Douglas Brush

This is the 4th part of the podcast's return after a brief hiatus. Daniel Ayala continues his interview of me. In this fourth part, we will discuss my first forensic litigation case, the importance of data governance, the myth of cyber, why I am tired of cybersecurity conferences, and so much more!

This is the 4th part of the podcast's return after a brief hiatus. Daniel Ayala continues his interview of me. In this fourth part, we will discuss my first forensic litigation case, the importance of data governance, the myth of cyber, why I am tired of cybersecurity conferences, and so much more!

#126 – Douglas Brush (Part 4): Dollars and Cents, Not Bytes

This is the 3rd part of the podcast's return after a brief hiatus. Daniel Ayala continues his interview of me. In this third part, we will discuss what I am doing as a Special Master and Court Appointed Neutral, the reasons I think there will be a continued convergence of legal, cybersecurity, and data privacy, why I decided to start another consulting firm, data valuation, and so much more!

This is the 3rd part of the podcast's return after a brief hiatus. Daniel Ayala continues his interview of me. In this third part, we will discuss what I am doing as a Special Master and Court Appointed Neutral, the reasons I think there will be a continued convergence of legal, cybersecurity, and data privacy, why I decided to start another consulting firm, data valuation, and so much more!

#125 – Douglas Brush (Part 3): What is a Special Master?

This is the 2nd part of the return of the podcast after a brief hiatus.Daniel Ayala continues his interview of me. In this second part, we will discuss how I got started in the industry, defining moments of my career, my first computer, early entrepreneurship, characteristics I look for in professionals, the toxic cybersecurity gatekeeping, and so much more!

This is the 2nd part of the return of the podcast after a brief hiatus.<a href="https://www.linkedin.com/in/danielaayala/" rel="nofollow" target="_blank">Daniel Ayala</a> continues his interview of <a href="https://www.linkedin.com/in/douglasabrush/" rel="nofollow" target="_blank">me</a>. In this second part, we will discuss how I got started in the industry, defining moments of my career, my first computer, early entrepreneurship, characteristics I look for in professionals, the toxic cybersecurity gatekeeping, and so much more!

#124 – Douglas Brush (Part 2): Words of Advice

After a hiatus, the Cyber Security Interviews podcast is back!A lot has happened in my life over the past 18 months. I have endured death, despair, divorce, and car theft, to name a few traumatic events that made me take a break from several endeavors.However, it has allowed me to reprioritize many things to understand where I am now and where I want to go.This is the first of several episodes where Daniel Ayala interviews me. In this first part, we will cover mental resiliency, the importance of taking time off, how to be your best, and so much more!

After a hiatus, the Cyber Security Interviews podcast is back!A lot has happened in my life over the past 18 months. I have endured death, despair, divorce, and car theft, to name a few traumatic events that made me take a break from several endeavors.However, it has allowed me to reprioritize many things to understand where I am now and where I want to go.This is the first of several episodes where <a href="https://www.linkedin.com/in/danielaayala/" rel="nofollow" target="_blank">Daniel Ayala</a> interviews me. In this first part, we will cover mental resiliency, the importance of taking time off, how to be your best, and so much more!

#123 – Douglas Brush (Part 1): Guess Who’s Back, Dougie’s Back

Leeann Nicolo

Leeann Nicolo is the Incident Response lead at The Coalition and specializes in digital forensics and cyber investigations. She has conducted investigations into ransomware, phishing, hacking, data breaches, trade secret theft, and employee malfeasance. Leeann has investigated thousands of digital devices and has extensive subject matter expertise in Windows enterprise forensics, mobile device forensics, business email compromise, cloud security, and ransomware.Prior to joining Coalition, Leeann worked at Kivu Consulting in Denver and Kraft Kennedy in New York City overseeing complex cyber investigations and discovery matters for law firms and large multinational corporate clients. She conducted her undergraduate studies at the University of Albany in Information Systems, then achieved my Masters of Science in Cybersecurity at Pace University. She is also a SANS Lethal Forensicator Coin Holder and on the GIAC Advisory Board.In this episode, we discuss her start in information technology, how she made the move to cybersecurity, the discrimination she has faced in the industry, becoming a manager, strong women role models, mentoring others, and so much more.Where you can find Leeann:LinkedInThe CoalitionWall Street Journal

<a href="https://www.linkedin.com/in/leeann-nicolo/" rel="nofollow" target="_blank">Leeann Nicolo</a> is the Incident Response lead at <a href="https://www.coalitioninc.com/" rel="nofollow" target="_blank">The Coalition</a> and specializes in digital forensics and cyber investigations. She has conducted investigations into ransomware, phishing, hacking, data breaches, trade secret theft, and employee malfeasance. Leeann has investigated thousands of digital devices and has extensive subject matter expertise in Windows enterprise forensics, mobile device forensics, business email compromise, cloud security, and ransomware.Prior to joining Coalition, Leeann worked at <a href="https://kivuconsulting.com/" rel="nofollow" target="_blank">Kivu Consulting</a> in Denver and <a href="https://www.kraftkennedy.com/" rel="nofollow" target="_blank">Kraft Kennedy</a> in New York City overseeing complex cyber investigations and discovery matters for law firms and large multinational corporate clients. She conducted her undergraduate studies at the University of Albany in Information Systems, then achieved my <a href="https://www.pace.edu/program/cybersecurity-ms" rel="nofollow" target="_blank">Masters of Science in Cybersecurity at Pace University</a>. She is also a <a href="https://www.sans.org/digital-forensics-incident-response/coin-holders/" rel="nofollow" target="_blank">SANS Lethal Forensicator Coin Holder</a> and on the GIAC Advisory Board.In this episode, we discuss her start in information technology, how she made the move to cybersecurity, the discrimination she has faced in the industry, becoming a manager, strong women role models, mentoring others, and so much more.Where you can find Leeann:<ul><li><a href="https://www.linkedin.com/in/leeann-nicolo/" rel="nofollow" target="_blank">LinkedIn</a></li><li><a href="https://www.coalitioninc.com/" rel="nofollow" target="_blank">The Coalition</a></li><li><a href="https://www.wsj.com/articles/how-to-haggle-with-your-hacker-11566811806" rel="nofollow" target="_blank">Wall Street Journal</a></li></ul>

#122 – Leeann Nicolo: Go For It

Shannon Brazil

Shannon Brazil is a Senior Cyber Security Specialist working within a CIRT of a Canadian Fortune 500. She has been in IT for over 12 years, with the last three years in Cybercrime investigations with law enforcement and recently moving into the private sector to focus on Digital Forensic analysis and investigations and Incident Response.As a hobby, Shannon dives into OSINT CTFs, helps promote young women to enter the STEM industry through Technovation - an innovative program for young entrepreneurs, and offers mentorship to those looking to venture into Cyber Security. She is also a course designer and developer with her local college that aims to arm the new generations with tactics, techniques, and knowledge in becoming experts in Digital Forensics and Investigations.In this episode, we discuss starting as a chef, skills learned from culinary arts, moving from IT to investigations, burnout and self-care, mentors she follows, why she mentors others, diversity and inclusion, and so much more.Where you can find Shannon:LinkedInTwitterWebsite

<a href="https://www.linkedin.com/in/shannonbrazil/" rel="nofollow" target="_blank">Shannon Brazil </a>is a Senior Cyber Security Specialist working within a CIRT of a Canadian Fortune 500. She has been in IT for over 12 years, with the last three years in Cybercrime investigations with law enforcement and recently moving into the private sector to focus on Digital Forensic analysis and investigations and Incident Response.As a hobby, Shannon dives into OSINT CTFs, helps promote young women to enter the STEM industry through Technovation - an innovative program for young entrepreneurs, and offers mentorship to those looking to venture into Cyber Security. She is also a course designer and developer with her local college that aims to arm the new generations with tactics, techniques, and knowledge in becoming experts in Digital Forensics and Investigations.In this episode, we discuss starting as a chef, skills learned from culinary arts, moving from IT to investigations, burnout and self-care, mentors she follows, why she mentors others, diversity and inclusion, and so much more.Where you can find Shannon:<ul><li><a href="https://www.linkedin.com/in/shannonbrazil/" rel="nofollow" target="_blank">LinkedIn</a></li><li><a href="https://twitter.com/4n6lady" rel="nofollow" target="_blank">Twitter</a></li><li><a href="www.4n6lady.com" rel="nofollow" target="_blank">Website</a></li></ul>

#121 – Shannon Brazil: Teach Business to Tech People

Cimone Wright-Hamor works at Pacific Northwest National Laboratory (PNNL) as a cybersecurity researcher while pursuing a Ph.D. in Computer Engineering at Iowa State University. She has spent the last decade of her life interning at a variety of organizations. She has had ten internships at more than six different organizations, including public and private industries ranging from Fortune 500 companies like Microsoft to successful startups such as Smart-Ag, state government, and national laboratories.Cimone has spent the last five years of her career working in the cybersecurity field. While completing research, she has helped protect the infrastructure for the State of Iowa and ensured that startup companies are developing software with security in mind.In this episode, we discuss getting started in information security due to responding to an incident, an early upbringing which prepared her for cybersecurity, bridging theory to engineering, teaming with dev and security teams, the importance of project updates, increasing diversity in the industry, and so much more.Where you can find Cimone:LinkedInblackcomputeHERPNNL

<a href="https://www.linkedin.com/in/wright-hamor/" rel="nofollow" target="_blank">Cimone Wright-Hamor</a> works at <a href="https://www.pnnl.gov/cybersecurity" rel="nofollow" target="_blank">Pacific Northwest National Laboratory</a> (PNNL) as a cybersecurity researcher while pursuing a Ph.D. in Computer Engineering at Iowa State University. She has spent the last decade of her life interning at a variety of organizations. She has had ten internships at more than six different organizations, including public and private industries ranging from Fortune 500 companies like <a href="https://www.microsoft.com/" rel="nofollow" target="_blank">Microsoft</a> to successful startups such as <a href="https://www.smartagllc.com/" rel="nofollow" target="_blank">Smart-Ag</a>, state government, and national laboratories.Cimone has spent the last five years of her career working in the cybersecurity field. While completing research, she has helped protect the infrastructure for the State of Iowa and ensured that startup companies are developing software with security in mind.In this episode, we discuss getting started in information security due to responding to an incident, an early upbringing which prepared her for cybersecurity, bridging theory to engineering, teaming with dev and security teams, the importance of project updates, increasing diversity in the industry, and so much more.Where you can find Cimone:<ul><li><a href="https://www.linkedin.com/in/wright-hamor/" rel="nofollow" target="_blank">LinkedIn</a></li><li><a href="https://blackcomputeher.org/" rel="nofollow" target="_blank">blackcomputeHER</a></li><li><a href="https://www.pnnl.gov/science/staff/staff_info.asp?staff_num=10129" rel="nofollow" target="_blank">PNNL</a></li></ul>

#120 – Cimone Wright-Hamor: Cybersecurity Is An Applied Field

Jenna Waters is a Cybersecurity Consultant at True Digital Security where she specializes in information security program development, industry compliance assessments, threat intelligence, and cloud security controls. She is an experienced professional who consults with companies across multiple industries in achieving security-related best practices and/or regulatory compliance objectives related to risk management and compliance frameworks, and various privacy laws throughout the United States.Jenna began her career in the United States Navy working under the U.S. Fleet Cyber Command at the Naval Intelligence Operations Center (NIOC) and with the National Security Agency (NSA). Afterward, she graduated from the University of Tulsa with a degree in Computer Information Systems. Jenna is passionate about sharing her knowledge of cybersecurity with business owners, public policy leaders, and healthcare, financial, and tech industry members. When she isn’t busy helping her clients protect their customers’ data, Jenna is a voracious reader, aspiring hobbyist, and dog mom of two.In this episode, we discuss starting cybersecurity with the U.S. Navy, tying spoken languages to coding languages, leading and managing people, building an information security program, getting leadership buy-in, using frameworks for resiliency, diversity and inclusion, and so much more.Where you can find Jenna:LinkedInTwitterBlog

<a href="https://www.linkedin.com/in/je-waters/" rel="nofollow" target="_blank">Jenna Waters </a>is a Cybersecurity Consultant at <a href="https://truedigitalsecurity.com/blog" rel="nofollow" target="_blank">True Digital Security</a> where she specializes in information security program development, industry compliance assessments, threat intelligence, and cloud security controls. She is an experienced professional who consults with companies across multiple industries in achieving security-related best practices and/or regulatory compliance objectives related to risk management and compliance frameworks, and various privacy laws throughout the United States.Jenna began her career in the United States Navy working under the <a href="https://www.fcc.navy.mil/" rel="nofollow" target="_blank">U.S. Fleet Cyber Command at the Naval Intelligence Operations Center (NIOC)</a> and with the National Security Agency (NSA). Afterward, she graduated from the <a href="https://business.utulsa.edu/accounting-cis/computer-information-systems/" rel="nofollow" target="_blank">University of Tulsa </a>with a degree in Computer Information Systems. Jenna is passionate about sharing her knowledge of cybersecurity with business owners, public policy leaders, and healthcare, financial, and tech industry members. When she isn’t busy helping her clients protect their customers’ data, Jenna is a voracious reader, aspiring hobbyist, and dog mom of two.In this episode, we discuss starting cybersecurity with the U.S. Navy, tying spoken languages to coding languages, leading and managing people, building an information security program, getting leadership buy-in, using frameworks for resiliency, diversity and inclusion, and so much more.Where you can find Jenna:<ul><li><a href="https://www.linkedin.com/in/je-waters/" rel="nofollow" target="_blank">LinkedIn</a></li><li><a href="https://twitter.com/truedigitalsec" rel="nofollow" target="_blank">Twitter</a></li><li><a href="https://truedigitalsecurity.com/blog" rel="nofollow" target="_blank">Blog</a></li></ul>

#119 – Jenna Waters: This Is My Team

Nato Riley

Nato Riley is an Integrations Engineer at Blumira and the Co-founder of Cloud Underground. Nato provides infrastructure, code, and security across all his efforts and is focused on helping Blumira build the most effective and efficient SIEM on the market for small to mid-sized businesses.He is the host of the “Nato as Code” and the "Cloud Underground" productions on YouTube, the creator and maintainer of the Olympiad platform, and the founder of notiaPoint (now known as Cloud Underground).In this episode, we discuss starting in technology repairing computers, going to school for public speaking, finding passion in information security, trying too hard to pass certification tests, going out on his own, mentorships, burnout, diversity, and so much more.Where you can find Nato:LinkedInTwitterNato as Code - YouTubeCloud Undeground - YouTube

<a href="https://www.linkedin.com/in/nato-riley/" rel="nofollow" target="_blank">Nato Riley</a> is an Integrations Engineer at <a href="https://www.blumira.com/" rel="nofollow" target="_blank">Blumira</a> and the Co-founder of <a href="https://cloudunderground.dev/" rel="nofollow" target="_blank">Cloud Underground</a>. Nato provides infrastructure, code, and security across all his efforts and is focused on helping Blumira build the most effective and efficient SIEM on the market for small to mid-sized businesses.He is the host of the “Nato as Code” and the "<a href="https://www.youtube.com/channel/UCnKbJ2vW3QYcLot2D1xeJmA" rel="nofollow" target="_blank">Cloud Underground</a>" productions on YouTube, the creator and maintainer of the Olympiad platform, and the founder of <a href="https://notiapoint.com/" rel="nofollow" target="_blank">notiaPoint</a> (now known as <a href="https://cloudunderground.dev/" rel="nofollow" target="_blank">Cloud Underground</a>).In this episode, we discuss starting in technology repairing computers, going to school for public speaking, finding passion in information security, trying too hard to pass certification tests, going out on his own, mentorships, burnout, diversity, and so much more.Where you can find Nato:<ul><li><a href="https://www.linkedin.com/in/nato-riley/" rel="nofollow" target="_blank">LinkedIn</a></li><li><a href="https://twitter.com/NateRiles" rel="nofollow" target="_blank">Twitter</a></li><li><a href="https://www.youtube.com/c/natoascode" rel="nofollow" target="_blank">Nato as Code - YouTube</a></li><li><a href="https://www.youtube.com/channel/UCnKbJ2vW3QYcLot2D1xeJmA" rel="nofollow" target="_blank">Cloud Undeground - YouTube</a></li></ul>

#118 – Nato Riley: Reinvent Reality and Reinvent the World

Sara Avery

Sara Avery is a Regional Sales Manager at Zscaler. She has held various positions over the past 20 years in the Information Technology field and discovered her passion for information security 15 years ago. Her career has largely been spent in sales and account management with a laser focus on my customer's success. Sara's tenured experience in cybersecurity has given her a strong understanding of the complex technology and intelligence required to keep enterprises secure.From a young age, she was raised to be a strong female and leader. Her mother, along with other trailblazing women, campaigned to start the Equal Rights Amendment in Colorado in the early 1970s. With a passion for helping others, Sara wanted to start a group that would help, mentor, learn and guide women and founded Women in Cyber Security, ISSA Denver. Her vision was to find a way to inspire and support women in all areas of information security, as well as develop and mentor the younger female generation for the future of the dynamic and ever-changing world of information security.In this episode, we discuss her early start with Y2K, why she helped start Women In Security with the Denver ISSA chapter, the evolution of communications with workstyles, getting young girls into STEM, how she is championing equality at work, dealing with gaslighting, mansplaining, and microaggressions, removing the stigma of "the hacker," and so much more!Where you can find Sara:LinkedInWomen In Security - ISSA Denver

<a href="https://www.linkedin.com/in/sara-avery-6aa1587/" rel="nofollow" target="_blank">Sara Avery</a> is a Regional Sales Manager at <a href="https://www.zscaler.com/" rel="nofollow" target="_blank">Zscaler</a>. She has held various positions over the past 20 years in the Information Technology field and discovered her passion for information security 15 years ago. Her career has largely been spent in sales and account management with a laser focus on my customer's success. Sara's tenured experience in cybersecurity has given her a strong understanding of the complex technology and intelligence required to keep enterprises secure.From a young age, she was raised to be a strong female and leader. Her mother, along with other trailblazing women, campaigned to start the Equal Rights Amendment in Colorado in the early 1970s. With a passion for helping others, Sara wanted to start a group that would help, mentor, learn and guide women and founded <a href="https://www.denverissa.org/women-in-security" rel="nofollow" target="_blank">Women in Cyber Security, ISSA Denver</a>. Her vision was to find a way to inspire and support women in all areas of information security, as well as develop and mentor the younger female generation for the future of the dynamic and ever-changing world of information security.In this episode, we discuss her early start with Y2K, why she helped start Women In Security with the Denver ISSA chapter, the evolution of communications with workstyles, getting young girls into STEM, how she is championing equality at work, dealing with gaslighting, mansplaining, and microaggressions, removing the stigma of "the hacker," and so much more!Where you can find Sara:<ul><li><a href="https://www.linkedin.com/in/sara-avery-6aa1587/" rel="nofollow" target="_blank">LinkedIn</a></li><li><a href="https://www.denverissa.org/women-in-security" rel="nofollow" target="_blank">Women In Security - ISSA Denver</a></li></ul>

#117 – Sara Avery: Go After What You Want

There is “no one way” to start and stay in the field of cyber security. Whether you are involved from the military, law enforcement, consulting, or IT services, it doesn’t matter. I have had countless discussions for years with other professionals online, at conferences, or over drinks, which have changed the way I think about cyber security. That is where this podcast comes in. What if I can capture those moments and frank discussions? I want to share the stories from other cyber security leaders and influencers so everyone can learn from their respective journeys and challenges. Why did they take the path they did? Who were their mentors? How did they tackle some of their biggest career challenges? By hearing how the industry leaders and influencers got to where they are and how they overcame some of the problems they faced, I hope to shed light on the path for other professionals. I will discover what motivates them, explore their journey in cyber security, and discuss where they think the industry is going.

Stunning interviews with Cybersecurity thought leaders!

Absolutely recommended

Great content for anyone interested in cyber security

Great content!

Cyber Security Interviews

David Cowen

David Cowen has more than sixteen years of experience in the areas of security integration, architecture, assessment, programming, forensic analysis and investigations. He started out as a penetration tester then moved to digital forensics. Currently, he is a partner at G-C Partners, LLC, a full service digital forensics investigation company, and has experience working in a variety of environments ranging from high security military installations to large/small private sector companies.David is also one of the most passionate and active contributors within the cyber security and forensic communities. I look at David's contributions and think he doesn't sleep and/or someone in Dallas, TX there is cloning facility that has produced David Cowens versions 2 -5 which are all running around outputting awesome contributions to the community (yes, like the movie Multiplicity).Here is just a short list of what David' does to give back to the industry:Regular speaker at conferences such as OSDFConRan his blog, Hacking Exposed Computer Forensics, daily which included a weekly forensic challengeIs a Red Team Captain for the National Collegiate Cyber Defense CompetitionHas his own regular video podcast, Forensic Lunch Author of Computer Forensics: InfoSec Pro GuideCo-author of Hacking Exposed: Computer ForensicsCo-author of Anti-Hacker Tool Kit, Third EditionIs a SANS Institute Certified InstructorDeveloped TriForce ANJP, forensic software for parsing NTFS journals (also working on HFS+ capabilities)He is also a two-time Forensic 4cast award winner for both Digital Forensic Article of the Year and Digital Forensic Blog of the year.When he is not doing all of this, he is also a family man and BBQ aficionado.Nope. Zero chance this is one person.In this interview we will discuss how he has accomplished all of this, why he loves being an expert witness, why he moved from pen tester to forensicator, his inspiration to start programming, his favorite type of investigation and the questions to ask, how to hire good talent, what it took to develop TriForce ANJP and how it was a community effort, how no one stands on their own in the industry, and much more.I hope you enjoy this discussion. Please leave your comments below!Where you can find David:LinkedInTwitterHacking Exposed Computer ForensicsForensic Lunch 

<a href="https://www.linkedin.com/in/dcowen" rel="nofollow" target="_blank">David Cowen</a> has more than sixteen years of experience in the areas of security integration, architecture, assessment, programming, forensic analysis and investigations. He started out as a penetration tester then moved to digital forensics. Currently, he is a partner at <a href="http://www.g-cpartners.com/" rel="nofollow" target="_blank">G-C Partners, LLC</a>, a full service digital forensics investigation company, and has experience working in a variety of environments ranging from high security military installations to large/small private sector companies.David is also one of the most passionate and active contributors within the cyber security and forensic communities. I look at David's contributions and think he doesn't sleep and/or someone in Dallas, TX there is cloning facility that has produced David Cowens versions 2 -5 which are all running around outputting awesome contributions to the community (yes, like the movie <a href="http://www.imdb.com/title/tt0117108/?ref_=nm_flmg_act_44" rel="nofollow" target="_blank">Multiplicity</a>).Here is just a short list of what David' does to give back to the industry:<ul><li>Regular speaker at conferences such as <a href="http://www.osdfcon.org/2016-event/2016-agenda/" rel="nofollow" target="_blank">OSDFCon</a></li><li>Ran his blog, <a href="http://www.hecfblog.com/" rel="nofollow" target="_blank">Hacking Exposed Computer Forensics</a>, daily which included a weekly forensic challenge</li><li>Is a Red Team Captain for the <a href="http://www.nationalccdc.org/" rel="nofollow" target="_blank">National Collegiate Cyber Defense Competition</a></li><li>Has his own regular video podcast, <a href="https://www.youtube.com/user/LearnForensics" rel="nofollow" target="_blank">Forensic Lunch </a></li><li>Author of <a href="https://www.amazon.com/Computer-Forensics-InfoSec-Pro-Guide/dp/007174245X" rel="nofollow" target="_blank">Computer Forensics: InfoSec Pro Guide</a></li><li>Co-author of <a href="https://www.amazon.com/Hacking-Exposed-Computer-Forensics-Second/dp/0071626778" rel="nofollow" target="_blank">Hacking Exposed: Computer Forensics</a></li><li>Co-author of <a href="https://www.amazon.com/Anti-Hacker-Tool-Third-Mike-Shema/dp/0072262877" rel="nofollow" target="_blank">Anti-Hacker Tool Kit, Third Edition</a></li><li>Is a <a href="https://www.sans.org/instructors/david-cowen" rel="nofollow" target="_blank">SANS Institute Certified Instructor</a></li><li>Developed <a href="https://www.gettriforce.com/product/triforce-anjp/" rel="nofollow" target="_blank">TriForce ANJP</a>, forensic software for parsing NTFS journals (also working on <a href="https://www.gettriforce.com/product/hfs-journal-parser/" rel="nofollow" target="_blank">HFS+ capabilities</a>)</li></ul>He is also a two-time <a href="https://forensic4cast.com/forensic-4cast-awards/" rel="nofollow" target="_blank">Forensic 4cast</a> award winner for both Digital Forensic Article of the Year and Digital Forensic Blog of the year.When he is not doing all of this, he is also a family man and BBQ aficionado.Nope. Zero chance this is one person.In this interview we will discuss how he has accomplished all of this, why he loves being an expert witness, why he moved from pen tester to forensicator, his inspiration to start programming, his favorite type of investigation and the questions to ask, how to hire good talent, what it took to develop TriForce ANJP and how it was a community effort, how no one stands on their own in the industry, and much more.I hope you enjoy this discussion. Please leave your comments below!Where you can find David:<ul><li><a href="https://www.linkedin.com/in/dcowen" rel="nofollow" target="_blank">LinkedIn</a></li><li><a href="https://twitter.com/HECFBlog" rel="nofollow" target="_blank">Twitter</a></li><li><a href="http://www.hecfblog.com/" rel="nofollow" target="_blank">Hacking Exposed Computer Forensics</a></li><li><a href="https://www.youtube.com/user/LearnForensics" rel="nofollow" target="_blank">Forensic Lunch </a></li></ul>

#002 – David Cowen: Standing On the Shoulders of Giants

Lesley Carhart

Lesley Carhart is a Principal Threat Analyst at the Threat Operations Center at Dragos. She is recognized as a subject matter expert in cybersecurity, incident response, and digital forensics, regularly speaking at conferences and universities. She has spent the last 11 years of her 20+ year IT career specializing in information security, with a heavy focus on response to nation-state adversary attacks. Prior to Dragos, she was the incident response team lead at Motorola Solutions, performing digital forensics and incident handling services for both enterprise and public safety customers.In 2017, Lesley was named a “Top Woman in Cybersecurity” by Cyberscoop news and received the Guidance Enfuse conference “Women in Technology” award. She holds a Bachelor’s Degree in Network Technologies from DePaul University, A.A.S. in Avionics Systems and Electronics Systems, GIAC GCIH, GREM, GCFA, and GCFE certifications, and currently serves as a Cyber Systems NCO in the US Air Force Reserves.In her free time, Lesley co-organizes resume and interview clinics at several cybersecurity conferences, blogs, and tweets prolifically about infosec, and is a youth martial arts instructor.In this episode, we discuss her early mentors, mentoring, writing resumes, starting as a coder, organizational missions, ICS security, electronic voting, submitting CFPs, and so much more.Where you can find Lesley:LinkedInBlogYouTubeTwitter

<a href="https://www.linkedin.com/in/lcarhart/" rel="nofollow" target="_blank">Lesley Carhart</a> is a Principal Threat Analyst at the Threat Operations Center at <a href="https://dragos.com/team/lesley-carhart/" rel="nofollow" target="_blank">Dragos</a>. She is recognized as a subject matter expert in cybersecurity, incident response, and digital forensics, regularly speaking at conferences and universities. She has spent the last 11 years of her 20+ year IT career specializing in information security, with a heavy focus on response to nation-state adversary attacks. Prior to Dragos, she was the incident response team lead at Motorola Solutions, performing digital forensics and incident handling services for both enterprise and public safety customers.In 2017, Lesley was named a <a href="https://www.cyberscoop.com/2017-top-women-in-cybersecurity/" rel="nofollow" target="_blank">“Top Woman in Cybersecurity”</a> by Cyberscoop news and received the Guidance Enfuse conference “Women in Technology” award. She holds a Bachelor’s Degree in Network Technologies from DePaul University, A.A.S. in Avionics Systems and Electronics Systems, GIAC GCIH, GREM, GCFA, and GCFE certifications, and currently serves as a Cyber Systems NCO in the US Air Force Reserves.In her free time, Lesley co-organizes resume and interview clinics at several cybersecurity conferences, blogs, and tweets prolifically about infosec, and is a youth martial arts instructor.In this episode, we discuss her early mentors, mentoring, writing resumes, starting as a coder, organizational missions, ICS security, electronic voting, submitting CFPs, and so much more.Where you can find Lesley:<ul><li><a href="https://www.linkedin.com/in/lcarhart/" rel="nofollow" target="_blank">LinkedIn</a></li><li><a href="https://tisiphone.net/" rel="nofollow" target="_blank">Blog</a></li><li><a href="https://www.youtube.com/user/hacks4pancakes" rel="nofollow" target="_blank">YouTube</a></li><li><a href="https://twitter.com/hacks4pancakes" rel="nofollow" target="_blank">Twitter</a></li></ul>

#076 – Lesley Carhart: You’ve Got to Play the Game

Lenny Zeltser

Lenny Zeltser is a seasoned business and tech leader with extensive information security expertise. As a product portfolio owner at a Fortune 500 company, he delivers the financial success and expansion of his orgnization's security services and SaaS products. He has also been a national lead of the security consulting practice at Savvis (acquired by CenturyLink), where he managed the US team of service professionals, aligning their expertise to the firm’s cloud solutions.Lenny helps shape global infosec practices by teaching incident response and malware defenses at SANS Institute and by sharing knowledge through writing, public speaking and community projects. He has earned the prestigious GIAC Security Expert professional designation and developed the Linux toolkit REMnux, which is used by malware analysts throughout the world. Lenny is on the Board of Directors of SANS Technology Institute and on the Advisory Board of Minerva Labs.Lenny’s approaches to business and technology are built upon his work experience, independent research, as well as a Computer Science degree from the University of Pennsylvania and an MBA degree from MIT Sloan. His expertise is strongest at the intersection of business, technology, and information security, and spans incident response, infosec cloud services and business strategy. To get a sense for Lenny’s thought process and knowledge areas, take a look at his blog.In this interview we will discuss why he is passionate about security, stagnating in information security and going back to grad school, public speaking, who has inspired him, his personal challenge asking for advice, early failures in technology, why he developed REMnux to make malware analysis accessible to as many people as possible, cloud security, writing better job descriptions, refining communication skills to technical and non-technical audiences, how to use certifications as a signaling mechanism, building industry relationships, and much more.I hope you enjoy this discussion. Please leave your comments below!Where you can find Lenny:LinkedInTwitterLenny's BlogREMnux

<a href="https://www.linkedin.com/in/lennyzeltser" rel="nofollow" target="_blank">Lenny Zeltser</a> is a seasoned business and tech leader with extensive information security expertise. As a product portfolio owner at a Fortune 500 company, he delivers the financial success and expansion of his orgnization's security services and SaaS products. He has also been a national lead of the security consulting practice at Savvis (acquired by CenturyLink), where he managed the US team of service professionals, aligning their expertise to the firm’s cloud solutions.Lenny helps shape global infosec practices by teaching incident response and malware defenses at <a href="https://www.sans.org/" rel="nofollow" target="_blank">SANS Institute</a> and by sharing knowledge through writing, public speaking and community projects. He has earned the prestigious GIAC Security Expert professional designation and developed the Linux toolkit <a href="https://remnux.org/" rel="nofollow" target="_blank">REMnux</a>, which is used by malware analysts throughout the world. Lenny is on the Board of Directors of <a href="http://www.sans.edu/" rel="nofollow" target="_blank">SANS Technology Institute</a> and on the Advisory Board of <a href="https://www.minerva-labs.com/" rel="nofollow" target="_blank">Minerva Labs</a>.Lenny’s approaches to business and technology are built upon his work experience, independent research, as well as a Computer Science degree from the University of Pennsylvania and an MBA degree from MIT Sloan. His expertise is strongest at the intersection of business, technology, and information security, and spans incident response, infosec cloud services and business strategy. To get a sense for Lenny’s thought process and knowledge areas, take a look at his <a href="https://zeltser.com/" rel="nofollow" target="_blank">blog</a>.In this interview we will discuss why he is passionate about security, stagnating in information security and going back to grad school, public speaking, who has inspired him, his personal challenge asking for advice, early failures in technology, why he developed REMnux to make malware analysis accessible to as many people as possible, cloud security, writing better job descriptions, refining communication skills to technical and non-technical audiences, how to use certifications as a signaling mechanism, building industry relationships, and much more.I hope you enjoy this discussion. Please leave your comments below!Where you can find Lenny:<ul><li><a href="https://www.linkedin.com/in/lennyzeltser" rel="nofollow" target="_blank">LinkedIn</a></li><li><a href="https://twitter.com/lennyzeltser" rel="nofollow" target="_blank">Twitter</a></li><li><a href="https://zeltser.com/" rel="nofollow" target="_blank">Lenny's Blog</a></li><li><a href="https://remnux.org/" rel="nofollow" target="_blank">REMnux</a></li></ul>

#003 – Lenny Zeltser: You Can Never Know Everything

This is a solo episode between interviews.I have been doing IT and security consulting for a long time. Over this time, I have noticed a few things that are worth noting when hiring a security consultant. In fact, I would say until you perform some basics and perform some due diligence on your own, don't hire me or any other security consultant. Yes, this seems a little counter intuitive for me to say, "Don't hire me," but there are many common elements I see in environment after environment both on the proactive and responsive engagements.This episode will touch on some of these elements and is by no means all inclusive.The take away is to get to know thy self and do your home work!

This is a solo episode between interviews.I have been doing IT and security consulting for a long time. Over this time, I have noticed a few things that are worth noting when hiring a security consultant. In fact, I would say until you perform some basics and perform some due diligence on your own, don't hire me or any other security consultant. Yes, this seems a little counter intuitive for me to say, "Don't hire me," but there are many common elements I see in environment after environment both on the proactive and responsive engagements.This episode will touch on some of these elements and is by no means all inclusive.The take away is to get to know thy self and do your home work!

#029 – Don’t Hire Security Consultants

Brian Martin

Brian Martin (a.k.a. Jericho) has been poking about the hacker and security scene for over 22 years, building valuable skills such as skepticism and anger management. As a hacker-turned-security whore, Jericho has a great perspective to offer an unsolicited opinion on just about any security topic. A long-time advocate of advancing the field, sometimes by any means necessary, he thinks the idea of ‘forward-thinking’ is quaint; we’re supposed to be thinking that way all the time. No degree, no certifications, just the willingness to say things many in this dismal industry are thinking, but unwilling to say themselves. He remains a champion of security industry integrity and small misunderstood creatures. In this episode, we discuss starting as a phreak and phone systems, BBS hacking forums, sharing knowledge, calling people out, cybersecurity skill shortages, understanding the adversaries mindset, PCI compliance, and so much more. Where you can find Brian:  LinkedIn attrition.org Twitter 

Brian Martin (a.k.a. Jericho) has been poking about the hacker and security scene for over 22 years, building valuable skills such as skepticism and anger management. As a hacker-turned-security whore, Jericho has a great perspective to offer an unsolicited opinion on just about any security topic. A long-time advocate of advancing the field, sometimes by any means necessary, he thinks the idea of ‘forward-thinking’ is quaint; we’re supposed to be thinking that way all the time. No degree, no certifications, just the willingness to say things many in this dismal industry are thinking, but unwilling to say themselves. He remains a champion of security industry integrity and small misunderstood creatures. In this episode, we discuss starting as a phreak and phone systems, BBS hacking forums, sharing knowledge, calling people out, cybersecurity skill shortages, understanding the adversaries mindset, PCI compliance, and so much more. Where you can find Brian: <ul> <li><a href="https://linkedin.com/in/attritionorg" rel="nofollow" target="_blank">LinkedIn</a></li> <li><a href="http://attrition.org/" rel="nofollow" target="_blank">attrition.org</a></li> <li><a href="https://twitter.com/attritionorg" rel="nofollow" target="_blank">Twitter</a></li> </ul>

#075 – Brian Martin (Jericho): The Hacker Mindset

Chad Loder

Chad Loder is the CEO and co-founder of Habitu8, a Los Angeles-based cyber security startup that's transforming the security awareness industry away from its traditional "training-centric" approach to an approach that is based on measurable risk reduction through influencing and measuring key employee behaviors.Prior to Habitu8, Chad was co-founder and VP of Engineering at Rapid7, which he helped bring to a $900M IPO in 2015. Chad has also worked as a public company CISO and a strategic advisor to several security startups.In this episode we discuss his start with phreaking, starting Rapid7, the focus on the human element in infosec, mistakes users make, how to measure your programs success, how people learn security, being a founder, and so much more.Where you can find Chad:LinkedInTwitterBlog

<a href="https://www.linkedin.com/in/chadloder/" rel="nofollow" target="_blank">Chad Loder</a> is the CEO and co-founder of <a href="https://www.habitu8.io/" rel="nofollow" target="_blank">Habitu8</a>, a Los Angeles-based cyber security startup that's transforming the security awareness industry away from its traditional "training-centric" approach to an approach that is based on measurable risk reduction through influencing and measuring key employee behaviors.Prior to Habitu8, Chad was co-founder and VP of Engineering at <a href="https://www.rapid7.com/" rel="nofollow" target="_blank">Rapid7</a>, which he helped bring to a $900M IPO in 2015. Chad has also worked as a public company CISO and a strategic advisor to several security startups.In this episode we discuss his start with phreaking, starting Rapid7, the focus on the human element in infosec, mistakes users make, how to measure your programs success, how people learn security, being a founder, and so much more.Where you can find Chad:<ul><li><a href="https://www.linkedin.com/in/chadloder/" rel="nofollow" target="_blank">LinkedIn</a></li><li><a href="https://twitter.com/chadloder" rel="nofollow" target="_blank">Twitter</a></li><li><a href="https://blog.habitu8.io/blog" rel="nofollow" target="_blank">Blog</a></li></ul>

#062 – Chad Loder: Just Because It’s Basic, Doesn’t Mean It’s Easy

Eric Conrad

SANS Senior Instructor Eric Conrad is the lead author of SANS MGT414: SANS Training Program for CISSP® Certification, and coauthor of both SANS SEC511: Continuous Monitoring and Security Operations and SANS SEC542: Web App Penetration Testing and Ethical Hacking. He is also the lead author of the books the CISSP Study Guide, and the Eleventh Hour CISSP: Study Guide.Eric's career began in 1991 as a UNIX systems administrator for a small oceanographic communications company. He gained information security experience in a variety of industries, including research, education, power, Internet, and health care. He is now CTO of Backshore Communications, a company focusing on hunt teaming, intrusion detection, incident handling, and penetration testing. He is a graduate of the SANS Technology Institute with a master of science degree in information security engineering. In addition to the CISSP, he holds the prestigious GIAC Security Expert (GSE) certification as well as the GIAC GPEN, GCIH, GCIA, GCFA, GAWN, and GSEC certifications. Eric also blogs about information security at www.ericconrad.com.In this episode we discuss starting in IT before there was infosec, the value of certifications, making blue teams sexy again, teaching for SANS, what makes a good cyber security professional, threat hunting, the importance of PowerShell, DeepBlueCLI, and so much more.Where you can find Eric:LinkedInTwitterBlogSANSGitHubAmazon

SANS Senior Instructor <a href="https://www.linkedin.com/in/ericconrad/" rel="nofollow" target="_blank">Eric Conrad</a> is the lead author of <a href="https://www.sans.org/course/sans-plus-s-training-program-cissp-certification-exam" rel="nofollow" target="_blank">SANS MGT414: SANS Training Program for CISSP® Certification</a>, and coauthor of both <a href="https://www.sans.org/course/continuous-monitoring-security-operations" rel="nofollow" target="_blank">SANS SEC511: Continuous Monitoring and Security Operations</a> and <a href="https://www.sans.org/course/web-app-penetration-testing-ethical-hacking" rel="nofollow" target="_blank">SANS SEC542: Web App Penetration Testing and Ethical Hacking</a>. He is also the lead author of the books the <a href="https://www.amazon.com/CISSP-Study-Guide-Third-Conrad/dp/0128024372" rel="nofollow" target="_blank">CISSP Study Guide</a>, and the <a href="https://www.amazon.com/dp/0128112484/ref=la_B003GX931K_ob_2?s=books&amp;ie=UTF8&amp;qid=1507226651&amp;sr=1-2" rel="nofollow" target="_blank">Eleventh Hour CISSP: Study Guide</a>.Eric's career began in 1991 as a UNIX systems administrator for a small oceanographic communications company. He gained information security experience in a variety of industries, including research, education, power, Internet, and health care. He is now CTO of <a href="https://www.backshore.net/" rel="nofollow" target="_blank">Backshore Communications</a>, a company focusing on hunt teaming, intrusion detection, incident handling, and penetration testing. He is a graduate of the SANS Technology Institute with a master of science degree in information security engineering. In addition to the CISSP, he holds the prestigious <a href="https://www.giac.org/certification/security-expert-gse" rel="nofollow" target="_blank">GIAC Security Expert (GSE)</a> certification as well as the GIAC GPEN, GCIH, GCIA, GCFA, GAWN, and GSEC certifications. Eric also blogs about information security at <a href="http://www.ericconrad.com" rel="nofollow" target="_blank">www.ericconrad.com</a>.In this episode we discuss starting in IT before there was infosec, the value of certifications, making blue teams sexy again, teaching for <a href="https://www.sans.org/" rel="nofollow" target="_blank">SANS</a>, what makes a good cyber security professional, threat hunting, the importance of PowerShell, <a href="http://www.ericconrad.com/2016/09/deepbluecli-powershell-module-for-hunt.html" rel="nofollow" target="_blank">DeepBlueCLI</a>, and so much more.Where you can find Eric:<ul><li><a href="https://www.linkedin.com/in/ericconrad/" rel="nofollow" target="_blank">LinkedIn</a></li><li><a href="https://twitter.com/eric_conrad" rel="nofollow" target="_blank">Twitter</a></li><li><a href="http://www.ericconrad.com" rel="nofollow" target="_blank">Blog</a></li><li><a href="https://www.sans.org/instructors/eric-conrad" rel="nofollow" target="_blank">SANS</a></li><li><a href="https://github.com/sans-blue-team/DeepBlueCLI" rel="nofollow" target="_blank">GitHub</a></li><li><a href="https://www.amazon.com/Eric-Conrad/e/B003GX931K/" rel="nofollow" target="_blank">Amazon</a></li></ul>

#038 – Eric Conrad: You Need To Be Interested Beyond 9 to 5

Ryan Kalember

Ryan Kalember has over 15-years of experience in the information security industry. Ryan currently leads cybersecurity strategy for Proofpoint and is a sought-out expert for media commentary on breaches and best practices for enterprises as well as consumers. He joined Proofpoint from WatchDox where he served as chief marketing officer and was responsible for successfully building and leading the marketing team through the company’s acquisition by Blackberry.Prior to WatchDox, Ryan was instrumental in running solutions across Hewlett-Packard’s portfolio of security products. He has also held a variety of marketing leadership positions at ArcSight and VeriSign including EMEA regional manager. Ryan received his bachelor's degree from Stanford University, where he studied fault tolerance, cryptography, and authentication algorithms.In this episode we discuss his start in cyber security, his transition to marketing and product management, the importance of communication skills, the changing role of the CISO, AI and machine learning, the malware research his team does, the spread of ransomware, and so much more.Where you can find Ryan:LinkedInTwitterProofpoint Blog

<a href="https://www.linkedin.com/in/kalember/" rel="nofollow" target="_blank">Ryan Kalember</a> has over 15-years of experience in the information security industry. Ryan currently leads cybersecurity strategy for <a href="https://www.proofpoint.com/us" rel="nofollow" target="_blank">Proofpoint</a> and is a sought-out expert for media commentary on breaches and best practices for enterprises as well as consumers. He joined Proofpoint from WatchDox where he served as chief marketing officer and was responsible for successfully building and leading the marketing team through the company’s acquisition by Blackberry.Prior to WatchDox, Ryan was instrumental in running solutions across Hewlett-Packard’s portfolio of security products. He has also held a variety of marketing leadership positions at ArcSight and VeriSign including EMEA regional manager. Ryan received his bachelor's degree from Stanford University, where he studied fault tolerance, cryptography, and authentication algorithms.In this episode we discuss his start in cyber security, his transition to marketing and product management, the importance of communication skills, the changing role of the CISO, AI and machine learning, the malware research his team does, the spread of ransomware, and so much more.Where you can find Ryan:<ul><li><a href="https://www.linkedin.com/in/kalember/" rel="nofollow" target="_blank">LinkedIn</a></li><li><a href="https://twitter.com/rkalember" rel="nofollow" target="_blank">Twitter</a></li><li><a href="https://www.proofpoint.com/us/corporate-blog" rel="nofollow" target="_blank">Proofpoint Blog</a></li></ul>

#032 – Ryan Kalember: We’ve Moved From Mass Surveillance to Targeted Attacks

David Navetta

David Navetta is a US co-chair of Norton Rose Fulbright's Data Protection, Privacy and Cybersecurity practice group. David focuses on technology, privacy, information security and intellectual property law. His work ranges from compliance and transactional work to breach notification, regulatory response and litigation. David currently serves as "breach coach" or is on the approved panel for numerous cyber insurance carriers and companies, and has helped dozens of companies across multiple industries respond to data security breaches.Prior to joining Norton Rose Fulbright, David co-founded InfoLawGroup LLP, a law firm focusing on information technology, privacy, security and IP-related law. David and InfoLawGroup successfully served a wide assortment of US and foreign clients from large Fortune 500 multinationals, retailers, hotels and restaurants, sophisticated technology companies, financial institutions, and more.David is a Certified Information Privacy Professional through the International Association of Privacy Professionals and previously served as a Co-Chair of the American Bar Association's Information Security Committee and was also Co-Chair of the PCI Legal Risk and Liability Working Group. He has spoken and written frequently concerning technology, privacy and data security legal issues, and is frequently cited as an expert in the press and otherwise.In this episode we discuss transitioning from litigation into data privacy and cyber security, starting a cyber focused law firm, the role of legal in a data breach, how to perform effective tabletop exercises, when to bring in law enforcement to an incident, breach threats to small and medium sizes businesses, and so much more.Where you can find Dave:LinkedInBlogA few disclaimers on this episode as well. For purposes of certain state ethics rules, this episode may constitute attorney advertising. This website and this episode does not constitute legal advice or create attorney-client relationship. Please be sure to contact your legal representatives with any legal questions.

<a href="https://www.linkedin.com/in/davidnavetta/" rel="nofollow" target="_blank">David Navetta</a> is a US co-chair of <a href="http://www.nortonrosefulbright.com/us/our-services/technology-and-innovation/data-protection-privacy-and-cybersecurity/" rel="nofollow" target="_blank">Norton Rose Fulbright's Data Protection, Privacy and Cybersecurity</a> practice group. David focuses on technology, privacy, information security and intellectual property law. His work ranges from compliance and transactional work to breach notification, regulatory response and litigation. David currently serves as "breach coach" or is on the approved panel for numerous cyber insurance carriers and companies, and has helped dozens of companies across multiple industries respond to data security breaches.Prior to joining Norton Rose Fulbright, David co-founded <a href="https://www.infolawgroup.com/" rel="nofollow" target="_blank">InfoLawGroup LLP</a>, a law firm focusing on information technology, privacy, security and IP-related law. David and InfoLawGroup successfully served a wide assortment of US and foreign clients from large Fortune 500 multinationals, retailers, hotels and restaurants, sophisticated technology companies, financial institutions, and more.David is a Certified Information Privacy Professional through the <a href="https://iapp.org/" rel="nofollow" target="_blank">International Association of Privacy Professionals</a> and previously served as a Co-Chair of the <a href="https://www.americanbar.org/aba.html" rel="nofollow" target="_blank">American Bar Association's</a> Information Security Committee and was also Co-Chair of the PCI Legal Risk and Liability Working Group. He has spoken and written frequently concerning technology, privacy and data security legal issues, and is frequently cited as an expert in the press and otherwise.In this episode we discuss transitioning from litigation into data privacy and cyber security, starting a cyber focused law firm, the role of legal in a data breach, how to perform effective tabletop exercises, when to bring in law enforcement to an incident, breach threats to small and medium sizes businesses, and so much more.Where you can find Dave:<ul><li><a href="https://www.linkedin.com/in/davidnavetta/" rel="nofollow" target="_blank">LinkedIn</a></li><li><a href="https://www.dataprotectionreport.com/author/davidnavetta/" rel="nofollow" target="_blank">Blog</a></li></ul>A few disclaimers on this episode as well. For purposes of certain state ethics rules, this episode may constitute attorney advertising. This website and this episode does not constitute legal advice or create attorney-client relationship. Please be sure to contact your legal representatives with any legal questions.

#043 – David Navetta: The Year Of the Phishing Attack

Robert M. Lee is the CEO and Founder of the industrial (ICS/IIoT) cyber security company Dragos, Inc. He is also a non-resident National Cybersecurity Fellow at New America focusing on policy issues relating to the cyber security of critical infrastructure. For his research and focus areas, Robert was named one of Passcode’s Influencers, awarded EnergySec’s Cyber Security Professional of the Year (2015), and inducted into Forbes’ 30 under 30 for Enterprise Technology (2016).A passionate educator, Robert is the course author of SANS ICS515 – “ICS Active Defense and Incident Response” with its accompanying GIAC certification GRID and the lead-author of SANS FOR578 – “Cyber Threat Intelligence” with its accompanying GIAC GCTI certification.Robert obtained his start in cyber security in the U.S. Air Force where he served as a Cyber Warfare Operations Officer. He has performed defense, intelligence, and attack missions in various government organizations including the establishment of a first-of-its-kind ICS/SCADA cyber threat intelligence and intrusion analysis mission.In this episode we discuss threat hunting, SCADA/ICS, IIoT, IoT security, his start in cyber security, the 2015 Ukrainian power grid attack, starting and teaching a SANS ICS class, advice he would give someone starting in the industry, and HACKNYC, and so much more.Where you can find Robert:LinkedInTwitterBlog

<a href="https://www.linkedin.com/in/robmichaellee/" rel="nofollow" target="_blank">Robert M. Lee</a> is the CEO and Founder of the industrial (ICS/IIoT) cyber security company<a href="http://dragos.com/" rel="nofollow" target="_blank"> Dragos, Inc</a>. He is also a non-resident National Cybersecurity Fellow at <a href="https://www.newamerica.org/cybersecurity-initiative/" rel="nofollow" target="_blank">New America</a> focusing on policy issues relating to the cyber security of critical infrastructure. For his research and focus areas, Robert was named one of <a href="http://passcode.csmonitor.com/influencers" rel="nofollow" target="_blank">Passcode’s Influencers</a>, awarded EnergySec’s Cyber Security Professional of the Year (2015), and inducted into <a href="http://www.forbes.com/pictures/mll45klmm/robert-lee-27/" rel="nofollow" target="_blank">Forbes’ 30 under 30</a> for Enterprise Technology (2016).A passionate educator, Robert is the course author of <a href="http://www.sans.org/course/industrial-control-system-active-defense-and-incident-response" rel="nofollow" target="_blank">SANS ICS515</a> – “ICS Active Defense and Incident Response” with its accompanying GIAC certification GRID and the lead-author of <a href="https://www.sans.org/course/cyber-threat-intelligence" rel="nofollow" target="_blank">SANS FOR578</a> – “Cyber Threat Intelligence” with its accompanying GIAC GCTI certification.Robert obtained his start in cyber security in the U.S. Air Force where he served as a Cyber Warfare Operations Officer. He has performed defense, intelligence, and attack missions in various government organizations including the establishment of a first-of-its-kind ICS/SCADA cyber threat intelligence and intrusion analysis mission.In this episode we discuss threat hunting, SCADA/ICS, IIoT, IoT security, his start in cyber security, the <a href="https://www.wired.com/2016/03/inside-cunning-unprecedented-hack-ukraines-power-grid/" rel="nofollow" target="_blank">2015 Ukrainian power grid attack</a>, starting and teaching a SANS ICS class, advice he would give someone starting in the industry, and <a href="https://q22018.hacknyc.com/en/" rel="nofollow" target="_blank">HACKNYC</a>, and so much more.Where you can find Robert:<ul><li><a href="https://www.linkedin.com/in/robmichaellee/" rel="nofollow" target="_blank">LinkedIn</a></li><li><a href="https://twitter.com/RobertMLee" rel="nofollow" target="_blank">Twitter</a></li><li><a href="http://www.robertmlee.org/" rel="nofollow" target="_blank">Blog</a></li></ul>

#051 – Robert M. Lee: The Adversary’s Ability to Change Their Trade Craft is Difficult

Darren Hayes

Dr. Darren Hayes is the Director of Cybersecurity and an Assistant Professor at Pace University, New York and a leading expert in the field of digital forensics and cyber security. In 2013, he was listed as one of the Top 10 Computer Forensics Professors, by Forensics Colleges. He has developed four distinct courses in digital forensics, at Pace University, at the undergraduate and graduate levels. Also through Pace, Darren continually conducts research to support of law enforcement agencies both domestically and internationally. He has successfully been awarded grants, in the field of computer forensics, by the Department of Defense, National Science Foundation and other notable foundations. Daren is also a professional consultant in computer forensics and cyber law for the Department of Education in New York.For a number of years, Hayes has served on the Board of the High Technology Crime Investigation Association (HTCIA) Northeast Chapter and was the President of the HTCIA Northeast. Currently, he serves as Second Vice President of the HTCIA Northeast.Darren is also an accomplished author with numerous peer-reviewed articles on computer forensics. He has co-authored two textbooks and published “A Practical Guide to Computer Forensics Investigations”. Darren has appeared on numerous media and news outlets such as Bloomberg Television, The Street and Fox 5 News and been quoted by CNN, The Guardian (UK), The Times (UK), Wall Street Journal, Financial Times, Forbes, Investor’s Business Daily, MarketWatch, CNBC, ABC News, Forensic Magazine, SC Magazine, PC Magazine, USA Today, Washington Post, New York Post, Daily News and Wired News (to name but a few!). He has also been invited to lecture for the Harvard Business Review, University College Dublin and, more recently, was Visiting Professor at Sapienza University, Rome, Italy.In this interview we will discuss how he supports law enforcement, developing teaching skills, the importance of problem solving abilities, the challenges when authoring books, misinformation in the media, his involvement with HTCIA, gender roles in information security, foundational skills necessary to be good in information security, immigration challenges, real world physical threats from cyber attacks, the growth of ransomware, the "brain drain" in the government sector, how to learn cyber security on a budget, and much more.I hope you enjoy this discussion. Please leave your comments below!Where you can find Darren:LinkedInTwitterPace UniversityA Practical Guide to Computer Forensics Investigations

Dr. Darren Hayes is the Director of Cybersecurity and an Assistant Professor at <a href="http://www.pace.edu/seidenberg/" rel="nofollow" target="_blank">Pace University</a>, New York and a leading expert in the field of digital forensics and cyber security. In 2013, he was listed as one of the <a href="http://www.forensicscolleges.com/blog/profs/10-top-computer-forensics-professors" rel="nofollow" target="_blank">Top 10 Computer Forensics Professors, by Forensics Colleges</a>. He has developed four distinct courses in digital forensics, at Pace University, at the undergraduate and graduate levels. Also through Pace, Darren continually conducts research to support of law enforcement agencies both domestically and internationally. He has successfully been awarded grants, in the field of computer forensics, by the Department of Defense, National Science Foundation and other notable foundations. Daren is also a professional consultant in computer forensics and cyber law for the Department of Education in New York.For a number of years, Hayes has served on the Board of the High Technology Crime Investigation Association (HTCIA) Northeast Chapter and was the President of the HTCIA Northeast. Currently, he serves as Second Vice President of the HTCIA Northeast.Darren is also an accomplished author with numerous peer-reviewed articles on computer forensics. He has co-authored two textbooks and published “<a href="https://www.amazon.com/gp/product/B012HTZ8BC/ref=as_li_tl?ie=UTF8&amp;camp=1789&amp;creative=9325&amp;creativeASIN=B012HTZ8BC&amp;linkCode=as2&amp;tag=cybersecur030-20&amp;linkId=90fb74422660e0aeef62fcf9a1afe338" rel="nofollow" target="_blank">A Practical Guide to Computer Forensics Investigations</a>”. Darren has appeared on numerous media and news outlets such as Bloomberg Television, The Street and Fox 5 News and been quoted by CNN, The Guardian (UK), The Times (UK), Wall Street Journal, Financial Times, Forbes, Investor’s Business Daily, MarketWatch, CNBC, ABC News, Forensic Magazine, SC Magazine, PC Magazine, USA Today, Washington Post, New York Post, Daily News and Wired News (to name but a few!). He has also been invited to lecture for the Harvard Business Review, University College Dublin and, more recently, was Visiting Professor at Sapienza University, Rome, Italy.In this interview we will discuss how he supports law enforcement, developing teaching skills, the importance of problem solving abilities, the challenges when authoring books, misinformation in the media, his involvement with HTCIA, gender roles in information security, foundational skills necessary to be good in information security, immigration challenges, real world physical threats from cyber attacks, the growth of ransomware, the "brain drain" in the government sector, how to learn cyber security on a budget, and much more.I hope you enjoy this discussion. Please leave your comments below!Where you can find Darren:<ul><li><a href="https://www.linkedin.com/in/darren-hayes-05b8517" rel="nofollow" target="_blank">LinkedIn</a></li><li><a href="https://twitter.com/CyberOSINT" rel="nofollow" target="_blank">Twitter</a></li><li><a href="http://csis.pace.edu/~dhayes/" rel="nofollow" target="_blank">Pace University</a></li><li><a href="https://www.amazon.com/gp/product/B012HTZ8BC/ref=as_li_tl?ie=UTF8&amp;camp=1789&amp;creative=9325&amp;creativeASIN=B012HTZ8BC&amp;linkCode=as2&amp;tag=cybersecur030-20&amp;linkId=90fb74422660e0aeef62fcf9a1afe338" rel="nofollow" target="_blank">A Practical Guide to Computer Forensics Investigations</a></li></ul>

#008 – Darren Hayes: Be Cautious and Think It Through

Chris Roberts

Chris Roberts is the Chief Security Architect at Acalvio and is regarded as one of the world’s foremost experts on counter threat intelligence within the cyber security industry.At Acalvio, Chris helps drive Technology Innovation and Product Leadership. In addition, Roberts directs a portfolio of services within Acalvio designed to improve the physical and digital security posture of both enterprise, industrial and government clients.(In English) Acalvio has given him the opportunity to help shape the next generation of deception platforms, allowed him to spend time doing R&amp;D...and he still gets to break into companies and help them with their maturity modeling and overall solutions within the security industry.For the 50th episode, I couldn't have picked a better guest and this was my favorite interview to date. We discuss scotch tasting and food, and how that relates to infosec, building a better cyber security community, learning from past mistakes, why giving back to the community is so important, why the new generation needs to make their own mistakes, the word hacker, and so much more.Where you can find Chris:LinkedInTwitterThe Googles

<a href="https://www.linkedin.com/in/sidragon1/" rel="nofollow" target="_blank">Chris Roberts</a> is the Chief Security Architect at <a href="https://www.acalvio.com/company/#leadership" rel="nofollow" target="_blank">Acalvio</a> and is regarded as one of the world’s foremost experts on counter threat intelligence within the cyber security industry.At Acalvio, Chris helps drive Technology Innovation and Product Leadership. In addition, Roberts directs a portfolio of services within Acalvio designed to improve the physical and digital security posture of both enterprise, industrial and government clients.(In English) Acalvio has given him the opportunity to help shape the next generation of deception platforms, allowed him to spend time doing R&amp;D...and he still gets to break into companies and help them with their maturity modeling and overall solutions within the security industry.For the 50th episode, I couldn't have picked a better guest and this was my favorite interview to date. We discuss scotch tasting and food, and how that relates to infosec, building a better cyber security community, learning from past mistakes, why giving back to the community is so important, why the new generation needs to make their own mistakes, the word hacker, and so much more.Where you can find Chris:<ul><li><a href="https://www.linkedin.com/in/sidragon1/" rel="nofollow" target="_blank">LinkedIn</a></li><li><a href="https://twitter.com/Sidragon1" rel="nofollow" target="_blank">Twitter</a></li><li><a href="https://www.google.com/search?q=chris+roberts+hacker&amp;source=lnms&amp;sa=X&amp;ved=0ahUKEwiat86l6araAhUM2IMKHV6ZAo4Q_AUICSgA&amp;biw=1920&amp;bih=984&amp;dpr=1" rel="nofollow" target="_blank">The Googles</a></li></ul>

#050 – Chris Roberts: Make New Mistakes

Perry Carpenter

Perry Carpenter currently serves as Chief Evangelist and Strategy Officer for KnowBe4.Previously, Perry led security awareness, security culture management, and anti-phishing behavior management research at Gartner Research, in addition to covering areas of IAM strategy, CISO Program Management mentoring, and Technology Service Provider success strategies.With a long career as a security professional and researcher, Perry has broad experience in North America and Europe, providing security consulting and advisory services for many of the best-known global brands. His passion is helping people make better security decisions by applying strategic behavior and culture management practices to the intersection of technology and humanity.Perry holds a Master of Science in Information Assurance (MSIA) from Norwich University in Vermont and is a Certified Chief Information Security Officer (C|CISO).In this episode we discuss his focus on the human side of information security, building a security culture, working with famous hacker Kevin Mitnick, rewarding users for reporting, changing user's behavior, how CISO's can effect change and evaluate products, and so much more.Where you can find Perry:LinkedInTwitterThe Mind Spy Guy 

<a href="https://www.linkedin.com/in/perrycarpenter/" rel="nofollow" target="_blank">Perry Carpenter</a> currently serves as Chief Evangelist and Strategy Officer for <a href="https://www.knowbe4.com/" rel="nofollow" target="_blank">KnowBe4</a>.Previously, Perry led security awareness, security culture management, and anti-phishing behavior management research at <a href="http://www.gartner.com/technology/home.jsp" rel="nofollow" target="_blank">Gartner Research</a>, in addition to covering areas of IAM strategy, CISO Program Management mentoring, and Technology Service Provider success strategies.With a long career as a security professional and researcher, Perry has broad experience in North America and Europe, providing security consulting and advisory services for many of the best-known global brands. His passion is helping people make better security decisions by applying strategic behavior and culture management practices to the intersection of technology and humanity.Perry holds a Master of Science in Information Assurance (MSIA) from Norwich University in Vermont and is a Certified Chief Information Security Officer (C|CISO).In this episode we discuss his focus on the human side of information security, building a security culture, working with famous hacker Kevin Mitnick, rewarding users for reporting, changing user's behavior, how CISO's can effect change and evaluate products, and so much more.Where you can find Perry:<ul><li><a href="https://www.linkedin.com/in/perrycarpenter/" rel="nofollow" target="_blank">LinkedIn</a></li><li><a href="https://twitter.com/perrycarpenter" rel="nofollow" target="_blank">Twitter</a></li><li><a href="http://themindspyguy.com/" rel="nofollow" target="_blank">The Mind Spy Guy </a></li></ul>

#033 – Perry Carpenter: Security Culture Management

David Kovar

David Kovar is the President and founder of Kovar &amp; Associates where he leads the development of URSA – Unmanned &amp; Robotics Systems Analysis – a suite of tools designed to collect, integrate, analyze, and present UAV related data for many purposes including fleet management, criminal investigations, failure analysis, and predictive analysis. He also leads the firm’s consulting practice which addresses UAV cyber security and UAV threat management.David founded the practice of UAV forensics in 2015 and is one of the leading practitioners in the country. David has worked in digital forensics and cyber security since the mid 90’s and, prior to founding his own company, led EY’s U.S. incident response program.David earned a BA from Dartmouth in Computer Science and will receive an MA from the Fletcher School at Tufts in International Affairs this summer. David’s Master’s thesis is entitled “Defending Against UAVs Operated by Non-State Actors”.David is a rated pilot, is the Advocacy Director for the National Association of Search and Rescue where he writes UAV policy papers and develops presentations on UAVs in SAR for various audiences, and is working on SAR UAV standards for ASTM.In this episode we discuss his early transition from IT to information security, good incident response planning, team building and communications, the development of analyzeMFT, giving back to the community, the emerging drone security and analysis field, founding a cyber security company, and so much more.Where you can find David:LinkedInTwitterKovar &amp; Associates BlogPersonal BlogGitHub - analyzeMFT

<a href="https://www.linkedin.com/in/davidkovar/" rel="nofollow" target="_blank">David Kovar</a> is the President and founder of <a href="http://www.kovarllc.com/" rel="nofollow" target="_blank">Kovar &amp; Associates</a> where he leads the development of URSA – <a href="http://www.kovarllc.com/solutions-2/" rel="nofollow" target="_blank">Unmanned &amp; Robotics Systems Analysis</a> – a suite of tools designed to collect, integrate, analyze, and present UAV related data for many purposes including fleet management, criminal investigations, failure analysis, and predictive analysis. He also leads the firm’s consulting practice which addresses UAV cyber security and UAV threat management.David founded the practice of UAV forensics in 2015 and is one of the leading practitioners in the country. David has worked in digital forensics and cyber security since the mid 90’s and, prior to founding his own company, led EY’s U.S. incident response program.David earned a BA from Dartmouth in Computer Science and will receive an MA from the Fletcher School at Tufts in International Affairs this summer. David’s Master’s thesis is entitled “Defending Against UAVs Operated by Non-State Actors”.David is a rated pilot, is the Advocacy Director for the <a href="http://www.nasar.org/" rel="nofollow" target="_blank">National Association of Search and Rescue</a> where he writes UAV policy papers and develops presentations on UAVs in SAR for various audiences, and is working on SAR UAV standards for <a href="https://www.astm.org/" rel="nofollow" target="_blank">ASTM</a>.In this episode we discuss his early transition from IT to information security, good incident response planning, team building and communications, the development of <a href="https://github.com/dkovar/analyzeMFT" rel="nofollow" target="_blank">analyzeMFT</a>, giving back to the community, the emerging drone security and analysis field, founding a cyber security company, and so much more.Where you can find David:<ul><li><a href="https://www.linkedin.com/in/davidkovar/" rel="nofollow" target="_blank">LinkedIn</a></li><li><a href="https://twitter.com/dckovar" rel="nofollow" target="_blank">Twitter</a></li><li><a href="http://www.kovarllc.com/blog/" rel="nofollow" target="_blank">Kovar &amp; Associates Blog</a></li><li><a href="https://integriography.wordpress.com" rel="nofollow" target="_blank">Personal Blog</a></li><li><a href="https://github.com/dkovar/analyzeMFT" rel="nofollow" target="_blank">GitHub - analyzeMFT</a></li></ul>

#035 – David Kovar: Where Is the Best Application of Your Skill Set

Cameron Williams

Cameron Williams is the Founder and CTO of OverWatchID. Cam has more than 22 years of experience as a leader in the cyber security industry. He has led breach mitigation and designed security solutions/countermeasures for leading global companies such as IBM, Boeing, Sony, BP, Chase and Washington Mutual. He has designed and built a multitude of access management systems including privileged access management, identity access management (SSO, SAML, OAuth and Federation) and cloud access security brokering systems.Prior to cofounding OverWatchID, Cameron was VP Engineering at IntelliSecure, where he led the development of a next generation MSSP platform including multi-tenant PAM, correlation engine (SIEM software), deployment automation, and application monitoring systems.In this episode we discuss the alphabet soup of identity and access management, cloud security, maturing the trust model, the problems he is trying to solve, why he switched to IT from pre-med, automation and orchestration, and so much more.Where you can find Cam:LinkedInOverWatchID

<a href="https://www.linkedin.com/in/cameron-williams-3696a18b/" rel="nofollow" target="_blank">Cameron Williams</a> is the Founder and CTO of <a href="https://overwatchid.com/press/" rel="nofollow" target="_blank">OverWatchID</a>. Cam has more than 22 years of experience as a leader in the cyber security industry. He has led breach mitigation and designed security solutions/countermeasures for leading global companies such as IBM, Boeing, Sony, BP, Chase and Washington Mutual. He has designed and built a multitude of access management systems including privileged access management, identity access management (SSO, SAML, OAuth and Federation) and cloud access security brokering systems.Prior to cofounding OverWatchID, Cameron was VP Engineering at IntelliSecure, where he led the development of a next generation MSSP platform including multi-tenant PAM, correlation engine (SIEM software), deployment automation, and application monitoring systems.In this episode we discuss the alphabet soup of identity and access management, cloud security, maturing the trust model, the problems he is trying to solve, why he switched to IT from pre-med, automation and orchestration, and so much more.Where you can find Cam:<ul><li><a href="https://www.linkedin.com/in/cameron-williams-3696a18b/" rel="nofollow" target="_blank">LinkedIn</a></li><li><a href="https://overwatchid.com/press/" rel="nofollow" target="_blank">OverWatchID</a></li></ul>

#053 – Cameron Williams: Make Your Day Easier

Ismael Valenzuela

Defined by his peers as a “passionate, experienced and visionary individual who is always striving to improve himself,” Ismael Valenzuela is one of the few individuals that has done almost all in the InfoSec arena, from founding one of the first IT Security companies in Spain to managing a distributed CERT across the world as well as teaching for highly reputed institutions such as SANS, BSi or the Spanish National Center of Intelligence.His command of both the business and technical aspects of information security has allowed him to specialize in building and boosting highly technical security teams and successful security businesses across North America, EMEA, India and Australia in the last 15 years.As a top cybersecurity expert with strong technical background and deep knowledge of penetration testing, security architectures, intrusion detection and computer forensics, Ismael has provided security consultancy, advice and guidance to large government and private organisations, including major EU Institutions and US Government Agencies.Prior to joining Foundstone Services at Intel Security, Ismael worked as Global IT Security Manager for iSOFT Group Ltd, one of the world’s largest providers of healthcare IT solutions, focusing on establishing and managing the IT Security program in more than 40 countries while providing risk-driven strategic planning, defining an ISO 27001 compliant policy framework and working with the applications team to ensure that security was embedded into their SDLC.Author of security articles for Hakin9, INSECURE Magazine and the SANS Forensics Blog, Ismael also serves on the GIAC Advisory Board and is a Community SANS Instructor.He holds a Bachelor's degree in Computer Science from the University of Malaga, is certified in Business Administration, and holds numerous professional certifications including the highly regarded GIAC Security Expert (GSE #132) any many others from GIAC, ISC2 and ISACA.In this interview we will discuss learning security on his own, scoping penetration testing projects, security in the healthcare industry, running international teams, how to drive an internal security culture, developing internal training programs, threat hunting and his rastrea2r threat hunting tool, lessons learned from his IR work, and much more.I hope you enjoy this discussion. Please leave your comments below!Where you can find Ismael:LinkedInTwitterSANS BlogBlogGitHub

Defined by his peers as a “passionate, experienced and visionary individual who is always striving to improve himself,” <a href="https://www.linkedin.com/in/ivalenzuela" rel="nofollow" target="_blank">Ismael Valenzuela</a> is one of the few individuals that has done almost all in the InfoSec arena, from founding one of the first IT Security companies in Spain to managing a distributed CERT across the world as well as teaching for highly reputed institutions such as <a href="https://www.sans.org/" rel="nofollow" target="_blank">SANS</a>, BSi or the Spanish National Center of Intelligence.His command of both the business and technical aspects of information security has allowed him to specialize in building and boosting highly technical security teams and successful security businesses across North America, EMEA, India and Australia in the last 15 years.As a top cybersecurity expert with strong technical background and deep knowledge of penetration testing, security architectures, intrusion detection and computer forensics, Ismael has provided security consultancy, advice and guidance to large government and private organisations, including major EU Institutions and US Government Agencies.Prior to joining <a href="http://www.mcafee.com/us/services/foundstone-services/index.aspx" rel="nofollow" target="_blank">Foundstone Services</a> at <a href="http://www.intelsecurity.com/" rel="nofollow" target="_blank">Intel Security</a>, Ismael worked as Global IT Security Manager for <a href="http://www.isofthealth.com/" rel="nofollow" target="_blank">iSOFT Group Ltd</a>, one of the world’s largest providers of healthcare IT solutions, focusing on establishing and managing the IT Security program in more than 40 countries while providing risk-driven strategic planning, defining an ISO 27001 compliant policy framework and working with the applications team to ensure that security was embedded into their SDLC.Author of security articles for Hakin9, INSECURE Magazine and the <a href="https://digital-forensics.sans.org/blog" rel="nofollow" target="_blank">SANS Forensics Blog</a>, Ismael also serves on the GIAC Advisory Board and is a Community SANS Instructor.He holds a Bachelor's degree in Computer Science from the University of Malaga, is certified in Business Administration, and holds numerous professional certifications including the highly regarded <a href="http://www.giac.org/certification/security-expert-gse" rel="nofollow" target="_blank">GIAC Security Expert</a> (GSE #132) any many others from <a href="http://www.giac.org/" rel="nofollow" target="_blank">GIAC</a>, <a href="https://www.isc2.org/" rel="nofollow" target="_blank">ISC2 </a>and <a href="https://www.isaca.org/pages/default.aspx" rel="nofollow" target="_blank">ISACA</a>.In this interview we will discuss learning security on his own, scoping penetration testing projects, security in the healthcare industry, running international teams, how to drive an internal security culture, developing internal training programs, threat hunting and his <a href="https://github.com/aboutsecurity/rastrea2r" rel="nofollow" target="_blank">rastrea2r</a> threat hunting tool, lessons learned from his IR work, and much more.I hope you enjoy this discussion. Please leave your comments below!Where you can find Ismael:<ul><li><a href="https://www.linkedin.com/in/ivalenzuela" rel="nofollow" target="_blank">LinkedIn</a></li><li><a href="https://twitter.com/aboutsecurity" rel="nofollow" target="_blank">Twitter</a></li><li><a href="https://digital-forensics.sans.org/blog/author/ismaelvalenzuela" rel="nofollow" target="_blank">SANS Blog</a></li><li><a href="http://blog.ismaelvalenzuela.com/" rel="nofollow" target="_blank">Blog</a></li><li><a href="https://github.com/aboutsecurity" rel="nofollow" target="_blank">GitHub</a></li></ul>

#009 – Ismael Valenzuela: Let’s See What Happens

Early each year, for the past 12 years, the hacker conference ShmooCon takes place in Washington, DC. This year I was honored and fortunate to get a press pass to this sold out event which the organizers call, "an annual east coast hacker convention hell-bent on offering three days of an interesting atmosphere for demonstrating technology exploitation, inventive software and hardware solutions, and open discussions of critical infosec issues."It was a great time and in this episode I will recap my experience over the three days.More ShmooCon information:ShmooCon WebsiteTwitterShmooConPuzzleShmooganographyThank you to ShmooCon and the organizers for letting me be part of this event!

Early each year, for the past 12 years, the hacker conference <a href="http://shmoocon.org/" rel="nofollow" target="_blank">ShmooCon</a> takes place in Washington, DC. This year I was honored and fortunate to get a press pass to this sold out event which the organizers call, "an annual east coast hacker convention hell-bent on offering three days of an interesting atmosphere for demonstrating technology exploitation, inventive software and hardware solutions, and open discussions of critical infosec issues."It was a great time and in this episode I will recap my experience over the three days.More ShmooCon information:<ul><li><a href="http://shmoocon.org/" rel="nofollow" target="_blank">ShmooCon Website</a></li><li><a href="https://twitter.com/shmoocon" rel="nofollow" target="_blank">Twitter</a></li><li><a href="https://twitter.com/ShmooConPuzzle" rel="nofollow" target="_blank">ShmooConPuzzle</a></li><li><a href="http://www.shmooganography.org/Welcome" rel="nofollow" target="_blank">Shmooganography</a></li></ul>Thank you to ShmooCon and the organizers for letting me be part of this event!

#010 – ShmooCon 12 (2017)

Harlan Carvey

Harlan Carvey is currently the Director of Intelligence Integration at Nuix.Harlan has been involved in information security for 28 years, which began during his military career. After leaving active duty 20 years ago, he started in consulting, performing vulnerability assessments and penetration testing. From there, it was a natural progression to digital forensics and incident response services.Harlan is an accomplished public speaker and a prolific author. He is the author of several open source tools, including RegRipper, and is the author of the WindowsIR blog.In this episode we discuss his start in information security, windows registry forensics, new artifacts, the importance of communications, mistakes examiners make, ransomware, the commonalities between information security and home beer brewing, so much more.Where you can find Harlan:LinkedInTwitterWindowsIR Blog

<a href="https://www.linkedin.com/in/harlan-carvey-86a8694b/" rel="nofollow" target="_blank">Harlan Carvey</a> is currently the Director of Intelligence Integration at <a href="https://www.nuix.com/" rel="nofollow" target="_blank">Nuix</a>.Harlan has been involved in information security for 28 years, which began during his military career. After leaving active duty 20 years ago, he started in consulting, performing vulnerability assessments and penetration testing. From there, it was a natural progression to digital forensics and incident response services.Harlan is an accomplished public speaker and a prolific author. He is the author of several open source tools, including <a href="https://github.com/keydet89/RegRipper2.8" rel="nofollow" target="_blank">RegRipper</a>, and is the author of the <a href="http://windowsir.blogspot.com/" rel="nofollow" target="_blank">WindowsIR blog</a>.In this episode we discuss his start in information security, windows registry forensics, new artifacts, the importance of communications, mistakes examiners make, ransomware, the commonalities between information security and home beer brewing, so much more.Where you can find Harlan:<ul><li><a href="https://www.linkedin.com/in/harlan-carvey-86a8694b/" rel="nofollow" target="_blank">LinkedIn</a></li><li><a href="https://twitter.com/keydet89" rel="nofollow" target="_blank">Twitter</a></li><li><a href="http://windowsir.blogspot.com/" rel="nofollow" target="_blank">WindowsIR Blog</a></li></ul>

#034 – Harlan Carvey: You Have To Apply the Data To Your Theory

Jeremiah Grossman

Jeremiah Grossman is the CEO of Bit Discovery. Jeremiah's career spans nearly 20 years and has lived a literal lifetime in computer security to become one of the industry's biggest names.Since Jeremiah earned a Brazilian Jiu-Jitsu black belt, the media has described him as "the embodiment of converged IT and physical security.” In 2001, Jeremiah founded WhiteHat Security, which today has one of the largest professional hacking armies on the planet. Jeremiah has received a number of industry awards, been publicly thanked by Microsoft, Mozilla, Google, Facebook, and many others for privately informing them of weaknesses in their systems -- a polite way of saying, ‘hacking them'.In this episode we discuss RSAC 2018, starting in infosec, web application vulnerabilities, what to look for in application security developers, building security development metrics, why you need to inventory websites, making time to contribute to the community, and so much more.Where you can find Jer:LinkedInTwitterBlogJeremiahgrossman.com

<a href="https://www.linkedin.com/in/grossmanjeremiah/" rel="nofollow" target="_blank">Jeremiah Grossman</a> is the CEO of <a href="https://bitdiscovery.com/" rel="nofollow" target="_blank">Bit Discovery</a>. Jeremiah's career spans nearly 20 years and has lived a literal lifetime in computer security to become one of the industry's biggest names.Since Jeremiah earned a Brazilian Jiu-Jitsu black belt, the media has described him as "the embodiment of converged IT and physical security.” In 2001, Jeremiah founded <a href="https://www.whitehatsec.com/" rel="nofollow" target="_blank">WhiteHat Security</a>, which today has one of the largest professional hacking armies on the planet. Jeremiah has received a number of industry awards, been publicly thanked by Microsoft, Mozilla, Google, Facebook, and many others for privately informing them of weaknesses in their systems -- a polite way of saying, ‘hacking them'.In this episode we discuss RSAC 2018, starting in infosec, web application vulnerabilities, what to look for in application security developers, building security development metrics, why you need to inventory websites, making time to contribute to the community, and so much more.Where you can find Jer:<ul><li><a href="https://www.linkedin.com/in/grossmanjeremiah/" rel="nofollow" target="_blank">LinkedIn</a></li><li><a href="https://twitter.com/jeremiahg" rel="nofollow" target="_blank">Twitter</a></li><li><a href="http://blog.jeremiahgrossman.com/" rel="nofollow" target="_blank">Blog</a></li><li><a href="https://www.jeremiahgrossman.com/" rel="nofollow" target="_blank">Jeremiahgrossman.com</a></li></ul>

#052 – Jeremiah Grossman: The Cavalry Is Not Coming

Bernard Harguindeguy

Bernard Harguindeguy is the Chief Technology Officer &amp; General Manager Intelligence from Ping Identity. Bernard joined Ping in June 2018 through the acquisition of Elastic Beam, where he was the CEO and founder. His work at Elastic Beam revolutionized the use of AI to protect API infrastructures from cyber attacks and deliver deep insight into API access and usage. Bernard earned an MS in Engineering Management from Stanford University and a BS in Electrical Engineering from the University of California Irvine where he was inducted into the Engineering Hall of Fame. In this episode, we discuss starting in email security, identity as the perimeter, API security, selling to the C suite, how AI will help security, IoT security, and so much more. Where you can find Bernard:  LinkedIn Twitter Ping 

<a href="https://www.linkedin.com/in/bernardharguindeguy/" rel="noopener nofollow" target="_blank">Bernard Harguindeguy</a> is the Chief Technology Officer &amp; General Manager Intelligence from <a href="https://www.pingidentity.com/en/company/leadership.html" rel="noopener nofollow" target="_blank">Ping Identity</a>. Bernard joined Ping in June 2018 through the acquisition of Elastic Beam, where he was the CEO and founder. His work at Elastic Beam revolutionized the use of AI to protect API infrastructures from cyber attacks and deliver deep insight into API access and usage. Bernard earned an MS in Engineering Management from Stanford University and a BS in Electrical Engineering from the University of California Irvine where he was inducted into the <a href="http://tech.uci.edu/halloffame/inductees" rel="noopener nofollow" target="_blank">Engineering Hall of Fame</a>. In this episode, we discuss starting in email security, identity as the perimeter, API security, selling to the C suite, how AI will help security, IoT security, and so much more. Where you can find Bernard: <ul> <li><a href="https://www.linkedin.com/in/bernardharguindeguy/" rel="noopener nofollow" target="_blank">LinkedIn</a></li> <li><a href="https://twitter.com/bernardh_" rel="noopener nofollow" target="_blank">Twitter</a></li> <li><a href="https://www.pingidentity.com/en/company/leadership.html" rel="noopener nofollow" target="_blank">Ping</a></li> </ul>

#073 – Bernard Harguindeguy: Identity Is The Keystone

The best podcasts about ourselves as well as the world through the lense of Science. Specific topics include things about our brain, emotions to biology, physics and more!

Best Episodes on Science, Humans & The World

The best podcast episodes on romantic relationships. Episodes talk about the 5 love languages, intimacy, and the taboo topics of sexual desires and infidelity. This topic is a deep dive into the science and complexities that face us in our relationships with others. Add episodes you're interested into your queue below!