On this week's episode, Andy and Adam give their thoughts on the firing of Chris Krebs, former director of CISA. They also talk about their opinions on whether a CISO should be fired after a cybersecurity breach. Finally, they discuss if people need to have technical degrees and what qualifications are required to be in infosec.

Documentation:

CISA's Statement on the Nov 3rd Election

IT Director fired after ransomware attack

Andy Jaw

Twitter: @ajawzero

LinkedIn: https://www.linkedin.com/in/andyjaw/

Adam Brewer

Twitter: @ajbrewer

LinkedIn: https://www.linkedin.com/in/adamjbrewer/

This week, Morgan joins Adam and Andy on the podcast to discuss on-prem Active Directory security. They dive into administrator privileges, best practice for account creation, GPO's, and server admins. They also discuss the concept of Privileged Access Workstations (PAW).

Documentation:

Securing Privileged Access

Privileged Access Workstations

Morgan Patzwald

Twitter: @morgancpatz

Andy Jaw

Twitter: @ajawzero

LinkedIn: https://www.linkedin.com/in/andyjaw/

Adam Brewer

Twitter: @ajbrewer

LinkedIn: https://www.linkedin.com/in/adamjbrewer/

This week, Adam and Andy go over why you should think about using an Identity Provider (IDP) to onboard your SaaS apps to use SSO. They also talk about why it's really important to think about what IDP to go with prior to making a decision. Finally, they talk about SSPR and why it's important to implement this feature in your organization.

Documentation:

Azure AD SSO options

Enable Azure SSPR

Enable Okta SSPR

Andy Jaw

Twitter: @ajawzero

LinkedIn: https://www.linkedin.com/in/andyjaw/

Adam Brewer

Twitter: @ajbrewer

LinkedIn: https://www.linkedin.com/in/adamjbrewer/

This week, Adam and Andy bring you a bonus episode where they talk about how they got into information security and offer advice on career progression in IT and cybersecurity.

Documentation:

Free Microsoft Developer's Environment

Andy Jaw

Twitter: @ajawzero

LinkedIn: https://www.linkedin.com/in/andyjaw/

Adam Brewer

Twitter: @ajbrewer

LinkedIn: https://www.linkedin.com/in/adamjbrewer/

This week, Adam and Andy wrap up the ransomware series by first going over controlled folder access in Windows 10 security and Onedrive for Business Known Folder Move. They discuss network segmentation and go into tools and process for detection and incident response. Finally, they conclude with tips on business continuity and disaster recovery when it comes to ransomware and cybersecurity.

Documentation:

Controlled Folder Access

Onedrive for Business Known Folder Move

Azure ATP/Microsoft Defender for Identity

Ransomware Decryptors

Maersk NotPetya Blog

Andy Jaw

Twitter: @ajawzero

LinkedIn: https://www.linkedin.com/in/andyjaw/

Adam Brewer

Twitter: @ajbrewer

LinkedIn: https://www.linkedin.com/in/adamjbrewer/

This week, Adam and Andy continue the conversation on techniques and tools to protect your organization from ransomware. They dive into the concept of least privileged access and administrative rights, email protection solutions, and phishing/cybersecurity training program concepts for your company.

Documentation:

Exchange Online Protection Overview

https://docs.microsoft.com/en-us/microsoft-365/security/office-365-security/exchange-online-protection-overview?view=o365-worldwide

Office 365 ATP

https://docs.microsoft.com/en-us/microsoft-365/security/office-365-security/office-365-atp?view=o365-worldwide

Andy Jaw

Twitter: @ajawzero

LinkedIn: https://www.linkedin.com/in/andyjaw/

Adam Brewer

Twitter: @ajbrewer

LinkedIn: https://www.linkedin.com/in/adamjbrewer/

This week, Adam and Andy continue the conversation on techniques and tools to protect your organization from ransomware. They dive into EDR solutions, patching and vulnerability assessment management, and pentesting.

Documentation:

Maersk, me & notPetya:

https://gvnshtn.com/maersk-me-notpetya/

The Untold Story of NotPetya, the Most Devastating Cyberattack in History:

https://www.wired.com/story/notpetya-cyberattack-ukraine-russia-code-crashed-the-world/

Andy Jaw

Twitter: @ajawzero

LinkedIn: https://www.linkedin.com/in/andyjaw/

Adam Brewer

Twitter: @ajbrewer

LinkedIn: https://www.linkedin.com/in/adamjbrewer/

Due to the recent ransomware attacks, Adam and Andy use this episode to kick off a series on how to protect your company from ransomware. We started with how security professionals need to have soft skills in order to be successful at any organization. We followed up with a deep dive on why we believe Microsoft Defender for Endpoint is the most cost effective solution you can deploy.

Documentation:

Microsoft Defender in a Sandbox:

https://www.microsoft.com/security/blog/2018/10/26/windows-defender-antivirus-can-now-run-in-a-sandbox/

Andy Jaw

Twitter: @ajawzero

LinkedIn: https://www.linkedin.com/in/andyjaw/

Adam Brewer

Twitter: @ajbrewer

LinkedIn: https://www.linkedin.com/in/adamjbrewer/

In this episode, Adam and Andy talk about why if you have not enabled MFA for your identity provider (IDP), this should be your top priority today. They also talk about steps for implementation and their thoughts on user documentation.

Documentation:

Zerologon Vulnerability

https://www.secura.com/blog/zero-logon

Andy Jaw

Twitter: @ajawzero

LinkedIn: https://www.linkedin.com/in/andyjaw/

Adam Brewer

Twitter: @ajbrewer

LinkedIn: https://www.linkedin.com/in/adamjbrewer/

In this first episode, Adam and Andy discuss whether geo-restricting IP addressing is considered "good" security. They also discuss Azure AD password protection as a method to protect against password spraying attacks.

Documentation: 

Overview on Azure AD password protection:

https://techcommunity.microsoft.com/t5/azure-active-directory-identity/azure-ad-password-protection-is-now-generally-available/ba-p/377487  

How to deploy Azure AD protection:

https://docs.microsoft.com/en-us/azure/active-directory/authentication/howto-password-ban-bad-on-premises-deploy 

Andy Jaw

Twitter: @ajawzero

LinkedIn: https://www.linkedin.com/in/andyjaw/

Adam Brewer

Twitter: @ajbrewer

LinkedIn: https://www.linkedin.com/in/adamjbrewer/