sroberts / sroberts.github.io Goto Github PK

• http://www.itbusinessedge.com/slideshows/the-most-famous-advanced-persistent-threats-in-history.html

http://www.pfchangs.com/security/

This is a half formed idea, but the thought is that "Threat Intel" is a vendor function. Most organizations really want an intel driven IR team (Hunt team).

It'd be good to share an update on what my summer has been and my steps to get involved in the Columbus scene.

http://jekyllrb.com/docs/frontmatter/

A posts aren't displaying any time:

• http://sroberts.github.io/2014/01/23/online-ctfs/
• http://sroberts.github.io/2014/01/06/first-post/

https://github.com/al3x/al3x.net/blob/master/sitemap.xml

Putting a name with a face is hard, but putting a name with actions is far easier and just as useful.

I think there is way too much made of "Real Time" detection, esp given how few events are detectable in real time. I should explore that.

http://davidensinger.com/2013/04/supporting-twitter-cards-with-jekyll/

I keep struggling with developing in Ruby or Python. Some other people might be interested. Or not. But I'd love to have the thought process documented.

Couldn't hurt right?

gem 'github-pages'

https://github.com/github/pages-gem

• Malware has names (one for each vendor)
• Vulnerabilities have names (Shellshock, heart bleed, etc)
• Actors have names (Enigmatic Penguin)

Being able to refer to things by name is great... but we're overdoing it.

I've talked with a lot of people, including @krmaxwell & @rawbits, about what it takes to be a solid Python dev. It'd be great to document some of that.

• http://erjjones.github.io/blog/How-I-built-my-blog-in-one-day/
• Contact Form: http://www.jotform.com/
• http://pixelcog.com/blog/2013/jekyll-from-scratch-extending-jekyll/
• http://sachachua.com/blog/2014/12/making-personal-blogs-useful-people/

Battalion Model vs Special Forces Model!

Talk about how I have Atom setup.

Or lack there of...

Mac BlackBag, Autopsy, MIDAS, OSX auditor, etc.

Based on: https://gist.github.com/sroberts/6354039

• FIR
• CRITs
• GRR
• etc

You have a presentation about it, perhaps you want to save the blog for somewhat around there.

Just in case I decide to open up the blog.

GitHub security is all remote. That's weird. Talk about how we do it.

Learn to:

• Keep credentials out of code
• Develop and follow a style guide
• Python: NO TRAILING/EXTRA WHITESPACE

The Hyde theme is fine, but I really like the Lanyon Theme. I should upgrade to it.

Flexibility comes at the expenses of usability.

http://www.hulu.com/watch/734858

My mentoring page still says I live in Hershey instead of Columbus.

As requested by @mattjohannsen: http://sroberts.github.io/2014/01/18/my-favorite-oss-security-projects/ <- a short blog post on how you utilize each of these and tips on getting started using them and use cases would be awesome!

Tools:

• Google Rapid Response
• AOL Moloch
• Etsy & Facebook MIDAS
• ForDropWeb
• Buffer Thug
• Cuckoo Sandbox

I built a lot of CoffeeScript for Hubot VTR, talk about that: https://github.com/sroberts/hubot-vtr-scripts

People drop these terms a lot. I think I could do a decent job explaining them, how they interrelate, and why you should consider each one.

Add reading time to posts.

{% assign ert = page.content | strip_html | number_of_words | divided_by:180 %}
{% assign ertremainder = page.content | strip_html | number_of_words | modulo:180 %}
{% if ertremainder >= 90 %}
    {% assign readtime = ert | plus:1 %}
{% else %}
    {% assign readtime = ert %}
{% endif %}

Based on HMFAYSAL's Blog.

I really don't need another theme but it's worth considering/playing with So Simple.

People talk a lot about 10x developers, what about 10x Incident Responders?

i think we conflate tactical and strategic all the time, instead of using them together

I know I've done some of this, and it's too late for details, but it's totally true.

• http://dev2ops.org/2010/02/what-is-devops/
• http://en.wikipedia.org/wiki/DevOps

There's got to be some best practices for writing good Yara rules. I should collect some.

Apparently http://sroberts.github.io/atom.xml isn't working:

Drat and other things...

Service Set Identification)

Link has an extra parenthesis in OSX Airport Changes