SECTION 9 Cyber Security

We’re focusing on basic Microsoft 365 security. We’re also reviewing our Microsoft 365 Business Premium Licensing.

LINKS

1. m365maps.com

2. Basic Security Set Up for Microsoft 365

FIND US ON

1. Twitter - DamienHull

Got a nice email from a listener who happens to be managing Microsoft 365. He made some interesting suggestions. This got me thinking about how we use 365. Ended up falling down the rabbit hole. We still have a lot to learn about Microsoft 365.

LINKS

1. CBT Nuggets

2. Connect Azure Active Directory (Azure AD) data to Azure Sentinel

FIND US ON

1. Twitter - DamienHull

Time to review our IT management process. We have some work to do.

FIND US ON

1. Twitter - DamienHull

The Cybersecurity & Infrastructure Security Agency has a mandate for the print spooler service vulnerability. This mandate includes step by step instructions for fixing the vulnerability. For people like us, this is awesome!

LINKS

1. us-cert.cisa.gov - Their website.

2. Emergency Directive 21-04

FIND US ON

1. Twitter - DamienHull

PrintNightmare and the out of band patch forced us to change. We needed to evaluate the way we handle out of band patches. Fortunately for us, this wasn’t a big deal.

LINKS

1. CVE-2021-34527 - For those that want to dive a little deeper.

2. Sans Internet Storm Center Podcast - Episode that talks about PrintNightmare

FIND US ON

1. Twitter - DamienHull

Time to look for a new job and brush up on my skills. Following Jason Blanchard’s tips on job hunting. I’m also trying to improve my SIEM skills. A skill that I’ve seen a few job postings.

LINKS

1. Jason Blanchard - Twitter

2. Jason Blanchard - Twitch

3. ELK - Free SIEM Solution

4. Install ELK on Ubuntu 20.04 Focal Fossa Linux - The instructions I followed to setup ELK

FIND US ON

1. Twitter - DamienHull

A couple episodes ago, we got to interview John Strand of Black Hills Information Security. He gave us a lot of really good information. In our last episode, we talked about the technical half of the interview. In this episode, we’re looking at the training he recommended.

LINKS

1. Training Trail - Organized list of training from Johns training company Antisyphon Training

2. Antisyphon Training Courses - This is where Johns training lives

3. Hack The Box

4. Holiday Hack Challenge 2020 - No Answers

5. Past Holiday Hack Changes

6. Answers to the 2019 Holiday Hack Challenge

FIND US ON

1. Facebook

2. Twitter - DamienHull

In our last episode, we interviewed John Strand of Black Hills Information Security. Now it’s time to analyze what he said. For this episode, we’re looking at the technical side of the interview. We’re saving the training portion for another episode.

LINKS

1. The Essential 8 from Australia

2. DeepBlueCLI

3. Sysmon

4. Elastic Stack - ELK

5. Security Onion

6. LogonTracer

7. sigma

8. JPCERT Tools

9. JPCERT: Tool Analysis Results Sheet

FIND US ON

1. Facebook

2. Twitter - DamienHull

Yes, we got to Interview John Strand from Black Hills Information Security. He was kind enough to donate his time. We covered first steps to improving security, best practice, tools and training.

Links to some of thing things John mentioned.

1. LogonTracer

2. sigma

3. JPCERT Tools

4. JPCERT: Tool Analysis Results Sheet

FIND US ON

1. Facebook

2. Twitter - DamienHull

We’re looking into version 8 of the Critical Security Controls.

LINKS

1. The 18 CIS Controls

2. SANS: CIS Controls v8

FIND US ON

1. Facebook

2. Twitter - DamienHull