Goldilocks CTI: Building a Program That’s Just RightIt is time to talk about how much time and money we’re wasting in infosec trying to build effective Cyber Threat Intelligence (CTI)…Apr 30, 20224Apr 30, 20224
Cyber Threat Intelligence Study PlanA recent(ish) rant about mentoring on Twitter led to an awesome thread of Cyber Threat Intelligence (CTI) resources and reading plans. That…Apr 10, 20226Apr 10, 20226
Mind the Gap: Leveraging mind maps & self-assessments to develop a personal training planThis blog is a written version of a talk I was blessed to give at The Diana Initiative (TDI2021) conference.Jul 3, 2021Jul 3, 2021
CTI 101 Student HandoutAdmin note: I teach a CTI 101 workshop at BSidesNOVA and randomly at other locations throughout the year, and this is my list of resources…Jun 15, 2021Jun 15, 2021
Quantifying Threat Actors with Threat Box“Which threat actor should I care about today?” That was a question from my client for a few months that sort of plagued my team. The CISO…Sep 18, 2020Sep 18, 2020
CTI is Better Served with Context: Getting better value from IOCsWhether you are disseminating threat indicators internally to other teams or participating in information sharing programs within the…Jun 14, 20202Jun 14, 20202
On Leadership…Be Positive Change. Imagine a workforce full of passionate men and women that care about the outcome of each and every day of work…Jun 10, 2020Jun 10, 2020
Career Hacking: Tips and Tricks to Making the Most of your CareerOne of the best ways that ensure that you have an amazing career that is filled with challenges, enjoyment, and growth, is to consistently…Apr 17, 20203Apr 17, 20203
ATT&CKing Threat ManagementIt would be really awesome to map out the most common techniques used by threat actors and prioritize those for detection, right? It would…Nov 24, 20191Nov 24, 20191
Implementing Team Training that WorksSo you just read my last article (Developing Team Documentation that Matters), and you’re thinking “cool story bro, but I bet the…Jun 18, 2019Jun 18, 2019