Fred Wilmot's guest appearances

Fred Wilmot

ITSPmagazine

Julie Smith

Alison Levine

Sam Houston

Robert Lee

Andrew Smith

Robin Smith

Kathleen Smith

Omar Khawaja

Adam Levin

David Cross

Stephanie Lucas

Jeffrey Smith

Joel Makower

Caleb Barlow

Brian Kelly

OwlTail

The Red Team Village and the Blue Team Village had big plans to continue their tradition of bringing together people with a mindset for attack and defense, respectively. They even had big plans to have an open wall between the two villages, effectively creating a "purple" space in the middle for the two villages to interact with each other.Bring of DEFCON #SafeMode, and these plans change a bit.Just how much? And what can you expect from each side of the attack/defense coin? Listen to our guests, Russell Mosley (Blue Team), @Munin (Blue Team), and Fred Wilmot (Red Team) to get the complete low-down.Enjoy!Guest(s)Fred Wilmot | Russell Mosley | @MuninThis Episode’s Sponsors:Cequence: itspm.ag/itspcequwebReversingLabs: itspm.ag/itsprvslwebSemperis: itspm.ag/itspsempwebTo see and hear more event coverage content on ITSPmagazine, visit:https://www.itspmagazine.com/itspmagazine-event-coverageAre you interested in sponsoring our event coverage or another ITSPmagazine Channel?https://www.itspmagazine.com/podcast-series-sponsorships

The Red Team Village and the Blue Team Village had big plans to continue their tradition of bringing together people with a mindset for attack and defense, respectively. They even had big plans to have an open wall between the two villages, effectively creating a "purple" space in the middle for the two villages to interact with each other.Bring of DEFCON #SafeMode, and these plans change a bit.Just how much? And what can you expect from each side of the attack/defense coin? Listen to our guests, Russell Mosley (Blue Team), @Munin (Blue Team), and Fred Wilmot (Red Team) to get the complete low-down.Enjoy!Guest(s) Fred Wilmot | Russell Mosley | @MuninThis Episode’s Sponsors:Cequence: <a href="http://itspm.ag/itspcequweb" rel="nofollow" target="_blank">itspm.ag/itspcequweb</a>ReversingLabs: <a href="http://itspm.ag/itsprvslweb" rel="nofollow" target="_blank">itspm.ag/itsprvslweb</a>Semperis: <a href="http://itspm.ag/itspsempweb" rel="nofollow" target="_blank">itspm.ag/itspsempweb</a>To see and hear more event coverage content on ITSPmagazine, visit: <a href="https://www.itspmagazine.com/itspmagazine-event-coverage" rel="nofollow" target="_blank">https://www.itspmagazine.com/itspmagazine-event-coverage</a>Are you interested in sponsoring our event coverage or another ITSPmagazine Channel? <a href="https://www.itspmagazine.com/podcast-series-sponsorships" rel="nofollow" target="_blank">https://www.itspmagazine.com/podcast-series-sponsorships</a>

Bringing The Red Team And Blue Team Villages Virtually Together At DEFCON #SafeMode | With Fred Wilmot, Russell Mosley And @Munin

Ryan Kovar

Katie Nickels

I was trying hard for a couple of months to organize a chat with Katie Nickels [Lead Cyber Security Engineer at MITRE] and Fred Wilmot [VP, Security Engineering at Devo] to dig into the topic of MITRE ATT&amp;CK. I wanted to know more about the framework, how it works, why it was getting so much traction, and how organizations were successfully operationalizing the framework within their risk and security management programs.It turns out, Katie and Fred are both extremely busy. I found it a nearly-impossible task bringing these two experts together to talk about MITRE ATT&amp;CK. They both wanted to—however, we couldn’t get the calendars to work in our favor. Until … we were all in the same town during the same week for the same set of events—can you say Hacker Summer Camp?!Knowing this, I took one more shot at connecting with Katie and Fred in an attempt to meet them in person in Las Vegas; low and behold—I had success! Not only did I succeed in bringing Katie and Fred together for this podcast, but I also got a chance to meet Ryan Kovar [Principal Security Strategist at Splunk]—who happened to be presenting on ATT&amp;CK with Katie that week. I asked Ryan to join us for the conversation as well. He agreed. BONUS!To top it all off, we got to meet in a 39th-floor suite overlooking the Las Vegas Strip—a pretty chill environment from which to have our chat, indeed.Once we were all together and mic’d up, we got to talking. We talked a lot. We looked at what MITRE ATT&amp;CK is, what it’s for, who it’s for, how to get started with it, how to be successful with it, and what scenarios could be leveraged to learn from others’ successes and challenges.“Risk [management] is about understanding the threats and the control gaps you have—it’s about knowing your adversaries and yourself." ~Katie NickelsWe covered the obvious: MITRE ATT&amp;CK is a framework that is threat intelligence derived. What started as a grassroots efforts from the ground up now has a groundswell of support from the community. We pulled back the covers to learn more about how and why this is the case.According to Katie, one great place to start on the threat intel side is to focus on a technique, group or malware sample that your org is concerned about and map what the adversaries are doing to where the gaps are in your controls. If the adversary is doing something you can’t protect against, that’s an excellent place to start.We also covered the role vendors can play in ensuring a successful implementation of the framework; plan to lean on them for translating the data (and its source/s) to be utilized within the organization. One of the main benefits of MITRE ATT&amp;CK is that it provides a universal language that can use across vendors—by having security vendor competitors that are mapping to ATT&amp;CK means you can build a better coverage map across those vendors that you use (or are considering). However, don’t forget that it’s ultimately up to the organization to understand their environment, specific business needs, relevant threat vectors, and the countering adversary cesspool that matter to their business risk profile.As we continued the conversation, it became crystal clear that storytelling is—and must be—front and center in the definition and application of MITRE ATT&amp;CK within your environment. This is important to avoid the possibility of the framework becoming just another checkbox item.Want to learn more from the fantastic group of experts? Good! Have a listen!Guest(s)Guests: Katie Nickels | Fred Wilmot | Ryan KovarThis Episode’s Sponsors:Nintex: https://itspm.ag/itspntwebInterfocus: https://itspm.ag/ifcsitspdirTo see and hear more Redefining Security content on ITSPmagazine, visit:https://www.itspmagazine.com/redefining-securityAre you interested in sponsoring an ITSPmagazine Channel?https://www.itspmagazine.com/podcast-series-sponsorships

I was trying hard for a couple of months to organize a chat with Katie Nickels [Lead Cyber Security Engineer at MITRE] and Fred Wilmot [VP, Security Engineering at Devo] to dig into the topic of MITRE ATT&amp;CK. I wanted to know more about the framework, how it works, why it was getting so much traction, and how organizations were successfully operationalizing the framework within their risk and security management programs.It turns out, Katie and Fred are both extremely busy. I found it a nearly-impossible task bringing these two experts together to talk about MITRE ATT&amp;CK. They both wanted to—however, we couldn’t get the calendars to work in our favor. Until … we were all in the same town during the same week for the same set of events—can you say Hacker Summer Camp?!Knowing this, I took one more shot at connecting with Katie and Fred in an attempt to meet them in person in Las Vegas; low and behold—I had success! Not only did I succeed in bringing Katie and Fred together for this podcast, but I also got a chance to meet Ryan Kovar [Principal Security Strategist at Splunk]—who happened to be presenting on ATT&amp;CK with Katie that week. I asked Ryan to join us for the conversation as well. He agreed. BONUS!To top it all off, we got to meet in a 39th-floor suite overlooking the Las Vegas Strip—a pretty chill environment from which to have our chat, indeed.Once we were all together and mic’d up, we got to talking. We talked a lot. We looked at what MITRE ATT&amp;CK is, what it’s for, who it’s for, how to get started with it, how to be successful with it, and what scenarios could be leveraged to learn from others’ successes and challenges.“Risk [management] is about understanding the threats and the control gaps you have—it’s about knowing your adversaries and yourself." ~Katie NickelsWe covered the obvious: MITRE ATT&amp;CK is a framework that is threat intelligence derived. What started as a grassroots efforts from the ground up now has a groundswell of support from the community. We pulled back the covers to learn more about how and why this is the case.According to Katie, one great place to start on the threat intel side is to focus on a technique, group or malware sample that your org is concerned about and map what the adversaries are doing to where the gaps are in your controls. If the adversary is doing something you can’t protect against, that’s an excellent place to start.We also covered the role vendors can play in ensuring a successful implementation of the framework; plan to lean on them for translating the data (and its source/s) to be utilized within the organization. One of the main benefits of MITRE ATT&amp;CK is that it provides a universal language that can use across vendors—by having security vendor competitors that are mapping to ATT&amp;CK means you can build a better coverage map across those vendors that you use (or are considering). However, don’t forget that it’s ultimately up to the organization to understand their environment, specific business needs, relevant threat vectors, and the countering adversary cesspool that matter to their business risk profile.As we continued the conversation, it became crystal clear that storytelling is—and must be—front and center in the definition and application of MITRE ATT&amp;CK within your environment. This is important to avoid the possibility of the framework becoming just another checkbox item.Want to learn more from the fantastic group of experts? Good! Have a listen!Guest(s) Guests: Katie Nickels | Fred Wilmot | Ryan KovarThis Episode’s Sponsors:Nintex: <a href="https://itspm.ag/itspntweb" rel="nofollow" target="_blank">https://itspm.ag/itspntweb</a>Interfocus: <a href="https://itspm.ag/ifcsitspdir" rel="nofollow" target="_blank">https://itspm.ag/ifcsitspdir</a>To see and hear more Redefining Security content on ITSPmagazine, visit: <a href="https://www.itspmagazine.com/redefining-security" rel="nofollow" target="_blank">https://www.itspmagazine.com/redefining-security</a>Are you interested in sponsoring an ITSPmagazine Channel? <a href="https://www.itspmagazine.com/podcast-series-sponsorships" rel="nofollow" target="_blank">https://www.itspmagazine.com/podcast-series-sponsorships</a>

Operationalizing The MITRE ATT&CK Framework | A Conversation With Katie Nickels, Fred Wilmot, And Ryan Kovar