Mike Kavka @siliconshecky@infosec.exchange

Free summit geared to new people to the #infosec #cybersecurity field coming in April from SANS:
https://www.sans.org/event/newtocyber-summit-2021/

The holiday season is over, and so are the competition portions of the Holiday CTFs. This year I did
@RealTryHackMe
Advent of Cyber and
@KringleCon
. Here is a brief overview and rating of both.

https://www.siliconshecky.com/holiday-ctf-review/

Infosec certs are not just about showing employers or the community/world at large that you have knowledge. They can help one feel like they actually do know things and can contribute. This is what happened for me.
I think it is time that certs stop getting such a bad rap.

So, while reading a book called Sandworm, I have been noticing things: https://www.siliconshecky.com/solarwinds-sunburst-havent-we-been-here-before/

New Blog Post:
The One About Chained Exploits and Pentest Results

https://www.siliconshecky.com/the-one-about-chained-exploits-and-pentest-results/

The more I learn the more I shake my head and wish I didn't know.

New Blog Post: My experience taking a SANS class and going through a GIAC certification:

https://www.siliconshecky.com/passing-the-cert-sans-notes-and-thoughts/

Fantastic Guide to the E5 tier of Microsoft.
https://frankmcg.com/2020/09/purchased-microsoft-365-e5-now-what/

Nothing as frustrating as taking a practice exam and rushing through it, forgetting everything that you learned about taking said exam.

Taking my first SANS course at the end of the month. Now trying to go through and make sure I have done some pre-studying just to make sure I feel somewhat comfortable or at least not a total n00b.

Any tricks on how to keep focused during online courses? I'm trying with some free stuff, but man is it tough. Afraid to spend money on one if I am not going ot actually maintain focus and learn.

Imposter Syndrome is in full effect... *headdesks*

Every company, every piece of software has security issues. The making of a good company IMHO is how they react to finding out about these issues? Do they try to keep them quiet, do they try to fix them immediately, do they go after people who find the issues?
Security is NOT a destination, it is a process.

Starting to look at Azure Sentinel. Find out no one on my team has the proper permissions. Time to start the process of asking for the rights so we can do this properly.

My thoughts on Zoom:
https://www.siliconshecky.com/zoom-zoom-or-wtf-people/

Zoom, the product that not only has divided the Security field to a degree, but has made us the NO people again. Honestly, if it is used for non-confidential stuff I think it is fine. Plus the company has been responsive to us.
https://thehackernews.com/2020/04/zoom-cybersecurity-hacking.html

It is that time of year, and here is the latest Buzzword Bingo information!
https://www.vice.com/en_us/article/epgp9j/infosec-buzzword-bingo-2020-edition

Excited to say I"ll be speaking at Cyphercon in MKE this April. I shall take a look at How Nonstandard Standards could be hurting security.