The RSnake Show

Today Trey Ford and RSnake sat down with Bryson Bort to discuss Scythe - a post-infection utility that allows red teamers to upload simulated but functional malware to test the reactions and defenses of enterprises. Basically the ultimate cyber-weapons as legos to play with. Very cool stuff, check it out.

Today Trey Ford and RSnake sat down with Keep Aware and learned about their browser-based solution to anti-phishing, and URL detection and filtering. It is able to detect all sorts of content policy violations and alarm or stop the user from visiting the site or performing the task in question. Check it out!

Today, Trey Ford and RSnake sit down with Push Security to discuss their browser based identity and access control detection system. It is very cool software that allows them to identify bad things that may be occurring but also to detect places that may be used by the company that you may not otherwise know about. Check it out!

Trey Ford and RSnake did a surprisingly great demo day with Reach Security.  It blew what little hair RSnake has left back. A person-based risk approach to IT governance and control? Who would have thought of such a thing?  Definitely worth a watch if you control security at a large organization. 

Today Trey Ford and RSnake sit down and review BigID. It is an entirely different way of thinking of digital loss prevention (DLP) where they hunt down data all over your environment and attempt to classify and ideally remove or protect data whenever possible.  In the event of a breach they can identify the blast radius of that breach and what PII is in scope, what regulations are triggered, etc.

Trey Ford and RSnake sit down to watch a great demo with Hypori, who does a different take on mobile device management by... not doing it. They act as a tunnel to virtual machines that run a mobile environment off the device, limiting attack surface and greatly improving privacy for the end users without requiring a second device.

Today Trey Ford and RSnake sit down with MirrorTab which aims to thwart client side malicious plugins from reading data meant to banks, and other sensitive websites, using clever WebRTC and video tricks.

Today Trey Ford and RSnake sit down with the Nucleus founding team to walk through the origins of the product, how it solves the problem of disjointed security product alerts/findings, and enables a lot of automation as a result.

Trey Ford and I sat down for a very cool demo by RAD Security. It really helps identify potentially malicious things inside of your cloud containers. Worth checking out if you work in cloud and with containers.

Trey Ford and RSnake sit down and review Pellonium. They dig into all of the cool features of the product around risk quantification and understanding how executives like to see data and ultimately quantify unrealized loss.