sroberts / sroberts.github.io Goto Github PK

I've talked with a lot of people, including @krmaxwell & @rawbits, about what it takes to be a solid Python dev. It'd be great to document some of that.

• Malware has names (one for each vendor)
• Vulnerabilities have names (Shellshock, heart bleed, etc)
• Actors have names (Enigmatic Penguin)

Being able to refer to things by name is great... but we're overdoing it.

• FIR
• CRITs
• GRR
• etc

http://davidensinger.com/2013/04/supporting-twitter-cards-with-jekyll/

• http://dev2ops.org/2010/02/what-is-devops/
• http://en.wikipedia.org/wiki/DevOps

i think we conflate tactical and strategic all the time, instead of using them together

People drop these terms a lot. I think I could do a decent job explaining them, how they interrelate, and why you should consider each one.

Add reading time to posts.

{% assign ert = page.content | strip_html | number_of_words | divided_by:180 %}
{% assign ertremainder = page.content | strip_html | number_of_words | modulo:180 %}
{% if ertremainder >= 90 %}
    {% assign readtime = ert | plus:1 %}
{% else %}
    {% assign readtime = ert %}
{% endif %}

Based on HMFAYSAL's Blog.

Just in case I decide to open up the blog.

I keep struggling with developing in Ruby or Python. Some other people might be interested. Or not. But I'd love to have the thought process documented.

I think there is way too much made of "Real Time" detection, esp given how few events are detectable in real time. I should explore that.

Talk about how I have Atom setup.

Putting a name with a face is hard, but putting a name with actions is far easier and just as useful.

gem 'github-pages'

https://github.com/github/pages-gem

It'd be good to share an update on what my summer has been and my steps to get involved in the Columbus scene.

Or lack there of...

Mac BlackBag, Autopsy, MIDAS, OSX auditor, etc.

Service Set Identification)

Link has an extra parenthesis in OSX Airport Changes

My mentoring page still says I live in Hershey instead of Columbus.

I know I've done some of this, and it's too late for details, but it's totally true.

Couldn't hurt right?

I built a lot of CoffeeScript for Hubot VTR, talk about that: https://github.com/sroberts/hubot-vtr-scripts

https://github.com/al3x/al3x.net/blob/master/sitemap.xml

• http://erjjones.github.io/blog/How-I-built-my-blog-in-one-day/
• Contact Form: http://www.jotform.com/
• http://pixelcog.com/blog/2013/jekyll-from-scratch-extending-jekyll/
• http://sachachua.com/blog/2014/12/making-personal-blogs-useful-people/

Apparently http://sroberts.github.io/atom.xml isn't working:

Drat and other things...

I really don't need another theme but it's worth considering/playing with So Simple.

A posts aren't displaying any time:

• http://sroberts.github.io/2014/01/23/online-ctfs/
• http://sroberts.github.io/2014/01/06/first-post/

As requested by @mattjohannsen: http://sroberts.github.io/2014/01/18/my-favorite-oss-security-projects/ <- a short blog post on how you utilize each of these and tips on getting started using them and use cases would be awesome!

Tools:

• Google Rapid Response
• AOL Moloch
• Etsy & Facebook MIDAS
• ForDropWeb
• Buffer Thug
• Cuckoo Sandbox

The Hyde theme is fine, but I really like the Lanyon Theme. I should upgrade to it.

People talk a lot about 10x developers, what about 10x Incident Responders?

You have a presentation about it, perhaps you want to save the blog for somewhat around there.

There's got to be some best practices for writing good Yara rules. I should collect some.

This is a half formed idea, but the thought is that "Threat Intel" is a vendor function. Most organizations really want an intel driven IR team (Hunt team).

Battalion Model vs Special Forces Model!

Based on: https://gist.github.com/sroberts/6354039

• http://www.itbusinessedge.com/slideshows/the-most-famous-advanced-persistent-threats-in-history.html

http://www.hulu.com/watch/734858

GitHub security is all remote. That's weird. Talk about how we do it.

Learn to:

• Keep credentials out of code
• Develop and follow a style guide
• Python: NO TRAILING/EXTRA WHITESPACE

http://www.pfchangs.com/security/

Flexibility comes at the expenses of usability.

http://jekyllrb.com/docs/frontmatter/