in subscribers, which did happen by the end of the year. Albeit with a weird dip in November (broken feed, maybe).  This is from iTunes Connect (Beta). I can’t do a yearly review of podcast stats. Instead here’s the peek month of October for my iTunes listening habits. Looking through all the months, I can make some inferences about my audience. The hacking/red team content is the most popular. With a 25-28% consumption rate, the conference podcasts are turned off by most people before the end. What’s ahead for 2019I’ve got a new recording setup that will hopefully make producing a podcast much easier. I’ve setup a Twitch channel for gaming and potentially recording EIS episodes on. Follow for notifications on when I go live. I’ll be trying my first EIS episode Monday, January 7, 2019, at 8:30 p.m. CT. I’ve also turned what was my attempt at a GamerSec Discord channel into the Exploring Information Security channel. Here you can interact with us while record (or on Twitch).  Join other people interesting in the podcast. Game with other infosec professionals. Thank you for being a listener of the podcast. I am refreshed from my month off and energized for what’s ahead in 2019.  [RSS Feed] [iTunes]    

In this end of the year podcast, I discuss the state of the podcast for 2018 and what’s ahead for 2019.2018 was a good year. I made some format changes that I’m really happy with. I picked up some new audio equipment. I resolved my recording process (I think). I’m not a big statistics guy. I don’t really care if two people or 200 people listen. I’m just happy to have some really great conversations with people and contribute back to the community. <h2>2018 Statistics</h2>Here’s a really interesting graph of my RSS Subscribers. No, I don’t have 40,000 listeners. Some of that is inflated by other podcast directories ripping my feed. What I look for is a steady increase in subscribers, which did happen by the end of the year. Albeit with a weird dip in November (broken feed, maybe). This is from iTunes Connect (Beta). I can’t do a yearly review of podcast stats. Instead here’s the peek month of October for my iTunes listening habits. Looking through all the months, I can make some inferences about my audience. The hacking/red team content is the most popular. With a 25-28% consumption rate, the conference podcasts are turned off by most people before the end. <h2>What’s ahead for 2019</h2>I’ve got a new recording setup that will hopefully make producing a podcast much easier. I’ve setup a <a href="https://www.twitch.tv/jeditimmy" rel="nofollow" target="_blank">Twitch channel</a> for gaming and potentially recording EIS episodes on. Follow for notifications on when I go live. I’ll be trying my first EIS episode Monday, January 7, 2019, at 8:30 p.m. CT. I’ve also turned what was my attempt at a GamerSec <a href="https://discord.gg/tMghF9d" rel="nofollow" target="_blank">Discord channel </a>into the Exploring Information Security channel. Here you can interact with us while record (or on Twitch). Join other people interesting in the podcast. Game with other infosec professionals. Thank you for being a listener of the podcast. I am refreshed from my month off and energized for what’s ahead in 2019. [<a href="http://www.timothydeblock.com/eis?format=rss" rel="nofollow" target="_blank">RSS Feed</a>] [<a href="https://itunes.apple.com/us/podcast/eis-podcast-timothy-de-block/id1026428940" rel="nofollow" target="_blank">iTunes</a>]

State of the podcast for 2018

In this Hyatt recorded edition of the Exploring Information Security podcast, Micah Hoffman, Josh Huff, and Justin Nordine. Micah (@WebBreacher), Josh (@baywolf88), and Justin (@jnordine) join me to go over a variety of topics at DerbyCon 2018. The Hyatt was kind enough to provide space near the bar (shout to the amazing Lauren). In this episode we discuss:Why other industries don’t use OSINTWhere to find your nicheWhat are some frustrations of mentorshipHow apps are impacting our lives [RSS Feed] [iTunes]         Subscribe Sign up with your email address to receive news and updates.    Email AddressSign UpWe respect your privacy.    Thank you!

In this Hyatt recorded edition of the Exploring Information Security podcast, Micah Hoffman, Josh Huff, and Justin Nordine. Micah (<a href="https://twitter.com/WebBreacher" rel="nofollow" target="_blank">@WebBreacher</a>), Josh (<a href="https://twitter.com/baywolf88" rel="nofollow" target="_blank">@baywolf88</a>), and Justin (<a href="https://twitter.com/jnordine" rel="nofollow" target="_blank">@jnordine</a>) join me to go over a variety of topics at DerbyCon 2018. The Hyatt was kind enough to provide space near the bar (shout to the amazing Lauren). In this episode we discuss:<ul><li>Why other industries don’t use OSINT</li><li>Where to find your niche</li><li>What are some frustrations of mentorship</li><li>How apps are impacting our lives</li></ul> [<a href="http://www.timothydeblock.com/eis?format=rss" rel="nofollow" target="_blank">RSS Feed</a>] [<a href="https://itunes.apple.com/us/podcast/eis-podcast-timothy-de-block/id1026428940" rel="nofollow" target="_blank">iTunes</a>] <h2>Subscribe</h2> Sign up with your email address to receive news and updates. Email Address Sign Up We respect your privacy. Thank you!

What's happening at DerbyCon 2018 - Part 2

In this Hyatt recorded edition of the Exploring Information Security podcast, Micah Hoffman, Josh Huff, and Justin Nordine join me at DerbyCon 2018.Micah (@WebBreacher), Josh (@baywolf88), and Justin (@jnordine) join me to go over a variety of topics at DerbyCon 2018. The Hyatt was kind enough to provide space near the bar (shout to the amazing Lauren). In this episode we discuss:What OSINT classes and projects everyone is working onWhy contributing is importantWhat value conferences like DerbyCon provideWhy hotels hate accountant conferences [RSS Feed] [iTunes]         Subscribe Sign up with your email address to receive news and updates.    Email AddressSign UpWe respect your privacy.    Thank you!

In this Hyatt recorded edition of the Exploring Information Security podcast, Micah Hoffman, Josh Huff, and Justin Nordine join me at DerbyCon 2018.Micah (<a href="https://twitter.com/WebBreacher" rel="nofollow" target="_blank">@WebBreacher</a>), Josh (<a href="https://twitter.com/baywolf88" rel="nofollow" target="_blank">@baywolf88</a>), and Justin (<a href="https://twitter.com/jnordine" rel="nofollow" target="_blank">@jnordine</a>) join me to go over a variety of topics at DerbyCon 2018. The Hyatt was kind enough to provide space near the bar (shout to the amazing Lauren). In this episode we discuss:<ul><li>What OSINT classes and projects everyone is working on</li><li>Why contributing is important</li><li>What value conferences like DerbyCon provide</li><li>Why hotels hate accountant conferences</li></ul> [<a href="http://www.timothydeblock.com/eis?format=rss" rel="nofollow" target="_blank">RSS Feed</a>] [<a href="https://itunes.apple.com/us/podcast/eis-podcast-timothy-de-block/id1026428940" rel="nofollow" target="_blank">iTunes</a>] <h2>Subscribe</h2> Sign up with your email address to receive news and updates. Email Address Sign Up We respect your privacy. Thank you!

What's happening at DerbyCon 2018 - Part 1

In this whiskey fueled edition of the Exploring Information Security podcast, Ryan MacDougall and Colin Hadnagy of Social Engineer join me to discuss advanced OSINT.This past DerbyCon, I had the opportunity to take the Advanced OSINT with Ryan (@joemontmania) and Colin (@UnmaskedSE). The course was great! It was different from some of the other OSINT courses I’ve taken. They covered very specific techniques and tools. After presenting on those techniques and tools we were given the opportunity to dive in from a free-form standpoint. If you’d like to take the training, signup for their April 23-24, 2019, training in Denver Colorado.Also, you can catch Ryan at the  First Pacific Hackers Conference, November 9-11, 2018. In this episode we discuss:What is advanced OSINTWhat is the mindset needed for OSINTWhat are some of the tools used for OSINTHow to phish an organizationa [RSS Feed] [iTunes]       Subscribe Sign up with your email address to receive news and updates.    Email AddressSign UpWe respect your privacy.    Thank you!

In this whiskey fueled edition of the Exploring Information Security podcast, Ryan MacDougall and Colin Hadnagy of Social Engineer join me to discuss advanced OSINT.This past DerbyCon, I had the opportunity to take the Advanced OSINT with Ryan (<a href="https://twitter.com/joemontmania" rel="nofollow" target="_blank">@joemontmania</a>) and Colin (<a href="https://twitter.com/UnmaskedSE" rel="nofollow" target="_blank">@UnmaskedSE</a>). The course was great! It was different from some of the other OSINT courses I’ve taken. They covered very specific techniques and tools. After presenting on those techniques and tools we were given the opportunity to dive in from a free-form standpoint. If you’d like to take the training, signup for their<a href="https://www.social-engineer.com/advanced-osi/" rel="nofollow" target="_blank"> April 23-24, 2019, training in Denver Colorado</a>.Also, you can catch Ryan at the First <a href="https://phack.org/" rel="nofollow" target="_blank">Pacific Hackers Conference</a>, November 9-11, 2018. In this episode we discuss:<ul><li>What is advanced OSINT</li><li>What is the mindset needed for OSINT</li><li>What are some of the tools used for OSINT</li><li>How to phish an organizationa</li></ul> [<a href="http://www.timothydeblock.com/eis?format=rss" rel="nofollow" target="_blank">RSS Feed</a>] [<a href="https://itunes.apple.com/us/podcast/eis-podcast-timothy-de-block/id1026428940" rel="nofollow" target="_blank">iTunes</a>] <h2>Subscribe</h2> Sign up with your email address to receive news and updates. Email Address Sign Up We respect your privacy. Thank you!

What is advanced OSINT?

In this authenticated edition of the Exploring Information Security podcast, I talk about when passwords will finally die!This is a solo episode. I had the idea after sitting in a vendor pitch today (and because I’m slacking on my editing) where one of the sales guy mentioned that passwords WILL die. I disagree. I think passwords have been around for a long time and will continue to be around. They’re easily replaceable and is stored in the most secure location. Unless there are mind readers, then we’re all just screwed anyway. I would love some thoughts and feedback on this one.  [RSS Feed] [iTunes]     Subscribe Sign up with your email address to receive news and updates.    Email AddressSign UpWe respect your privacy.    Thank you!

In this authenticated edition of the Exploring Information Security podcast, I talk about when passwords will finally die!This is a solo episode. I had the idea after sitting in a vendor pitch today (and because I’m slacking on my editing) where one of the sales guy mentioned that passwords WILL die. I disagree. I think passwords have been around for a long time and will continue to be around. They’re easily replaceable and is stored in the most secure location. Unless there are mind readers, then we’re all just screwed anyway. I would love some thoughts and feedback on this one. [<a href="http://www.timothydeblock.com/eis?format=rss" rel="nofollow" target="_blank">RSS Feed</a>] [<a href="https://itunes.apple.com/us/podcast/eis-podcast-timothy-de-block/id1026428940" rel="nofollow" target="_blank">iTunes</a>] <h2>Subscribe</h2> Sign up with your email address to receive news and updates. Email Address Sign Up We respect your privacy. Thank you!

When will passwords go away?

Stu (@cybersecstu) is a Co-Founder of The Many Hats Club, which is a massive Discord community and podcast. Earlier this year, Stu started sharing Unusual Journeys. I love this series because it highlights that there is no true path into infosec. He’s had 18 series so far and each story is fascinating.In this episode we discuss:Why failure is goodWhat sticks out from theses storiesWhat are some of the backgrounds people come from

Stu (<a href="https://twitter.com/cybersecstu" rel="nofollow" target="_blank">@cybersecstu</a>) is a Co-Founder of <a href="https://twitter.com/themanyhatsclub" rel="nofollow" target="_blank">The Many Hats Club</a>, which is a massive <a href="https://discordapp.com/invite/infosec" rel="nofollow" target="_blank">Discord community</a> and podcast. Earlier this year, Stu started sharing <a href="https://www.secjuice.com/tag/unusual-journeys/" rel="nofollow" target="_blank">Unusual Journeys</a>. I love this series because it highlights that there is no true path into infosec. He’s had 18 series so far and each story is fascinating.In this episode we discuss:Why failure is goodWhat sticks out from theses storiesWhat are some of the backgrounds people come from

What we can learn from unusual journeys into infosec - Part 2

Stu (@cybersecstu) is a Co-Founder of The Many Hats Club, which is a massive Discord community and podcast. Earlier this year, Stu started sharing Unusual Journeys. I love this series because it highlights that there is no true path into infosec. He’s had 18 series so far and each story is fascinating.In this episode we discuss:What started Unusual JourneysHow Stu got into infosecWhat we can learn from these stories

Stu (<a href="https://twitter.com/cybersecstu" rel="nofollow" target="_blank">@cybersecstu</a>) is a Co-Founder of <a href="https://twitter.com/themanyhatsclub" rel="nofollow" target="_blank">The Many Hats Club</a>, which is a massive <a href="https://discordapp.com/invite/infosec" rel="nofollow" target="_blank">Discord community</a> and podcast. Earlier this year, Stu started sharing <a href="https://www.secjuice.com/tag/unusual-journeys/" rel="nofollow" target="_blank">Unusual Journeys</a>. I love this series because it highlights that there is no true path into infosec. He’s had 18 series so far and each story is fascinating.In this episode we discuss:What started Unusual JourneysHow Stu got into infosecWhat we can learn from these stories

What we can learn from unusual journeys into infosec - Part 1

Claire (@ClaireTills) doesn’t have your typical roll in infosec. She sits between the security teams and marketing team. It’s a fascinating roll and something that gives her a lot of insight into multiple parts of the business. What works and what doesn’t work in communicating security to the different areas. Check her blog out.In this episode we discuss:How important is it for the company to take security seriouslyHow would someone get started improving communication?Why we have a communication problem in infosecWhere should people startMore resources:Networking with Humans to Create a Culture of Security by Tracy Maleeff - BSides NoVa 2017Courtney K BsidesLV 2018, Implementing the Three Cs of Courtesy, Clarity, and Comprehension to Optimize End User Engagement (video not available yet)BSidesWLG 2017 - Katie Ledoux - Communication: An underrated tool in the infosec revolutionJeff Man, The Art of the Jedi Mind TrickThe Thing Explainer: Complicated Stuff in Simple WordsChris Roberts, Communication Across Ranges

Claire (<a href="https://twitter.com/clairetills" rel="nofollow" target="_blank">@ClaireTills</a>) doesn’t have your typical roll in infosec. She sits between the security teams and marketing team. It’s a fascinating roll and something that gives her a lot of insight into multiple parts of the business. What works and what doesn’t work in communicating security to the different areas. Check her <a href="http://www.clairetills.com" rel="nofollow" target="_blank">blog</a> out.In this episode we discuss:How important is it for the company to take security seriouslyHow would someone get started improving communication?Why we have a communication problem in infosecWhere should people startMore resources:<a href="https://www.youtube.com/watch?v=bbfyXTZCVC0&amp;list=PLNhlcxQZJSm95e9Z5mvkAk5H3eEBFuVSf&amp;t=0s&amp;index=14" rel="nofollow" target="_blank">Networking with Humans to Create a Culture of Security by Tracy Maleeff - BSides NoVa 2017</a>Courtney K BsidesLV 2018, Implementing the Three Cs of Courtesy, Clarity, and Comprehension to Optimize End User Engagement (video not available yet)BSidesWLG 2017 - Katie Ledoux - <a href="https://www.youtube.com/watch?v=WFMOrzv3LIQ" rel="nofollow" target="_blank">Communication: An underrated tool in the infosec revolution</a>Jeff Man, <a href="https://www.cybrary.it/skill-certification-course/art-of-the-jedi-mind-trick-certification-training-course" rel="nofollow" target="_blank">The Art of the Jedi Mind Trick</a><a href="https://www.amazon.com/Randall-Munroe-Thing-Explainer-%E3%80%902017%E3%80%91/dp/B0794RK4N1/ref=sr_1_2?ie=UTF8&amp;qid=1538003119&amp;sr=8-2&amp;keywords=The+Thing+Explainer%3A+Complicated+Stuff+in+Simple+Words&amp;dpID=51s4o9Op%252BVL&amp;preST=_SY300_QL70_&amp;dpSrc=srch" rel="nofollow" target="_blank">The Thing Explainer: Complicated Stuff in Simple Words</a>Chris Roberts, <a href="https://www.peerlyst.com/posts/communication-across-the-ranges-chris-roberts" rel="nofollow" target="_blank">Communication Across Ranges</a>

Why communication in infosec is important - Part 2

The Exploring Information Security podcast interviews a different professional each week exploring topics, ideas, and disciplines within information security. Prepare to learn, explore, and grow your security mindset.

I am saddened and yet thrilled to finish listening to the other podcasts. I just founds this and it’s great!!!! It says FIN but you never know I can always hope! Ms Laulei De La ROsa on FB

I just found this and it’s great!

This is the podcast I have been looking for. Keep up the great work!

Finally...

Exploring Information Security - Exploring Information Security

In this reddish edition of the Exploring Information Security podcast, Andrew Morris of Endgame joins me to discuss how to become a penetration tester. Andrew (@Andrew___Morris) is a security researcher at Endgame. Before he got that role he was a penetration tester. I had an opportunity to get to know Andrew at some events in the Columbia, SC. He's very knowledgeable and excited about what he does in the information security space. In this two-part series we discuss some of the nuances of being a pen tester and how to find yourself in that particular role. In this episode we discuss: What is a penetration tester?Why become a penetration tester?What writing a report is likeWhat is the day-to-day life of a pen tester More resources: /r/netsecRoom362 - Rob FullerCarnal0wnage - Chris GatesMetasploitExploit Mondayg0tmi1kCobalt Strikeharmj0yActive Directory SecurityPassing the HashEnigma0X3IrongeekSkullSecurity [RSS Feed] [iTunes]

In this reddish edition of the Exploring Information Security podcast,<a href="https://morris.sc/" rel="nofollow" target="_blank"> Andrew Morris</a> of <a href="https://www.endgame.com/" rel="nofollow" target="_blank">Endgame</a> joins me to discuss how to become a penetration tester. Andrew (<a href="https://twitter.com/Andrew___Morris" rel="nofollow" target="_blank">@Andrew___Morris</a>) is a security researcher at Endgame. Before he got that role he was a penetration tester. I had an opportunity to get to know Andrew at some events in the Columbia, SC. He's very knowledgeable and excited about what he does in the information security space. In this two-part series we discuss some of the nuances of being a pen tester and how to find yourself in that particular role. In this episode we discuss: <ul><li>What is a penetration tester?</li><li>Why become a penetration tester?</li><li>What writing a report is like</li><li>What is the day-to-day life of a pen tester</li></ul> More resources: <ul><li><a href="https://www.reddit.com/r/netsec/" rel="nofollow" target="_blank">/r/netsec</a></li><li><a href="https://room362.com/" rel="nofollow" target="_blank">Room362 - Rob Fuller</a></li><li><a href="http://carnal0wnage.attackresearch.com/" rel="nofollow" target="_blank">Carnal0wnage - Chris Gates</a></li><li><a href="https://www.metasploit.com/" rel="nofollow" target="_blank">Metasploit</a></li><li><a href="http://www.exploit-monday.com/" rel="nofollow" target="_blank">Exploit Monday</a></li><li><a href="http://blog.g0tmi1k.com/" rel="nofollow" target="_blank">g0tmi1k</a></li><li><a href="https://blog.cobaltstrike.com/" rel="nofollow" target="_blank">Cobalt Strike</a></li><li><a href="http://www.harmj0y.net/blog/" rel="nofollow" target="_blank">harmj0y</a></li><li><a href="http://adsecurity.org/" rel="nofollow" target="_blank">Active Directory Security</a></li><li><a href="http://passing-the-hash.blogspot.com/" rel="nofollow" target="_blank">Passing the Hash</a></li><li><a href="https://enigma0x3.net/" rel="nofollow" target="_blank">Enigma0X3</a></li><li><a href="http://www.irongeek.com/" rel="nofollow" target="_blank">Irongeek</a></li><li><a href="https://blog.skullsecurity.org/" rel="nofollow" target="_blank">SkullSecurity</a></li></ul> [<a href="http://www.timothydeblock.com/eis?format=rss" rel="nofollow" target="_blank">RSS Feed</a>] [<a href="https://itunes.apple.com/us/podcast/eis-podcast-timothy-de-block/id1026428940" rel="nofollow" target="_blank">iTunes</a>]

How to become a penetration tester - Part 1

In this crackerjack edition of the Exploring Information Security podcast, Sean Peterson of Parameter Security joins me to discuss password cracking.Sean (@SeanThePeterson), is one of the most passionate infosec people you don't know. He recently did a talk at ShowMeCon on how to crack passwords. It was his first ever talk and pretty damn good. Sean joined me to give me his insights into password cracking.In this episode we discuss:What type of hardware is needed for password crackingWhat type of attacks are used for password crackingHow to crack passwordsWhat's ahead for password cracking [RSS Feed] [iTunes]  Subscribe Sign up with your email address to receive news and updates.    Email AddressSign UpWe respect your privacy.    Thank you!

In this crackerjack edition of the Exploring Information Security podcast, Sean Peterson of <a href="https://www.parametersecurity.com/" rel="nofollow" target="_blank">Parameter Security</a> joins me to discuss password cracking.Sean (<a href="https://twitter.com/SeanThePeterson" rel="nofollow" target="_blank">@SeanThePeterson</a>), is one of the most passionate infosec people you don't know. He recently did a talk at <a href="https://showmecon.com/" rel="nofollow" target="_blank">ShowMeCon</a> on <a href="https://www.youtube.com/watch?v=8W3gdCdlduE" rel="nofollow" target="_blank">how to crack passwords</a>. It was his first ever talk and pretty damn good. Sean joined me to give me his insights into password cracking.In this episode we discuss:<ul><li>What type of hardware is needed for password cracking</li><li>What type of attacks are used for password cracking</li><li>How to crack passwords</li><li>What's ahead for password cracking</li></ul> [<a href="http://www.timothydeblock.com/eis?format=rss" rel="nofollow" target="_blank">RSS Feed</a>] [<a href="https://itunes.apple.com/us/podcast/eis-podcast-timothy-de-block/id1026428940" rel="nofollow" target="_blank">iTunes</a>] <h2>Subscribe</h2> Sign up with your email address to receive news and updates. Email Address Sign Up We respect your privacy. Thank you!

How to crack passwords

In this studious edition of the Exploring Information Security podcast, Offensive Security Certified Professional (OSCP) Chris Maddalena joins me to discuss how to prepare for the OSCP certification.Chris (@cmaddalena) returns to talk about how he got his OSCP. He didn't get it on his first attempt. He did learn from his first attempt, though, and passed the exam on his second attempt. He was willing to come on the podcast to describe his experience and provide tips for others looking to acquire the certification. The exam is not easy. It's a 24-hour exam that includes writing a report as well as performing a penetration test. Preparation for the exam is very important.In this episode we discuss:What is the OSCP and OSCEWhy someone should pursue the OSCPWhat is the test likeHow Chris' first attempt wentMore resources (h/t @KrvRob):OverTheWirePrep Guide For OffSecs PWKHow to prepare for PWK/OSCP, a noob-friendly guideOSCP-Prep - GitHub [RSS Feed] [iTunes]

In this studious edition of the Exploring Information Security podcast, Offensive Security Certified Professional (OSCP) Chris Maddalena joins me to discuss how to prepare for the OSCP certification.Chris (<a href="https://twitter.com/cmaddalena" rel="nofollow" target="_blank">@cmaddalena</a>) returns to talk about how he got his OSCP. He didn't get it on his first attempt. He did learn from his first attempt, though, and passed the exam on his second attempt. He was willing to come on the podcast to describe his experience and provide tips for others looking to acquire the certification. The exam is not easy. It's a 24-hour exam that includes writing a report as well as performing a penetration test. Preparation for the exam is very important.In this episode we discuss:<ul><li>What is the OSCP and OSCE</li><li>Why someone should pursue the OSCP</li><li>What is the test like</li><li>How Chris' first attempt went</li></ul>More resources (h/t <a href="https://twitter.com/KrvRob" rel="nofollow" target="_blank">@KrvRob</a>):<ul><li><a href="http://overthewire.org/wargames/" rel="nofollow" target="_blank">OverTheWire</a></li><li><a href="https://tulpa-security.com/2016/09/19/prep-guide-for-offsecs-pwk/" rel="nofollow" target="_blank">Prep Guide For OffSecs PWK</a></li><li><a href="http://www.abatchy.com/2017/03/how-to-prepare-for-pwkoscp-noob.html" rel="nofollow" target="_blank">How to prepare for PWK/OSCP, a noob-friendly guide</a></li><li><a href="https://github.com/burntmybagel/OSCP-Prep" rel="nofollow" target="_blank">OSCP-Prep - GitHub</a></li></ul> [<a href="http://www.timothydeblock.com/eis?format=rss" rel="nofollow" target="_blank">RSS Feed</a>] [<a href="https://itunes.apple.com/us/podcast/eis-podcast-timothy-de-block/id1026428940" rel="nofollow" target="_blank">iTunes</a>]

How to prepare for the OSCP - Part 1

In this skeleton edition of the Exploring Information Security podcast, I discuss the Cybersecurity Framework (CSF) from NIST with Rick Tracy the CSO at Telos.Rick (@rick_tracy), is very passionate about the CSF from NIST. The framework is meant to help organizations become more mature from a security standpoint. The CSF provides guidance on implementing security controls and countermeasures. It's not meant to be a one size fits all framework, but something that each organization can cater to their organization.In this episode we discuss:What is NIST?What is the Cybersecurity Framework?Why it's importantHow organizations implement the frameworkMore resources:Cybersecurity Framework - Industry ResourcesXacta 360 [RSS Feed] [iTunes]

In this skeleton edition of the Exploring Information Security podcast, I discuss the <a href="https://www.nist.gov/cyberframework" rel="nofollow" target="_blank">Cybersecurity Framework (CSF) from NIST</a> with Rick Tracy the CSO at Telos.Rick (<a href="https://twitter.com/rick_tracy" rel="nofollow" target="_blank">@rick_tracy</a>), is very passionate about the CSF from NIST. The framework is meant to help organizations become more mature from a security standpoint. The CSF provides guidance on implementing security controls and countermeasures. It's not meant to be a one size fits all framework, but something that each organization can cater to their organization.In this episode we discuss:<ul><li>What is NIST?</li><li>What is the Cybersecurity Framework?</li><li>Why it's important</li><li>How organizations implement the framework</li></ul>More resources:<ul><li><a href="https://www.nist.gov/cyberframework/industry-resources" rel="nofollow" target="_blank">Cybersecurity Framework - Industry Resources</a></li><li><a href="https://www.telos.com/assets/Xacta-360-brochure.pdf" rel="nofollow" target="_blank">Xacta 360</a></li></ul> [<a href="http://www.timothydeblock.com/eis?format=rss" rel="nofollow" target="_blank">RSS Feed</a>] [<a href="https://itunes.apple.com/us/podcast/eis-podcast-timothy-de-block/id1026428940" rel="nofollow" target="_blank">iTunes</a>]

How to implement the CSF from NIST

In this Han Solo edition of the Exploring Information Security podcast, I discuss my experience on why getting into infosec is hard.This is a solo episode where I share my thoughts on why it's hard to get into infosec. I've been on both sides of the interview process. In this episode I share my own personal experience (where I failed), as well as what I've seen on why people didn't get the role they wanted. This topic deals with the skills shortage topic often discussed on Twitter and other media. It's a very nuanced topic. I wanted to focus on what those applying could do better to apply and interview for an opportunity.In this episode:Why people don't apply?Why requirements can limit job opportunitiesWhy your resume sucksHow are you preparing for the interview?What are you doing to improve your chances of getting an offer? [RSS Feed] [iTunes]

In this Han Solo edition of the Exploring Information Security podcast, I discuss my experience on why getting into infosec is hard.This is a solo episode where I share my thoughts on why it's hard to get into infosec. I've been on both sides of the interview process. In this episode I share my own personal experience (where I failed), as well as what I've seen on why people didn't get the role they wanted. This topic deals with the skills shortage topic often discussed on Twitter and other media. It's a very nuanced topic. I wanted to focus on what those applying could do better to apply and interview for an opportunity.In this episode:<ul><li>Why people don't apply?</li><li>Why requirements can limit job opportunities</li><li>Why your resume sucks</li><li>How are you preparing for the interview?</li><li>What are you doing to improve your chances of getting an offer?</li></ul> [<a href="http://www.timothydeblock.com/eis?format=rss" rel="nofollow" target="_blank">RSS Feed</a>] [<a href="https://itunes.apple.com/us/podcast/eis-podcast-timothy-de-block/id1026428940" rel="nofollow" target="_blank">iTunes</a>]

Why getting into infosec is hard

In this fruity episode of the Exploring Information Security podcast, Wes Widner joins me to discuss how to hack iOS.Wes (@kai5263499) is a cloud engineer, who loves to dig into Apple product security. Last year (and on a previous episode) he discuss how Macs get malware. He's back again this year to discuss how to hack iOS. He will be speaking at BSides Hunstville February 3, 2018. If you have a chance to go, be sure to check out his talk. Also, check out is OSX security awesome list on GitHub. It's a really useful set of links on This dude is really smart.In this episode we discuss:What is his talk about?What's the difference between application and device hackingWhat skills are needed to hack iOSHow Apple works with law enforcementMore resources:Lib mobile deviceCydia [RSS Feed] [iTunes]

In this fruity episode of the Exploring Information Security podcast, <a href="http://werxltd.com/" rel="nofollow" target="_blank">Wes Widner</a> joins me to discuss how to hack iOS.Wes (<a href="https://twitter.com/kai5263499" rel="nofollow" target="_blank">@kai5263499</a>) is a cloud engineer, who loves to dig into Apple product security. Last year (and on a previous episode) he discuss how Macs get malware. He's back again this year to discuss how to hack iOS. He will be speaking at <a href="https://nac-issa.org/bsides/NAC_BSides_Huntsville.asp" rel="nofollow" target="_blank">BSides Hunstville February 3, 2018</a>. If you have a chance to go, be sure to check out his talk. Also, check out is <a href="https://github.com/kai5263499/osx-security-awesome" rel="nofollow" target="_blank">OSX security awesome list</a> on GitHub. It's a really useful set of links on This dude is really smart.In this episode we discuss:<ul><li>What is his talk about?</li><li>What's the difference between application and device hacking</li><li>What skills are needed to hack iOS</li><li>How Apple works with law enforcement</li></ul>More resources:<ul><li><a href="http://www.libimobiledevice.org/" rel="nofollow" target="_blank">Lib mobile device</a></li><li><a href="https://www.cydiaios7.com/" rel="nofollow" target="_blank">Cydia</a></li></ul> [<a href="http://www.timothydeblock.com/eis?format=rss" rel="nofollow" target="_blank">RSS Feed</a>] [<a href="https://itunes.apple.com/us/podcast/eis-podcast-timothy-de-block/id1026428940" rel="nofollow" target="_blank">iTunes</a>]

How to hack iOS - Part 1

In this bird feeding episode of the Exploring Information Security podcast, Chris Maddalena joins me to discuss how to build your own tools.Chris (@cmaddalena) gave a talk at DerbyCon this past year on writing Win32 Shellcode. We've talked before on a previous podcast around why building your own tools is important. Chris has also written several tools for his day job and for public consumption. His most recent tool is ODIN, a passive recon tool for penetration testers.In this episode we discuss:Why should someone build their own toolWhat tool should people build?How to get started building toolsWhat resources are available for building tools [RSS Feed] [iTunes]

In this bird feeding episode of the Exploring Information Security podcast, Chris Maddalena joins me to discuss how to build your own tools.Chris (<a href="https://twitter.com/cmaddalena" rel="nofollow" target="_blank">@cmaddalena</a>) gave a talk at DerbyCon this past year on <a href="https://www.youtube.com/watch?v=UstWmavrWwk&amp;t=1200s" rel="nofollow" target="_blank">writing Win32 Shellcode</a>. We've talked before on a previous podcast around why building your own tools is important. Chris has also written several tools for his day job and for public consumption. His most recent tool is <a href="https://www.youtube.com/watch?v=JnljiGZOW-U" rel="nofollow" target="_blank">ODIN</a>, a passive recon tool for penetration testers.In this episode we discuss:<ul><li>Why should someone build their own tool</li><li>What tool should people build?</li><li>How to get started building tools</li><li>What resources are available for building tools</li></ul> [<a href="http://www.timothydeblock.com/eis?format=rss" rel="nofollow" target="_blank">RSS Feed</a>] [<a href="https://itunes.apple.com/us/podcast/eis-podcast-timothy-de-block/id1026428940" rel="nofollow" target="_blank">iTunes</a>]

How to build your own tools - Part 1

In this studious edition of the Exploring Information Security podcast, Offensive Security Certified Professional (OSCP) Chris Maddalena joins me to discuss how to prepare for the OSCP certification.Chris (@cmaddalena) returns to talk about how he got his OSCP. He didn't get it on his first attempt. He did learn from his first attempt, though, and passed the exam on his second attempt. He was willing to come on the podcast to describe his experience and provide tips for others looking to acquire the certification. The exam is not easy. It's a 24-hour exam that includes writing a report as well as performing a penetration test. Preparation for the exam is very important.In this episode we discuss:How Chris' second attempt wentHow to study for the OSCPWhat the hardest part of the exam was for ChrisHow the pointing system worksMore resources (h/t @KrvRob):OverTheWirePrep Guide For OffSecs PWKHow to prepare for PWK/OSCP, a noob-friendly guideOSCP-Prep - GitHub [RSS Feed] [iTunes]

In this studious edition of the Exploring Information Security podcast, Offensive Security Certified Professional (OSCP) Chris Maddalena joins me to discuss how to prepare for the OSCP certification.Chris (<a href="https://twitter.com/cmaddalena" rel="nofollow" target="_blank">@cmaddalena</a>) returns to talk about how he got his OSCP. He didn't get it on his first attempt. He did learn from his first attempt, though, and passed the exam on his second attempt. He was willing to come on the podcast to describe his experience and provide tips for others looking to acquire the certification. The exam is not easy. It's a 24-hour exam that includes writing a report as well as performing a penetration test. Preparation for the exam is very important.In this episode we discuss:<ul><li>How Chris' second attempt went</li><li>How to study for the OSCP</li><li>What the hardest part of the exam was for Chris</li><li>How the pointing system works</li></ul>More resources (h/t <a href="https://twitter.com/KrvRob" rel="nofollow" target="_blank">@KrvRob</a>):<ul><li><a href="http://overthewire.org/wargames/" rel="nofollow" target="_blank">OverTheWire</a></li><li><a href="https://tulpa-security.com/2016/09/19/prep-guide-for-offsecs-pwk/" rel="nofollow" target="_blank">Prep Guide For OffSecs PWK</a></li><li><a href="http://www.abatchy.com/2017/03/how-to-prepare-for-pwkoscp-noob.html" rel="nofollow" target="_blank">How to prepare for PWK/OSCP, a noob-friendly guide</a></li><li><a href="https://github.com/burntmybagel/OSCP-Prep" rel="nofollow" target="_blank">OSCP-Prep - GitHub</a></li></ul> [<a href="http://www.timothydeblock.com/eis?format=rss" rel="nofollow" target="_blank">RSS Feed</a>] [<a href="https://itunes.apple.com/us/podcast/eis-podcast-timothy-de-block/id1026428940" rel="nofollow" target="_blank">iTunes</a>]

How to prepare for the OSCP - Part 2

In this open edition of the Exploring Information Security podcast, I sit down with Micah Hoffman, Kerby Plessas, and Josh Huff to discuss Open Source INTelligence (OSINT).Micah Hoffman (@WebBreacher) is a SANS instructor who will be teaching a brand new SANS course, SANS487: Open-Source Intelligence Gathering and Analysis.Kirby Plessas (@kirbstr) runs her own training company Plessas Experts Network, Inc. There is an online training portal that you can use to learn more about OSINT.Josh Huff (@baywolf88) is a Digital Forensics Private Investigator and OSINT addict. He runs the Learn All The Things website.This is a new format for the podcast that I am trying out. It's a lot like the conference episodes I do: It's longer; I allow swearing; and there is no format or direction. I asked for OSINT questions on Twitter and got some pretty good ones back for people to answer. I can turn this into a live show that would allow for people watching to interact with the guests on the show. I need feedback on whether or not this of interest to people. Hit me up on Twitter (@TimothyDeBlock) or email (timothy[.]deblock[@]gmail[.]com)In this episode we discuss:Why it's important to automate OSINTWhat tools are available for OSINTWhere does OSINT end and breaking the law begin?Where can OSINT be used in an organizationHow to get into OSINTand much much moreMore Resources:Automating OSINTHunchlyOSINT FrameworkSpiderfootIntelTechniquesSANS Webcast: OSINT for Everyone - Understanding Risks and Protecting Your DataDeep Dive in the Dark Web OSINT Style [RSS Feed] [iTunes]

In this open edition of the Exploring Information Security podcast, I sit down with Micah Hoffman, Kerby Plessas, and Josh Huff to discuss Open Source INTelligence (OSINT).Micah Hoffman (<a href="https://twitter.com/WebBreacher" rel="nofollow" target="_blank">@WebBreacher</a>) is a SANS instructor who will be teaching a brand new SANS course, <a href="https://www.sans.org/course/open-source-intelligence-gathering" rel="nofollow" target="_blank">SANS487: Open-Source Intelligence Gathering and Analysis</a>.Kirby Plessas (<a href="https://twitter.com/kirbstr" rel="nofollow" target="_blank">@kirbstr</a>) runs her own training company <a href="http://www.plessas.net/site/" rel="nofollow" target="_blank">Plessas Experts Network, Inc</a>. There is an online training portal that you can use to learn more about OSINT.Josh Huff (<a href="https://twitter.com/baywolf88" rel="nofollow" target="_blank">@baywolf88</a>) is a Digital Forensics Private Investigator and OSINT addict. He runs the <a href="https://www.learnallthethings.net/" rel="nofollow" target="_blank">Learn All The Things</a> website.This is a new format for the podcast that I am trying out. It's a lot like the conference episodes I do: It's longer; I allow swearing; and there is no format or direction. I asked for OSINT questions on Twitter and got some pretty good ones back for people to answer. I can turn this into a live show that would allow for people watching to interact with the guests on the show. I need feedback on whether or not this of interest to people. Hit me up on Twitter (<a href="https://twitter.com/TimothyDeBlock" rel="nofollow" target="_blank">@TimothyDeBlock</a>) or email (timothy[.]deblock[@]gmail[.]com)In this episode we discuss:<ul><li>Why it's important to automate OSINT</li><li>What tools are available for OSINT</li><li>Where does OSINT end and breaking the law begin?</li><li>Where can OSINT be used in an organization</li><li>How to get into OSINT</li><li>and much much more</li></ul>More Resources:<ul><li><a href="http://www.automatingosint.com/blog/" rel="nofollow" target="_blank">Automating OSINT</a></li><li><a href="https://www.hunch.ly/" rel="nofollow" target="_blank">Hunchly</a></li><li><a href="http://osintframework.com/" rel="nofollow" target="_blank">OSINT Framework</a></li><li><a href="http://www.spiderfoot.net/" rel="nofollow" target="_blank">Spiderfoot</a></li><li><a href="https://inteltechniques.com/menu.html" rel="nofollow" target="_blank">IntelTechniques</a></li><li><a href="https://youtu.be/6ADHWxCBsUo" rel="nofollow" target="_blank">SANS Webcast: OSINT for Everyone - Understanding Risks and Protecting Your Data</a></li><li><a href="https://www.youtube.com/watch?v=fzd3zkAI_o4" rel="nofollow" target="_blank">Deep Dive in the Dark Web OSINT Style</a></li></ul> [<a href="http://www.timothydeblock.com/eis?format=rss" rel="nofollow" target="_blank">RSS Feed</a>] [<a href="https://itunes.apple.com/us/podcast/eis-podcast-timothy-de-block/id1026428940" rel="nofollow" target="_blank">iTunes</a>]

What's happening in OSINT?

In this smart episode of the Exploring Information Security podcast, Rob Gresham formerly of McAfee joins me to explain threat intelligence.Rob (@rwgresham) previously served as a practice lead in McAfee's security operations. I had the opportunity to meet Rob in person. He is deeply involved in the many things information security related in South Carolina. Including the National Guard and Palmetto Cyber Defense Competition. Threat intelligence is a topic he thoroughly enjoys discussing. Which is why this topic will be a two parter.In this episode we discuss:What is threat intelligenceHow threat intelligence is usefulWhat are the benefits of threat intelligenceWhat needs to be done before threat intelligenceResources:Awesome Threat IntelligencePyramid of PainBSides Augusta - This is not your Mommas Threat Intelligence [RSS Feed] [iTunes]

In this smart episode of the Exploring Information Security podcast, Rob Gresham formerly of McAfee joins me to explain threat intelligence.Rob (<a href="https://twitter.com/rwgresham" rel="nofollow" target="_blank">@rwgresham</a>) previously served as a practice lead in McAfee's security operations. I had the opportunity to meet Rob in person. He is deeply involved in the many things information security related in South Carolina. Including the National Guard and Palmetto Cyber Defense Competition. Threat intelligence is a topic he thoroughly enjoys discussing. Which is why this topic will be a two parter.In this episode we discuss:<ul><li>What is threat intelligence</li><li>How threat intelligence is useful</li><li>What are the benefits of threat intelligence</li><li>What needs to be done before threat intelligence</li></ul>Resources:<ul><li><a href="https://github.com/hslatman/awesome-threat-intelligence" rel="nofollow" target="_blank">Awesome Threat Intelligence</a></li><li><a href="http://detect-respond.blogspot.com/2013/03/the-pyramid-of-pain.html" rel="nofollow" target="_blank">Pyramid of Pain</a></li><li><a href="https://www.youtube.com/watch?v=fMMwFwMy0u4" rel="nofollow" target="_blank">BSides Augusta - This is not your Mommas Threat Intelligence</a></li></ul> [<a href="http://www.timothydeblock.com/eis?format=rss" rel="nofollow" target="_blank">RSS Feed</a>] [<a href="https://itunes.apple.com/us/podcast/eis-podcast-timothy-de-block/id1026428940" rel="nofollow" target="_blank">iTunes</a>]

What is threat intelligence? - Part 1

In this speedy episode of the Exploring Information Security podcast, Brandon Wilson joins me to discuss his adventures in hacking a car.Brandon (@brandonlwilson) spoke at BSides Knoxville in 2017. I had the pleasure to be in attendance for his talk. The talk was technical and very interesting. Brandon talked about how he tried to take his old 90s car and fix it himself. The was a malfunction in the anti-theft system that kept the car from running. He decided to go deeper. Unfortunately, he was unable to fix his car. He did, however, learn a lot from the experience.In this episode we discuss:How Brandon got into car hacking?What resources were available for hacking a car?How long did the project take?What tools are available for hacking a car? [RSS Feed] [iTunes]

In this speedy episode of the Exploring Information Security podcast, <a href="http://brandonw.net" rel="nofollow" target="_blank">Brandon Wilson</a> joins me to discuss his adventures in hacking a car.Brandon (<a href="https://twitter.com/brandonlwilson" rel="nofollow" target="_blank">@brandonlwilson</a>) spoke at <a href="https://www.youtube.com/watch?v=tBtHtgbsgSw" rel="nofollow" target="_blank">BSides Knoxville in 2017</a>. I had the pleasure to be in attendance for his talk. The talk was technical and very interesting. Brandon talked about how he tried to take his old 90s car and fix it himself. The was a malfunction in the anti-theft system that kept the car from running. He decided to go deeper. Unfortunately, he was unable to fix his car. He did, however, learn a lot from the experience.In this episode we discuss:<ul><li>How Brandon got into car hacking?</li><li>What resources were available for hacking a car?</li><li>How long did the project take?</li><li>What tools are available for hacking a car?</li></ul> [<a href="http://www.timothydeblock.com/eis?format=rss" rel="nofollow" target="_blank">RSS Feed</a>] [<a href="https://itunes.apple.com/us/podcast/eis-podcast-timothy-de-block/id1026428940" rel="nofollow" target="_blank">iTunes</a>]

How to hack a car

It's another solo episode! Next weekend I will be at BSides Nashville. Among the many other things I am slated to do, I am helping out with resume/interview workshop. As preparation for the workshop I put together a list of interview questions I intend to use.I put out a tweet asking for interview questions from the Twitter community. I got back some really good questions. As I was putting the list together I decided this would make a great podcast. Preparing for an interview is very important. I increased my offer rate significantly once I started preparing for interviews. Prior to that I always tried to wing them. I spent 15 months looking for a job at one point. I would get interviews, but failed to get offers.Interviews are a nerve-racking process. Preparation provides more confidence and the ability to anticipate curve balls in an interview. Being prepared allows you to have more brain power when there is a question you didn't anticipate. When you're prepared, it shows. People tend to like candidates who are prepared. They can tell by how direct and decisive answers are to questions. There is one caveat to this. If your interview with someone as part of a network, there is more leniency in the interview.PreparationThere are multiple ways to prepare for an interview. Figure out what works best for you. What I have below and in the podcast are what I've used to be successful in interviews.Look at the job postingReview the companies job posting and your resume before going into an interview. If you're doing resumes write you should have a different one for each job you apply to. Remembering which resume you submitted is important. Tie your experience to the job posting. This will help with answering the question in a way that shows you're a fit for the role.Look for key words in the job posting that you might be asked about in the interview. If you're going for a role in a security operations center (SOC), be prepared to answer networking questions. If you're doing application security be prepared to answer development questions. If you're going for a penetration tester role be prepared to talk about attack techniques and your methodology. You get the idea.Write out questions and answers on 3x5 index cardsI use the list of 31 common interview questions from the muse. I pick the ones that apply and write them down on 3x5 index cards. I then flip them over and write down my answers in one word or short sentence. This allows me to practice my answers to questions such as, "What's your greatest strength/weakness" or more technical questions like, "How does DNS work?"Practice, practice, practiceGo over the questions you've collected. Read out loud the question and say out loud your answer. Flip over to see that you've hit on your main point. Do this over and over again. Do this again in the waiting room or in the car (if you've arrived early, which I recommend) on the day of the interview. That's the benefit of writing questions and answers on 3x5 index cards, they fit nicely in a coat pocket.You will practice questions that don't get asked. There is no way for you to anticipate all the questions you'll be asked. Getting the common ones and the ones you think will be asked will make the interview go much smoother. The less brain power you have to spend on a question the more you have for the questions you didn't anticipate.Physical preparation  Go get a haircut and make sure you still fit into your interview clothes. If you've out grown a pair of slacks you'll need to go buy a new pair. Prior to the interview you can ask what is the dress expectation. A suit is standard and something I often go with. I also have a pair of khakis and a sports coat in case they want me to dress down. Have at least two sets of interview clothes for multiple interviews. Dressing in the same thing twice is not a good look.I feel uncomfortable going to an interview in just a t-shirt or polo shirt, even if that's what was recommended. I know some interviewers in our industry care less about dress. I believe in over-dressing rather than under-dressing, though.Extra preparationI applied for a job once that described the role as I would my dream job. I did all my usual preparation above. I had two really good interviews and was slated for a third. The first two were phone interviews. The third was going to be in person. It was expected that I would interview with the CISO and a one or two other managers (it ended up being six).I decided that I would put together a short slide presentation. I practiced going through the presentation as part of my answer. I also went to the print shop and had them print out three bound copies of the presentation. It cost me about $35. I took this to the interview. Two questions in when we started discussing my vision for the role, I handed out the bound copies of the presentation. I then walked through my vision for the role. I got an offer for that job and I'm happy to say I'm still in that role.Wrap-up and resourcesPreparation is so important for a job interview. I failed at it for a long time. Some people can wing an interview and get an offer. I am not one of those people. Once I took the time and made the investment into preparation, I increased my offer rate. I turned down other positions, because I had the confidence that a better offer was coming. Review the job posting. Tie it to your experience. Write down common questions and ones you think might be asked. Practice. Say your answers out loud. Do that over and over again until you can answer question confidently and concisely. Then practice some more. Make sure what you wear to the interview is ready before the day of the interview. Scrambling around for something presentable creates more anxiety and nervousness. Finally, consider putting a presentation together. $35 was a great investment.Before I go here are some great resources around preparation:Manager Tool being interviewed series of podcatsWebBreacher has a GitHub page of offensive interview questionsHope to see you at BSides Nashville! [RSS Feed] [iTunes]

It's another solo episode! Next weekend I will be at BSides Nashville. Among the many other things I am slated to do, I am helping out with resume/interview workshop. As preparation for the workshop I put together a list of interview questions I intend to use.I put out a <a href="https://twitter.com/TimothyDeBlock/status/982625968530575361" rel="nofollow" target="_blank">tweet</a> asking for interview questions from the Twitter community. I got back some really good questions. As I was putting <a href="https://docs.google.com/spreadsheets/d/17iqO-DP2eOZUjMxJWcewh3oW3Lf9cLP8xYaoUjJA6oA/edit?usp=sharing" rel="nofollow" target="_blank">the list</a> together I decided this would make a great podcast. Preparing for an interview is very important. I increased my offer rate significantly once I started preparing for interviews. Prior to that I always tried to wing them. I spent 15 months looking for a job at one point. I would get interviews, but failed to get offers.Interviews are a nerve-racking process. Preparation provides more confidence and the ability to anticipate curve balls in an interview. Being prepared allows you to have more brain power when there is a question you didn't anticipate. When you're prepared, it shows. People tend to like candidates who are prepared. They can tell by how direct and decisive answers are to questions. There is one caveat to this. If your interview with someone as part of a network, there is more leniency in the interview.<h2>Preparation</h2>There are multiple ways to prepare for an interview. Figure out what works best for you. What I have below and in the podcast are what I've used to be successful in interviews.Look at the job postingReview the companies job posting and your resume before going into an interview. If you're doing resumes write you should have a different one for each job you apply to. Remembering which resume you submitted is important. Tie your experience to the job posting. This will help with answering the question in a way that shows you're a fit for the role.Look for key words in the job posting that you might be asked about in the interview. If you're going for a role in a security operations center (SOC), be prepared to answer networking questions. If you're doing application security be prepared to answer development questions. If you're going for a penetration tester role be prepared to talk about attack techniques and your methodology. You get the idea.Write out questions and answers on 3x5 index cardsI use the list of <a href="https://www.themuse.com/advice/how-to-answer-the-31-most-common-interview-questions" rel="nofollow" target="_blank">31 common interview questions</a> from the muse. I pick the ones that apply and write them down on 3x5 index cards. I then flip them over and write down my answers in one word or short sentence. This allows me to practice my answers to questions such as, "What's your greatest strength/weakness" or more technical questions like, "How does DNS work?"Practice, practice, practiceGo over the questions you've collected. Read out loud the question and say out loud your answer. Flip over to see that you've hit on your main point. Do this over and over again. Do this again in the waiting room or in the car (if you've arrived early, which I recommend) on the day of the interview. That's the benefit of writing questions and answers on 3x5 index cards, they fit nicely in a coat pocket.You will practice questions that don't get asked. There is no way for you to anticipate all the questions you'll be asked. Getting the common ones and the ones you think will be asked will make the interview go much smoother. The less brain power you have to spend on a question the more you have for the questions you didn't anticipate.Physical preparation  Go get a haircut and make sure you still fit into your interview clothes. If you've out grown a pair of slacks you'll need to go buy a new pair. Prior to the interview you can ask what is the dress expectation. A suit is standard and something I often go with. I also have a pair of khakis and a sports coat in case they want me to dress down. Have at least two sets of interview clothes for multiple interviews. Dressing in the same thing twice is not a good look.I feel uncomfortable going to an interview in just a t-shirt or polo shirt, even if that's what was recommended. I know some interviewers in our industry care less about dress. I believe in over-dressing rather than under-dressing, though.Extra preparationI applied for a job once that described the role as I would my dream job. I did all my usual preparation above. I had two really good interviews and was slated for a third. The first two were phone interviews. The third was going to be in person. It was expected that I would interview with the CISO and a one or two other managers (it ended up being six).I decided that I would put together a <a href="https://docs.google.com/presentation/d/1HoUOb1JY9Y7M4BAs4taoLMXp2s7BzunCKpcyzHtS1M4/edit?usp=sharing" rel="nofollow" target="_blank">short slide presentation</a>. I practiced going through the presentation as part of my answer. I also went to the print shop and had them print out three bound copies of the presentation. It cost me about $35. I took this to the interview. Two questions in when we started discussing my vision for the role, I handed out the bound copies of the presentation. I then walked through my vision for the role. I got an offer for that job and I'm happy to say I'm still in that role.<h2>Wrap-up and resources</h2>Preparation is so important for a job interview. I failed at it for a long time. Some people can wing an interview and get an offer. I am not one of those people. Once I took the time and made the investment into preparation, I increased my offer rate. I turned down other positions, because I had the confidence that a better offer was coming. Review the job posting. Tie it to your experience. Write down common questions and ones you think might be asked. Practice. Say your answers out loud. Do that over and over again until you can answer question confidently and concisely. Then practice some more. Make sure what you wear to the interview is ready before the day of the interview. Scrambling around for something presentable creates more anxiety and nervousness. Finally, consider putting a presentation together. $35 was a great investment.Before I go here are some great resources around preparation:<ul><li><a href="https://www.manager-tools.com/map-universe/being-interviewed" rel="nofollow" target="_blank">Manager Tool being interviewed series of podcats</a></li><li><a href="https://github.com/WebBreacher/offensiveinterview" rel="nofollow" target="_blank">WebBreacher has a GitHub page of offensive interview questions</a></li></ul>Hope to see you at BSides Nashville! [<a href="http://www.timothydeblock.com/eis?format=rss" rel="nofollow" target="_blank">RSS Feed</a>] [<a href="https://itunes.apple.com/us/podcast/eis-podcast-timothy-de-block/id1026428940" rel="nofollow" target="_blank">iTunes</a>]

How to prepare for an infosec interview

In this fake episode of the Exploring Information Security podcast, Micah Hoffman joins me to discuss imposter syndrome.Micah (@WebBreacher), this past year, spoke on imposter syndrome and how to overcome it. It's something we all deal with (even several years into our careers). It's useful, but also dangerous for those of us in the information security community. We need to try and compare ourselves to others less and speak more positively internally.In this episode we discuss:What is imposter syndrome?Why people get imposter syndrome.How to overcome imposer syndrome.Stick around until the end to hear some real imposter syndrome. [RSS Feed] [iTunes]

In this fake episode of the Exploring Information Security podcast, Micah Hoffman joins me to discuss imposter syndrome.Micah (<a href="https://twitter.com/WebBreacher" rel="nofollow" target="_blank">@WebBreacher</a>), this past year, <a href="https://www.youtube.com/watch?v=aDDCl_VQx7k&amp;t=" rel="nofollow" target="_blank">spoke on imposter syndrome</a> and how to overcome it. It's something we all deal with (even several years into our careers). It's useful, but also dangerous for those of us in the information security community. We need to try and compare ourselves to others less and speak more positively internally.In this episode we discuss:<ul><li>What is imposter syndrome?</li><li>Why people get imposter syndrome.</li><li>How to overcome imposer syndrome.</li><li>Stick around until the end to hear some real imposter syndrome.</li></ul> [<a href="http://www.timothydeblock.com/eis?format=rss" rel="nofollow" target="_blank">RSS Feed</a>] [<a href="https://itunes.apple.com/us/podcast/eis-podcast-timothy-de-block/id1026428940" rel="nofollow" target="_blank">iTunes</a>]

How to overcome imposter syndrome

In this reddish edition of the Exploring Information Security podcast, Andrew Morris of Endgame joins me to discuss how to become a penetration tester. Andrew (@Andrew___Morris) is a security researcher at Endgame. Before he got that role he was a penetration tester. I had an opportunity to get to know Andrew at some events in the Columbia, SC. He's very knowledgeable and excited about what he does in the information security space. In this two-part series we discuss some of the nuances of being a pen tester and how to find yourself in that particular role. In this episode we discuss: What tools a penetration tester usesWhat skills are needed to be a penetration testerAndrew discusses how he became a penetration tester More resources: /r/netsecRoom362 - Rob FullerCarnal0wnage - Chris GatesMetasploitExploit Mondayg0tmi1kCobalt Strikeharmj0yActive Directory SecurityPassing the HashEnigma0X3IrongeekSkullSecurity [RSS Feed] [iTunes]

In this reddish edition of the Exploring Information Security podcast, <a href="https://morris.sc/" rel="nofollow" target="_blank">Andrew Morris</a> of <a href="https://www.endgame.com/" rel="nofollow" target="_blank">Endgame</a> joins me to discuss how to become a penetration tester. Andrew (<a href="https://twitter.com/Andrew___Morris" rel="nofollow" target="_blank">@Andrew___Morris</a>) is a security researcher at Endgame. Before he got that role he was a penetration tester. I had an opportunity to get to know Andrew at some events in the Columbia, SC. He's very knowledgeable and excited about what he does in the information security space. In this two-part series we discuss some of the nuances of being a pen tester and how to find yourself in that particular role. In this episode we discuss: <ul><li>What tools a penetration tester uses</li><li>What skills are needed to be a penetration tester</li><li>Andrew discusses how he became a penetration tester</li></ul> More resources: <ul><li><a href="https://www.reddit.com/r/netsec/" rel="nofollow" target="_blank">/r/netsec</a></li><li><a href="https://room362.com/" rel="nofollow" target="_blank">Room362 - Rob Fuller</a></li><li><a href="http://carnal0wnage.attackresearch.com/" rel="nofollow" target="_blank">Carnal0wnage - Chris Gates</a></li><li><a href="https://www.metasploit.com/" rel="nofollow" target="_blank">Metasploit</a></li><li><a href="http://www.exploit-monday.com/" rel="nofollow" target="_blank">Exploit Monday</a></li><li><a href="http://blog.g0tmi1k.com/" rel="nofollow" target="_blank">g0tmi1k</a></li><li><a href="https://blog.cobaltstrike.com/" rel="nofollow" target="_blank">Cobalt Strike</a></li><li><a href="http://www.harmj0y.net/blog/" rel="nofollow" target="_blank">harmj0y</a></li><li><a href="http://adsecurity.org/" rel="nofollow" target="_blank">Active Directory Security</a></li><li><a href="http://passing-the-hash.blogspot.com/" rel="nofollow" target="_blank">Passing the Hash</a></li><li><a href="https://enigma0x3.net/" rel="nofollow" target="_blank">Enigma0X3</a></li><li><a href="http://www.irongeek.com/" rel="nofollow" target="_blank">Irongeek</a></li><li><a href="https://blog.skullsecurity.org/" rel="nofollow" target="_blank">SkullSecurity</a></li></ul> [<a href="http://www.timothydeblock.com/eis?format=rss" rel="nofollow" target="_blank">RSS Feed</a>] [<a href="https://itunes.apple.com/us/podcast/eis-podcast-timothy-de-block/id1026428940" rel="nofollow" target="_blank">iTunes</a>]

How to become a penetration tester - Part 2

In this phishy edition of the Exploring Information Security podcast, Steve Ragan of CSO joins me to discuss business email compromise (BEC) attacks.Steve (@SteveD3) has been covering BEC types of attacks for the past year at CSO. These types of attacks are increasing. It may get worse with GDPR requirements next month. This ended up being one of the more difficult podcasts to get scheduled. Steve and I had to cancel on each other a few times because of phishing related stuff.In this episode we discuss:What are BEC types of attacks?Who is performing BEC attacks?How are people falling for them?What can people do protect against this type of attack? [RSS Feed] [iTunes]

In this phishy edition of the Exploring Information Security podcast, Steve Ragan of CSO joins me to discuss business email compromise (BEC) attacks.Steve (<a href="https://twitter.com/SteveD3" rel="nofollow" target="_blank">@SteveD3</a>) has been covering BEC types of attacks for the <a href="https://www.csoonline.com/article/3195010/security/bec-attacks-have-hit-thousands-top-5-billion-in-losses-globally.html" rel="nofollow" target="_blank">past year at CSO</a>. These types of attacks are increasing. It may get worse with <a href="https://krebsonsecurity.com/2018/02/new-eu-privacy-law-may-weaken-security/" rel="nofollow" target="_blank">GDPR requirements next month</a>. This ended up being one of the more difficult podcasts to get scheduled. Steve and I had to cancel on each other a few times because of phishing related stuff.In this episode we discuss:<ul><li>What are BEC types of attacks?</li><li>Who is performing BEC attacks?</li><li>How are people falling for them?</li><li>What can people do protect against this type of attack?</li></ul> [<a href="http://www.timothydeblock.com/eis?format=rss" rel="nofollow" target="_blank">RSS Feed</a>] [<a href="https://itunes.apple.com/us/podcast/eis-podcast-timothy-de-block/id1026428940" rel="nofollow" target="_blank">iTunes</a>]

What are BEC attacks?

In this shipped edition of the Exploring Information Security podcast, Wes Widner joins me to discuss container security.Wes (@kai5263499) is not a security person. He is a developer. A developer that understands security and why it's important. He deals a lot with automation and working with container technology.In this episode we discuss:What are containers?What are the different kind of containers?What is Wes' experience with containers?What are the big security concerns?More Resources:Awesome Container SecurityCilium [RSS Feed] [iTunes] Subscribe Sign up with your email address to receive news and updates.    Email AddressSign UpWe respect your privacy.    Thank you!

In this shipped edition of the Exploring Information Security podcast, Wes Widner joins me to discuss container security.Wes (<a href="https://twitter.com/kai5263499" rel="nofollow" target="_blank">@kai5263499</a>) is not a security person. He is a developer. A developer that understands security and why it's important. He deals a lot with automation and working with container technology.In this episode we discuss:<ul><li>What are containers?</li><li>What are the different kind of containers?</li><li>What is Wes' experience with containers?</li><li>What are the big security concerns?</li></ul>More Resources:<ul><li><a href="https://github.com/kai5263499/container-security-awesome" rel="nofollow" target="_blank">Awesome Container Security</a></li><li><a href="https://github.com/cilium/cilium" rel="nofollow" target="_blank">Cilium</a></li></ul> [<a href="http://www.timothydeblock.com/eis?format=rss" rel="nofollow" target="_blank">RSS Feed</a>] [<a href="https://itunes.apple.com/us/podcast/eis-podcast-timothy-de-block/id1026428940" rel="nofollow" target="_blank">iTunes</a>] <h2>Subscribe</h2> Sign up with your email address to receive news and updates. Email Address Sign Up We respect your privacy. Thank you!

Why container security is important - Part 1

In this installed episode of the Exploring Information Security podcast, Wes Widner joins me to discuss how Macs get malware. Wes (@kai5263499) spoke about this topic at BSides Hunstville this year. I was fascinated by it and decided to invite Wes on. Mac malware is a bit of an interest for Wes. He's done a lot of research on it. His talk walks through the history of malware on Macs. For Apple fan boys, Macs are still one of the more safer options in the personal computer market. That is changing though. Macs because of their increased market share are getting targeted more and more. We discuss some pretty nifty tools that will help with fending off that nasty malware. Little Snitch is one of those tools. Some malware actively avoids the application. Tune in for some more useful information. In this episode we discuss: How Macs get malwareWhat got Wes into Mac malwareThe history of Mac malwareWhat people can do to protect against Mac Malware More resources: OSX Security Awesome - GitHubA Worm in the Apple - SlidesPeople to follow on Twitter:Patrick Wardleobjective_see0xAmitMorpheus______osxreverserliucojosxdaily [RSS Feed] [iTunes]

In this installed episode of the Exploring Information Security podcast, Wes Widner joins me to discuss how Macs get malware. Wes (<a href="https://twitter.com/kai5263499" rel="nofollow" target="_blank">@kai5263499</a>) spoke about this topic at BSides Hunstville this year. I was fascinated by it and decided to invite Wes on. Mac malware is a bit of an interest for Wes. He's done a lot of research on it. His talk walks through the history of malware on Macs. For Apple fan boys, Macs are still one of the more safer options in the personal computer market. That is changing though. Macs because of their increased market share are getting targeted more and more. We discuss some pretty nifty tools that will help with fending off that nasty malware. <a href="https://www.obdev.at/products/littlesnitch/index.html" rel="nofollow" target="_blank">Little Snitch</a> is one of those tools. Some malware actively avoids the application. Tune in for some more useful information. In this episode we discuss: <ul><li>How Macs get malware</li><li>What got Wes into Mac malware</li><li>The history of Mac malware</li><li>What people can do to protect against Mac Malware</li></ul> More resources: <ul><li><a href="https://github.com/kai5263499/osx-security-awesome" rel="nofollow" target="_blank">OSX Security Awesome - GitHub</a></li><li><a href="https://docs.google.com/presentation/d/1YXe2C9UQfeRGfwGWDIPfZXTW1PvAJos_qR2NNRzNPSE/edit" rel="nofollow" target="_blank">A Worm in the Apple - Slides</a></li><li>People to follow on Twitter:<ul><li><a href="https://twitter.com/patrickwardle" rel="nofollow" target="_blank">Patrick Wardle</a></li><li><a href="https://twitter.com/objective_see" rel="nofollow" target="_blank">objective_see</a></li><li><a href="https://twitter.com/0xAmit" rel="nofollow" target="_blank">0xAmit</a></li><li><a href="https://twitter.com/Morpheus______" rel="nofollow" target="_blank">Morpheus______</a></li><li><a href="https://twitter.com/osxreverser" rel="nofollow" target="_blank">osxreverser</a></li><li><a href="https://twitter.com/liucoj" rel="nofollow" target="_blank">liucoj</a></li><li><a href="https://twitter.com/osxdaily" rel="nofollow" target="_blank">osxdaily</a></li></ul></li></ul> [<a href="http://www.timothydeblock.com/eis?format=rss" rel="nofollow" target="_blank">RSS Feed</a>] [<a href="https://itunes.apple.com/us/podcast/eis-podcast-timothy-de-block/id1026428940" rel="nofollow" target="_blank">iTunes</a>]

How Macs get Malware

In this inclusive episode of the Exploring Information Security podcast, Micah Hoffman, a certified SANS instructor, joins me to discuss how to join the infosec community.Micah (@WebBreacher) gave a talk at BSides DC last year on joining the infosec community. For Micah it took him a while to get involved. He jumped right into the deep end by going to DEFCON. Several years later he decided to get more involved in the community and quickly discovered several of the benefits from doing that. I had a similar experience, attending DEFCON in the early 2000s. I wouldn't attend another security conference until 10 years later.There are a lot of benefits to getting involved in the infosec community. You get to contribute and make the community a little better. You get to meet some awesome people. You will have more job opportunities open up. Community engagement shows initiative and allows you to meet people looking to fill roles.In this episode we discuss:How Micah got into the communityWhat is the infosec community?Why it's important to get involvedWhere can someone get involved?More resources:Mubix's Room 362 - Start in Infosectisiphone.net [RSS Feed] [iTunes]

In this inclusive episode of the Exploring Information Security podcast, <a href="https://webbreacher.com/" rel="nofollow" target="_blank">Micah Hoffman</a>, a <a href="https://www.sans.org/instructors/micah-hoffman" rel="nofollow" target="_blank">certified SANS instructor</a>, joins me to discuss how to join the infosec community.Micah (<a href="https://twitter.com/WebBreacher" rel="nofollow" target="_blank">@WebBreacher</a>) gave a talk at<a href="https://www.youtube.com/watch?v=gm4KgWr3A5w" rel="nofollow" target="_blank"> BSides DC last year on joining the infosec community</a>. For Micah it took him a while to get involved. He jumped right into the deep end by going to DEFCON. Several years later he decided to get more involved in the community and quickly discovered several of the benefits from doing that. I had a similar experience, attending DEFCON in the early 2000s. I wouldn't attend another security conference until 10 years later.There are a lot of benefits to getting involved in the infosec community. You get to contribute and make the community a little better. You get to meet some awesome people. You will have more job opportunities open up. Community engagement shows initiative and allows you to meet people looking to fill roles.In this episode we discuss:<ul><li>How Micah got into the community</li><li>What is the infosec community?</li><li>Why it's important to get involved</li><li>Where can someone get involved?</li></ul>More resources:<ul><li><a href="https://room362.com/start/" rel="nofollow" target="_blank">Mubix's Room 362 - Start in Infosec</a></li><li><a href="https://tisiphone.net/" rel="nofollow" target="_blank">tisiphone.net</a></li></ul> [<a href="http://www.timothydeblock.com/eis?format=rss" rel="nofollow" target="_blank">RSS Feed</a>] [<a href="https://itunes.apple.com/us/podcast/eis-podcast-timothy-de-block/id1026428940" rel="nofollow" target="_blank">iTunes</a>]

How to join the infosec community - part 1

In this wide open edition of the Exploring Information Security podcast, Micah Hoffman joins me to discuss SANS SEC487 Open-Source Intelligence Gathering and Analysis.Micah (@WebBreacher) has spent the last year plus putting together the SANS SEC487 course. The course focuses on Open-Source Intelligence Gather and Analysis (OSINT). I had the pleasure of attending the very first iteration of the course. I had an absolute blast and would recommend the course to anyways (even those outside of infosec). I wrote about the course on my blog.In this episode we discuss:What is SANS SEC487?Who should attend the course?What was the origin of the course?How the beta went. [RSS Feed] [iTunes]

In this wide open edition of the Exploring Information Security podcast, Micah Hoffman joins me to discuss <a href="https://www.sans.org/course/open-source-intelligence-gathering" rel="nofollow" target="_blank">SANS SEC487 Open-Source Intelligence Gathering and Analysis</a>.Micah (<a href="https://twitter.com/WebBreacher" rel="nofollow" target="_blank">@WebBreacher</a>) has spent the last year plus putting together the SANS SEC487 course. The course focuses on Open-Source Intelligence Gather and Analysis (OSINT). I had the pleasure of attending the very first iteration of the course. I had an absolute blast and would recommend the course to anyways (even those outside of infosec). I <a href="http://www.timothydeblock.com/blog/2018/3/28/sans-sec487-open-source-intelligence-gathering-and-analysis" rel="nofollow" target="_blank">wrote about the course on my blog</a>.In this episode we discuss:<ul><li>What is SANS SEC487?</li><li>Who should attend the course?</li><li>What was the origin of the course?</li><li>How the beta went.</li></ul> [<a href="http://www.timothydeblock.com/eis?format=rss" rel="nofollow" target="_blank">RSS Feed</a>] [<a href="https://itunes.apple.com/us/podcast/eis-podcast-timothy-de-block/id1026428940" rel="nofollow" target="_blank">iTunes</a>]

What is SANS SEC487? Part 1

The best podcast episodes on global issues affecting everyone. Covering topics such as the #metoo movement, climate change, the impact of technology and some of the biggest global issues facing us right now. For anyone interested in learning more about the world, and some of the issues we're facing, pick an episode below and start listening! Add episodes you're interested into your queue below!

Best Episodes on Global Issues

The best podcast episodes of anyone with an interesting story. With famous guests like Obama, LeBron James, Drake, Oprah Winfrey, Richard Branson, Michelle Obama, Serena Williams, to anyone who has a unique and interesting story to tell. Add episodes you're interested into your queue below!