There are few stories that mean more to me than those where someone takes something that you made/created and used it to make something useful to others. Today's guest Andrew Thornton works for a Tanium partner Cylitic Security, and they have taken Tanium and done some really interesting things with Tanium for their customers to gain insight into their exposure to Log4j vulnerabilities. Andrew also shares some great insight from is time at the Department of Energy and a large lumber company that add extra value to this episode.

Andrew Thornton is an information security leader who has been in the field for over 20 years. His focus during that time has been on protecting and testing applications and enterprises at scale. He is very familiar with the techniques, tactics and procedures that adversaries use, and understands what is required to protect enterprises from them at both a strategic and tactical level. He enjoys building and leading teams as well as working with the business to understand their needs and challenges in an effort to make security as frictionless as possible.

Links

https://www.cylitic.com/

IR Hierarchy of Needs https://github.com/swannman/ircapabilities