What Tales come from your SOC?

In this Episode we talk with Dave Kennedy, a 14yr Veteran of the Royal Navy and now Cyber and Information Security Consultant with tmc3. The chat focuses not only on the SatCom and IT work he performed while aboard a £3bn Vanguard Class Submarine  ("Are you telling me this sucker is Nuclear? - Marty McFly, 1985") but also the help and support received when he decided to join Civilian life. Dave is also  a Founder and Lead Advisor for Cybervets, a group that aims to assist and support those leaving the Armed Forces and move into a career within Cyber Security.

In this Episode we chat to Richard De Vere, Head of Social Engineering at Ultima Business Solutions. We get a great insight into the art of Social Engineering, how he approaches various engagements from OSINT through to wearing the right colour tie, and delve into the mind games that can be played. We talk physical access, scoping the engagements, what works and what doesn't, and a great For SOC's sake at the end that I whole heartedly agree with.

We also reference a Blog of Richards during the podcast, that you can find here: https://theantisocialengineer.com/2021/07/15/worlds-worst-phishing-campaign/

Here we chat to Amir, CEO of SOS Intel, a Threat Intelligence monitoring company who help to scour the Dark Web for a wide range of specific TI,  from Phished accounts and scam money laundering sites, to active insider access and breach forums. We discuss how there is more than just TOR used to access these areas, exactly how anonymous you are,  how much it costs to buy a disgruntled employee, where Law Enforcement are involved and bust a few myths in the process. 

Here we chat to Jack Hughes, head of Digital Forensics and Incident Response at Unit42, the DFIR and Threat Intelligence company.  We chat about how malicious actors get into environments, dwell time, lateral movement and how it can be tracked. In addition, Jack talks about his own experiences within the industry not only in his current role but also his career in getting to that stage and where those looking to get into DFIR can concentrate their learning efforts. 

We also look at preparation for  a SOC, with elements such as table top exercises as well as personal on the job investigations that Jack has been involved in. 

It took a few months to arrange this interview given that Jack is "Always out saving the world" according to his colleagues, so it was great to get him on the show and it was certainly worth it. 

We talk to Jason Steer, CISO at Threat Intelligence company Recorded Future about where Threat Intel has evolved over time from "just" a list of Hashes or IOC's, where it sits within a Security Platform, the importance of being able to curate and understand billions of information entities and what that could mean for a modern day SOC

Also, another great "For SOC's sake" at the end here...

SOC Managers finding Sex Toys on the Network, MUD Teams running a global Text based adventure game, Neurodiversity for Hiring Managers... All this and more within the other Episodes!