Simply Defensive

In this episode of Simply Defensive, hosts Josh Mason and Wade Wells welcome the highly esteemed Leslie Carhart from Dragos.

We step into the world of industrial cybersecurity, discussing the critical nature of securing vital infrastructure like power plants, water treatment facilities, and manufacturing setups. Leslie shares insights on the unique challenges faced in this sector, including handling old systems, different procedural mindsets, and low-level industrial devices.

The episode also covers Leslie's intriguing career journey, filled with diverse technical roles, and her advice on entering and thriving in cybersecurity. Moreover, Leslie offers valuable guidance on mentorship and maintaining a work-life balance for cybersecurity professionals.

https://www.linkedin.com/in/lcarhart/

https://pancakescon.com/

https://www.sans.org/profiles/lesley-carhart/

https://bsky.app/profile/hacks4pancakes.com

00:00 Introduction and Guest Welcome

01:02 Leslie Carhartt's Role at Dragos

02:06 Challenges in Industrial Cybersecurity

06:39 Leslie's Career Journey

09:01 Advice for Aspiring OT Cybersecurity Professionals

13:24 Incident Response in OT Environments

16:50 Mapping Processes in OT Security

18:06 Reflecting on Early Career Lessons

18:31 Navigating Social Media Criticism

19:55 Cyber Warfare and Air Force Insights

22:04 Challenges in OT Security

24:02 Mentoring in Cybersecurity

24:43 Advice for Aspiring Cybersecurity Professionals

25:51 Realities of Pen Testing and Incident Response

29:32 Effective Mentorship Strategies

32:50 Final Thoughts and Contact Information

=========================
Connect with your hosts:
Josh Mason: https://www.linkedin.com/in/joshuacmason
Wade Wells: https://www.linkedin.com/in/wadingthrulogs
=========================
Sponsored by ThreatLocker @ThreatLocker
Allow what you need, block everything else... Including ransomware. Zero trust Endpoint Protection Platform from ThreatLocker. Learn more at https://simplycyber.io/threatlocker
=========================
Simply Cyber empowers people who want a rewarding cybersecurity career 💪
=========================
All the ways to connect with Simply Cyber
https://SimplyCyber.io/Socials
=========================
This podcast is presented by Simply Cyber Media Group

From Navy Red Team to Blue Team: David Perez's Cybersecurity Journey

In this episode of Simply Defensive, hosts Josh Mason and Wade What’s Up interview David Perez, a Navy veteran who transitioned from red teaming to blue teaming in cybersecurity. David shares insights into his career path, his experience with the Navy’s Skillbridge program, and the challenges he faced moving from a structured military environment to the more fluid civilian sector.

David also discusses the importance of thinking like an attacker for effective defense, his thoughts on training and detection engineering, and offers valuable advice for those looking to break into the cybersecurity field. Join the conversation to learn about David’s journey, his day-to-day responsibilities, and how he stays sharp in the ever-evolving world of cybersecurity. 

Don’t forget to like, subscribe, and share!

00:00 Introduction and Guest Introduction

00:19 David Perez's Cybersecurity Journey

00:54 Transition from Military to Civilian Cybersecurity

01:48 Skill Bridge Experience

03:07 First SOC Job and Responsibilities

03:51 Becoming a Detection Engineer

04:41 Challenges and Freedom in Cybersecurity Roles

08:28 Detection Engineering Insights

11:06 Risk-Based Alerting

13:14 Detection Rule Management

16:38 Detection Building Process

18:24 Automated Threat Hunting

19:40 Challenges in Detection Engineering

20:15 Resources and Learning for Detection Engineering

21:46 Teaching and Learning in Cybersecurity

22:46 The Importance of Experience in Detection Engineering

28:31 Balancing Work and Personal Life

31:46 Advice for Aspiring Blue Teamers

34:12 Conclusion and Contact Information

=========================
Connect with your hosts:
Josh Mason: https://www.linkedin.com/in/joshuacmason
Wade Wells: https://www.linkedin.com/in/wadingthrulogs
=========================
Sponsored by ThreatLocker @ThreatLocker
Allow what you need, block everything else... Including ransomware. Zero trust Endpoint Protection Platform from ThreatLocker. Learn more at https://simplycyber.io/threatlocker
=========================
Simply Cyber empowers people who want a rewarding cybersecurity career 💪
=========================
All the ways to connect with Simply Cyber
https://SimplyCyber.io/Socials
=========================
This podcast is presented by Simply Cyber Media Group

In this episode of Simply Defensive, hosts Josh Mason and Wade Wells are joined by Hayden Covington from Black Hills Information Security. Hayden shares insights into his role at a Security Operations Center (SOC), discussing key metrics, challenges in SOC work, and the importance of communication with MSP customers.

The conversation also delves into Hayden's new course on SOC foundations using Elastic and Jira, his experiences with public speaking, and the importance of personal documentation for productivity and problem-solving.

- Hayden’s Webinar on Metrics in the SOC: https://www.youtube.com/watch?v=RvsAy4xXrpQ
- Hayden’s LinkedIn: https://www.linkedin.com/in/hayden-covington-468495128/
- Hayden’s Course: https://www.antisyphontraining.com/course/foundations-of-soc-with-elastic-and-jira-with-hayden-covington/

00:00 Introduction and Guest Welcome
00:18 Hayden's Background and Role at Black Hills
01:15 Importance of SOC Metrics
04:06 Challenges in SOC and Customer Relationships
09:19 Working from Home vs. Office
11:50 Foundations of SOC Course
16:46 Discussing the Course and Coffee Consumption
17:30 Teaching Experiences and Imposter Syndrome
19:10 Career Journey and Working at Black Hills
20:55 Public Speaking and Overcoming Fear
22:52 Balancing Hobbies and Work
27:57 Dungeons & Dragons and Gaming
33:41 Productivity Tips and Tools
34:41 Conclusion and Farewell

=========================
Connect with your hosts:
Josh Mason: https://www.linkedin.com/in/joshuacmason
Wade Wells: https://www.linkedin.com/in/wadingthrulogs
=========================
Sponsored by ThreatLocker @ThreatLocker
Allow what you need, block everything else... Including ransomware. Zero trust Endpoint Protection Platform from ThreatLocker. Learn more at https://simplycyber.io/threatlocker
=========================
Simply Cyber empowers people who want a rewarding cybersecurity career 💪
=========================
All the ways to connect with Simply Cyber
https://SimplyCyber.io/Socials
=========================
This podcast is presented by Simply Cyber Media Group

In this episode of Simply Defensive, hosts Josh Mason and Wade Wells talk with Simeon, an Intel Analyst at Microsoft. Listen as they explore his journey from aspiring doctor to cybersecurity expert, discussing his innovative contributions like the creation of KC7 Cyber, a tool that democratizes access to cybersecurity training.

Learn about Simeon's early influences, challenges, and the importance of critical thinking, analytical reasoning, and communication in cybersecurity. He also shares his passion for breaking down biases and encouraging diversity in the tech world while offering practical advice for both new and seasoned blue teamers. Discover how KC7 is shaping the future of cyber defense training and get inspired by Simeon's dedication to making cybersecurity accessible to all.

Connect with Simeon: https://www.linkedin.com/in/kakpovi/

Check out KC7: https://kc7cyber.com/

00:00 Introduction and Guest Welcome

00:36 Simeon's Background and Career Journey

01:26 Getting Started in Cybersecurity

02:17 The Cyber Analyst Challenge Experience

04:03 Industry vs Academic Cybersecurity

07:08 Diversity in Cybersecurity

07:54 Emerging Coders Club at Howard

08:21 Breaking Technical and Non-Technical Labels

13:17 The Birth of KC7 Cyber

17:19 Using AI to Scale Cybersecurity Training

18:28 Behind the Scenes of a Complex Engine

20:01 Teaching Critical Thinking and Analytical Reasoning

20:50 The Importance of Transferable Skills

21:13 Using KQL for Fast Data Access

22:57 Investigative Process and Anticipating Questions

24:19 Technical Interviews and Investigative Skills

26:39 Training New Analysts in Full Scope Investigations

32:57 KC7: A Tool for Accelerated Learning

36:37 Final Thoughts and Recommendations

=========================
Connect with your hosts:
Josh Mason: https://www.linkedin.com/in/joshuacmason
Wade Wells: https://www.linkedin.com/in/wadingthrulogs
=========================
Sponsored by ThreatLocker @ThreatLocker
Allow what you need, block everything else... Including ransomware. Zero trust Endpoint Protection Platform from ThreatLocker. Learn more at https://simplycyber.io/threatlocker
=========================
Simply Cyber empowers people who want a rewarding cybersecurity career 💪
=========================
All the ways to connect with Simply Cyber
https://SimplyCyber.io/Socials
=========================
This podcast is presented by Simply Cyber Media Group

In this episode of Simply Defensive, hosts Josh Mason and Wade Wells are joined by SOC analyst Jessica Bishop. Jessica shares her unconventional journey into cybersecurity, transitioning from military police to a corporate role and eventually into a SOC analyst position at an MSSP.

She discusses her job's dynamic and engaging aspects, the importance of teamwork and communication within cybersecurity, and her intriguing hobby of paranormal investigation. Tune in to hear about effective cybersecurity practices, the challenges of working in a SOC, and the crossover between investigative tactics in cybersecurity and paranormal research.

Follow Jess on LinkedIn: https://www.linkedin.com/in/jessica-bishop-%F0%9F%A7%AD-262729b4/

00:00 Introduction and Guest Welcome
00:38 Jessica's Journey into Cybersecurity
04:02 Networking and Mentorship
05:00 Education and Career Path
09:24 Challenges and Rewards in SOC Work
13:58 Paranormal Investigations
16:05 Haunted House Stories
17:35 The Importance of Skepticism in Investigations
18:38 Relating Skepticism to Cybersecurity
19:00 The Dropbox Incident
20:18 Inflating Metrics in SOC
21:04 Challenges of Working in a SOC
24:21 The Importance of Communication in Security
29:41 Empathy in Security Work
30:22 Final Thoughts and Recommendations

=========================
Connect with your hosts:
Josh Mason: https://www.linkedin.com/in/joshuacmason
Wade Wells: https://www.linkedin.com/in/wadingthrulogs
=========================
Sponsored by ThreatLocker @ThreatLocker
Allow what you need, block everything else... Including ransomware. Zero trust Endpoint Protection Platform from ThreatLocker. Learn more at https://simplycyber.io/threatlocker
=========================
Simply Cyber empowers people who want a rewarding cybersecurity career 💪
=========================
All the ways to connect with Simply Cyber
https://SimplyCyber.io/Socials
=========================
This podcast is presented by Simply Cyber Media Group

Join hosts Josh Mason and Wade Wells in this episode of Simply Defensive as they welcome cybersecurity meme-maker and SOC analyst, Dan Reardon, also known as The HaircutFish.

Discover Dan's unconventional journey into cybersecurity, from creating influential memes about prominent figures like Jon Hammond and John Strand to writing insightful blogs on Medium. Dan shares his experiences at Wild West Hacking Fest, overcoming personal challenges, and the importance of networking within the cybersecurity community.

Learn about the reality of working as a SOC analyst, the tools of the trade such as Vim, VS Code, and Wireshark, and the rewarding nature of thwarting cyber attacks. This episode emphasizes the power of community, the significance of balancing work with family life, and the benefits of giving back through knowledge sharing.

Don't miss these valuable insights, and expect more exciting discussions in future episodes!

Connect with our guest, Dan Reardon, on LinkedIn: https://www.linkedin.com/in/danrearden

00:00 Welcome to Simply Defensive

00:10 Meet Dan Reardon aka Haircutfish

00:51 Dan's Journey into Cybersecurity

01:14 The Art of Meme Making

02:15 Connecting Through Memes

06:20 Dan's Blogging Adventures

11:50 Learning and Adapting in Cybersecurity

14:21 Dan's Hacker Origin Story

17:07 Getting Started with TryHackMe and Blue Teaming

17:48 First Security Job Experience

18:19 Expectations vs Reality in SOC Roles

20:30 Favorite Tools and Utilities

25:16 The Importance of Community in Cybersecurity

33:08 Final Thoughts and Recommendations for Blue Teamers

=========================
Connect with your hosts:
Josh Mason: https://www.linkedin.com/in/joshuacmason
Wade Wells: https://www.linkedin.com/in/wadingthrulogs
=========================
Sponsored by ThreatLocker @ThreatLocker
Allow what you need, block everything else... Including ransomware. Zero trust Endpoint Protection Platform from ThreatLocker. Learn more at https://simplycyber.io/threatlocker
=========================
Simply Cyber empowers people who want a rewarding cybersecurity career 💪
=========================
All the ways to connect with Simply Cyber
https://SimplyCyber.io/Socials
=========================
This podcast is presented by Simply Cyber Media Group

In this episode of Simply Defensive, hosts Josh Mason and Wade Wells sit down with Melanie Thomas, Vice President of Cyber Security at BridgePoint Technologies. Melanie shares insights from her role, her experience in cybersecurity, and her path from tech support to VP. She discusses her adjunct professorship at the University of San Diego, her community service, and the importance of networking. The conversation covers the significance of education in cybersecurity, Melanie's approach to balancing technical and strategic roles, and valuable advice for new entrants in the field, including teamwork and maintaining humility.

=========================
Connect with your hosts:
Josh Mason: https://www.linkedin.com/in/joshuacmason
Wade Wells: https://www.linkedin.com/in/wadingthrulogs
=========================
Simply Cyber empowers people who want a rewarding cybersecurity career 💪
=========================
All the ways to connect with Simply Cyber
https://SimplyCyber.io/Socials
=========================
This podcast is presented by Simply Cyber Media Group

In this episode of Simply Defensive, hosts Josh Mason and Wade Wells welcome Ken, also known as MonkeyDragon, a member of Defcon 858 in San Diego and co-founder of Hard Hat Brigade. Ken introduces himself and discusses his role in cybersecurity, focusing primarily on incident response, threat detection, and threat hunting. The conversation transitions to the topic of 'war driving,' a practice of searching for wireless networks, which Ken is passionate about. He shares insights into the tools used, such as Kismet, and the community-driven project, Wiggle. Ken also talks about his journey into cybersecurity, the origins, and the activities of the Hard Hat Brigade, and offers advice for new blue teamers: ask questions without fear. The episode highlights Ken's involvement in various security events and his emphasis on community and kindness in the cybersecurity field.

=========================
Connect with your hosts:
Josh Mason: https://www.linkedin.com/in/joshuacmason
Wade Wells: https://www.linkedin.com/in/wadingthrulogs

=========================
Simply Cyber empowers people who want a rewarding cybersecurity career 💪
=========================
=========================
All the ways to connect with Simply Cyber
https://SimplyCyber.io/Socials
=========================

Welcome to Simply Defensive! Josh Mason and co-host Wade Wells sit down with special guest Ashley Knowles from Black Hills InfoSec. Dive into the world of pen testing, SOC management, and the complex relationships between blue and red teams. Ashley shares her experiences working as a penetration tester for over a decade, her role with Black Hills InfoSec, and insights on improving SOC operations. Discover the challenges of balancing SOC metrics, handling new threats, and fostering transparency between teams. Plus, learn about the intricacies of Microsoft DevTunnels and other cutting-edge techniques used in the field. Don't miss Ashley's advice on research, continuous learning, and the importance of Googling effectively.

Subscribe and hit the bell for more episodes!

=========================
Connect with your hosts:
Josh Mason: https://www.linkedin.com/in/joshuacmason
Wade Wells: https://www.linkedin.com/in/wadingthrulogs

=========================
Simply Cyber empowers people who want a rewarding cybersecurity career 💪
=========================
=========================
All the ways to connect with Simply Cyber
https://SimplyCyber.io/Socials
=========================

Blake Reagan on Incident Response, Career Evolution, and the Importance of Soft Skills

In this week's episode of Simply Defensive, host Josh Mason and co-host Wade Wells welcome incident response expert Blake Reagan. The discussion delves into Blake's journey from the building trades to cybersecurity, a field he entered after the 2008 economic downturn. Blake shares his experiences in digital forensics, emphasizing the importance of soft skills like public speaking and effective communication in cybersecurity roles. The trio also discusses the merits of tools like the Autopsy Digital Forensics platform, the utility of Toastmasters for public speaking, and time management strategies, making this episode a comprehensive look at the tech and human sides of cybersecurity.

=========================
Connect with your hosts:
Josh Mason: https://www.linkedin.com/in/joshuacmason
Wade Wells: https://www.linkedin.com/in/wadingthrulogs

=========================
Simply Cyber empowers people who want a rewarding cybersecurity career 💪
=========================
=========================
All the ways to connect with Simply Cyber
https://SimplyCyber.io/Socials
=========================