Episode Notes Here's the first episode of my new podcast, EliteCast!  This is intended to be a less technical podcast aimed at business leaders and decision-makers to help explain the importance of information security (or cybersecurity as it's normally called by the target audience).  I'm a bit rusty, but I'll get there.  Apparently, a 9-month hiatus does that to a man. I hope you enjoy it and you choose to subscribe.  It should be live on the usual podcast sites, but if you want the RSS link, check out: https://pinecast.com/feed/elitecast Thanks, and take care!  EliteSec's Website: https://elitesec.io Want to get in touch? info@elitesec.io  Find out more at http://purplesquadsec.com

<h1>Episode Notes</h1> Here's the first episode of my new podcast, EliteCast! This is intended to be a less technical podcast aimed at business leaders and decision-makers to help explain the importance of information security (or cybersecurity as it's normally called by the target audience). I'm a bit rusty, but I'll get there. Apparently, a 9-month hiatus does that to a man. I hope you enjoy it and you choose to subscribe. It should be live on the usual podcast sites, but if you want the RSS link, check out: <a href="https://pinecast.com/feed/elitecast" rel="nofollow" target="_blank">https://pinecast.com/feed/elitecast</a> Thanks, and take care! <ul> <li>EliteSec's Website: <a href="https://elitesec.io" rel="nofollow" target="_blank">https://elitesec.io</a></li> <li>Want to get in touch? <a href="mailto:info@elitesec.io" rel="nofollow">info@elitesec.io</a></li> </ul> Find out more at <a href="http://purplesquadsec.com" rel="nofollow" target="_blank">http://purplesquadsec.com</a>

Special Episode - EliteCast Episode 1

Heath "The Cyber Mentor" Adams stops by to have a nice casual chat about how he got into infosec, what he's currently working on, and how he's giving back to the community in a rather novel way.  Definitely someone I respect as a great up-and-comer in the industry, this was a fantastic discussion for sure. Some links of interest:  Website - https://www.thecybermentor.com/ Company - https://tcm-sec.com/ Discord - https://discord.gg/REfpPJB Twitter - https://twitter.com/thecybermentor YouTube - https://www.youtube.com/c/thecybermentor Twitch - https://www.twitch.tv/thecybermentor Udemy - https://www.udemy.com/course/practical-ethical-hacking/  Want to reach out to the show?  There's a few ways to get in touch!  Purple Squad Security's Twitter: @PurpleSquadSec John's Twitter: @JohnsNotHere John's Mastodon: https://infosec.exchange/@JohnsNotHere Podcast Website: purplesquadsec.com Podcast Store: https://purplesquadsec.com/store Sign-Up for our Slack community: https://signup.purplesquadsec.com  Thanks for listening, and as always, I will talk with you all again next time. Find out more at http://purplesquadsec.com

Heath "The Cyber Mentor" Adams stops by to have a nice casual chat about how he got into infosec, what he's currently working on, and how he's giving back to the community in a rather novel way. Definitely someone I respect as a great up-and-comer in the industry, this was a fantastic discussion for sure. Some links of interest: <ul> <li>Website - <a href="https://www.thecybermentor.com/" rel="nofollow" target="_blank">https://www.thecybermentor.com/</a></li> <li>Company - <a href="https://tcm-sec.com/" rel="nofollow" target="_blank">https://tcm-sec.com/</a></li> <li>Discord - <a href="https://discord.gg/REfpPJB" rel="nofollow" target="_blank">https://discord.gg/REfpPJB</a></li> <li>Twitter - <a href="https://twitter.com/thecybermentor" rel="nofollow" target="_blank">https://twitter.com/thecybermentor</a></li> <li>YouTube - <a href="https://www.youtube.com/c/thecybermentor" rel="nofollow" target="_blank">https://www.youtube.com/c/thecybermentor</a></li> <li>Twitch - <a href="https://www.twitch.tv/thecybermentor" rel="nofollow" target="_blank">https://www.twitch.tv/thecybermentor</a></li> <li>Udemy - <a href="https://www.udemy.com/course/practical-ethical-hacking/" rel="nofollow" target="_blank">https://www.udemy.com/course/practical-ethical-hacking/</a></li> </ul> Want to reach out to the show?  There's a few ways to get in touch! <ul> <li>Purple Squad Security's Twitter: <a href="https://twitter.com/PurpleSquadSec" rel="nofollow" target="_blank">@PurpleSquadSec</a></li> <li>John's Twitter: <a href="https://twitter.com/JohnsNotHere" rel="nofollow" target="_blank">@JohnsNotHere</a></li> <li>John's Mastodon: <a href="https://infosec.exchange/@JohnsNotHere" rel="nofollow" target="_blank">https://infosec.exchange/@JohnsNotHere</a></li> <li>Podcast Website: <a href="https://purplesquadsec.com/" rel="nofollow" target="_blank">purplesquadsec.com</a></li> <li>Podcast Store: <a href="https://purplesquadsec.com/store" rel="nofollow" target="_blank">https://purplesquadsec.com/store</a></li> <li>Sign-Up for our Slack community: <a href="https://signup.purplesquadsec.com/" rel="nofollow" target="_blank">https://signup.purplesquadsec.com</a></li> </ul> Thanks for listening, and as always, I will talk with you all again next time. Find out more at <a href="http://purplesquadsec.com" rel="nofollow" target="_blank">http://purplesquadsec.com</a>

Episode 71 - A Casual Conversation with The Cyber Mentor

Kat Sweet (@TheSweetKat) sits down to chat about incident response and security operations, all while sipping tea with me. Some links of interest:  Kat's Twitter - @TheSweetKat Kat's Blog - thesweetkat.com  Want to reach out to the show?  There's a few ways to get in touch!  Purple Squad Security's Twitter: @PurpleSquadSec John's Twitter: @JohnsNotHere John's Mastodon: https://infosec.exchange/@JohnsNotHere Podcast Website: purplesquadsec.com Podcast Store: https://purplesquadsec.com/store Sign-Up for our Slack community: https://signup.purplesquadsec.com  Thanks for listening, and as always, I will talk with you all again next time. Find out more at http://purplesquadsec.com

Kat Sweet (@TheSweetKat) sits down to chat about incident response and security operations, all while sipping tea with me. Some links of interest: <ul> <li>Kat's Twitter - <a href="https://twitter.com/TheSweekKat" rel="nofollow" target="_blank">@TheSweetKat</a></li> <li>Kat's Blog - <a href="https://thesweetkat.com/blog" rel="nofollow" target="_blank">thesweetkat.com</a></li> </ul> Want to reach out to the show?  There's a few ways to get in touch! <ul> <li>Purple Squad Security's Twitter: <a href="https://twitter.com/PurpleSquadSec" rel="nofollow" target="_blank">@PurpleSquadSec</a></li> <li>John's Twitter: <a href="https://twitter.com/JohnsNotHere" rel="nofollow" target="_blank">@JohnsNotHere</a></li> <li>John's Mastodon: <a href="https://infosec.exchange/@JohnsNotHere" rel="nofollow" target="_blank">https://infosec.exchange/@JohnsNotHere</a></li> <li>Podcast Website: <a href="https://purplesquadsec.com/" rel="nofollow" target="_blank">purplesquadsec.com</a></li> <li>Podcast Store: <a href="https://purplesquadsec.com/store" rel="nofollow" target="_blank">https://purplesquadsec.com/store</a></li> <li>Sign-Up for our Slack community: <a href="https://signup.purplesquadsec.com/" rel="nofollow" target="_blank">https://signup.purplesquadsec.com</a></li> </ul> Thanks for listening, and as always, I will talk with you all again next time. Find out more at <a href="http://purplesquadsec.com" rel="nofollow" target="_blank">http://purplesquadsec.com</a>

Episode 70 - Mul-Tea-Factor with Kat Sweet

John sits down to talk solo about the show and what's in store for 2020. Some links of interest:  EliteSec Website - https://elitesec.io EliteSec Twitter - @EliteSec_io  Want to reach out to the show?  There's a few ways to get in touch!  Purple Squad Security's Twitter: @PurpleSquadSec John's Twitter: @JohnsNotHere John's Mastodon: https://infosec.exchange/@JohnsNotHere Podcast Website: purplesquadsec.com Podcast Store: https://purplesquadsec.com/store Sign-Up for our Slack community: https://signup.purplesquadsec.com  Thanks for listening, and as always, I will talk with you all again next time. Find out more at http://purplesquadsec.com

John sits down to talk solo about the show and what's in store for 2020. Some links of interest: <ul> <li>EliteSec Website - <a href="https://elitesec.io/" rel="nofollow" target="_blank">https://elitesec.io</a></li> <li>EliteSec Twitter - <a href="https://twitter.com/elitesec_io" rel="nofollow" target="_blank">@EliteSec_io</a></li> </ul> Want to reach out to the show?  There's a few ways to get in touch! <ul> <li>Purple Squad Security's Twitter: <a href="https://twitter.com/PurpleSquadSec" rel="nofollow" target="_blank">@PurpleSquadSec</a></li> <li>John's Twitter: <a href="https://twitter.com/JohnsNotHere" rel="nofollow" target="_blank">@JohnsNotHere</a></li> <li>John's Mastodon: <a href="https://infosec.exchange/@JohnsNotHere" rel="nofollow" target="_blank">https://infosec.exchange/@JohnsNotHere</a></li> <li>Podcast Website: <a href="https://purplesquadsec.com/" rel="nofollow" target="_blank">purplesquadsec.com</a></li> <li>Podcast Store: <a href="https://purplesquadsec.com/store" rel="nofollow" target="_blank">https://purplesquadsec.com/store</a></li> <li>Sign-Up for our Slack community: <a href="https://signup.purplesquadsec.com/" rel="nofollow" target="_blank">https://signup.purplesquadsec.com</a></li> </ul> Thanks for listening, and as always, I will talk with you all again next time. Find out more at <a href="http://purplesquadsec.com" rel="nofollow" target="_blank">http://purplesquadsec.com</a>

Episode 69 - 2020 Show Update

Circuit Swan

Circuit Swan stops by the show to talk all things Diana Initiative.  If you're going to Hacker Summer Camp 2020, you may want to consider adding the Diana Initiative to your list of cons to attend. Some links of interest:  Circuit Swan's Twitter: @CircuitSwan Diana Initiative Twitter: @DianaInitiative Website - https://www.dianainitiative.org  Want to reach out to the show?  There's a few ways to get in touch!  Purple Squad Security's Twitter: @PurpleSquadSec John's Twitter: @JohnsNotHere John's Mastodon: https://infosec.exchange/@JohnsNotHere Podcast Website: purplesquadsec.com Podcast Store: https://purplesquadsec.com/store Sign-Up for our Slack community: https://signup.purplesquadsec.com  Thanks for listening, and as always, I will talk with you all again next time. Find out more at http://purplesquadsec.com

Circuit Swan stops by the show to talk all things Diana Initiative. If you're going to Hacker Summer Camp 2020, you may want to consider adding the Diana Initiative to your list of cons to attend. Some links of interest: <ul> <li>Circuit Swan's Twitter: <a href="https://twitter.com/CircuitSwan" rel="nofollow" target="_blank">@CircuitSwan</a></li> <li>Diana Initiative Twitter: <a href="https://twitter.com/DianaInitiative" rel="nofollow" target="_blank">@DianaInitiative</a></li> <li>Website - <a href="https://www.dianainitiative.org/" rel="nofollow" target="_blank">https://www.dianainitiative.org</a></li> </ul> Want to reach out to the show?  There's a few ways to get in touch! <ul> <li>Purple Squad Security's Twitter: <a href="https://twitter.com/PurpleSquadSec" rel="nofollow" target="_blank">@PurpleSquadSec</a></li> <li>John's Twitter: <a href="https://twitter.com/JohnsNotHere" rel="nofollow" target="_blank">@JohnsNotHere</a></li> <li>John's Mastodon: <a href="https://infosec.exchange/@JohnsNotHere" rel="nofollow" target="_blank">https://infosec.exchange/@JohnsNotHere</a></li> <li>Podcast Website: <a href="https://purplesquadsec.com/" rel="nofollow" target="_blank">purplesquadsec.com</a></li> <li>Podcast Store: <a href="https://purplesquadsec.com/store" rel="nofollow" target="_blank">https://purplesquadsec.com/store</a></li> <li>Sign-Up for our Slack community: <a href="https://signup.purplesquadsec.com/" rel="nofollow" target="_blank">https://signup.purplesquadsec.com</a></li> </ul> Thanks for listening, and as always, I will talk with you all again next time. Find out more at <a href="http://purplesquadsec.com" rel="nofollow" target="_blank">http://purplesquadsec.com</a>

Episode 68 - All About The Diana Initiative with Circuit Swan

Snow stops by during the winter months to share with us the true origin of her hacker handle, stories from some physical penetration testing, a quick note on her Kringlecon talk, and so much more!  A great way to round out the year! Some links of interest:  Snow's Twitter: @_sn0ww  Want to reach out to the show?  There's a few ways to get in touch!  Purple Squad Security's Twitter: @PurpleSquadSec John's Twitter: @JohnsNotHere John's Mastodon: https://infosec.exchange/@JohnsNotHere Podcast Website: purplesquadsec.com Podcast Store: https://purplesquadsec.com/store Sign-Up for our Slack community: https://signup.purplesquadsec.com  Thanks for listening, and as always, I will talk with you all again next time. Find out more at http://purplesquadsec.com

Snow stops by during the winter months to share with us the true origin of her hacker handle, stories from some physical penetration testing, a quick note on her Kringlecon talk, and so much more! A great way to round out the year! Some links of interest: <ul> <li>Snow's Twitter: <a href="https://twitter.com/_sn0ww" rel="nofollow" target="_blank">@_sn0ww</a></li> </ul> Want to reach out to the show?  There's a few ways to get in touch! <ul> <li>Purple Squad Security's Twitter: <a href="https://twitter.com/PurpleSquadSec" rel="nofollow" target="_blank">@PurpleSquadSec</a></li> <li>John's Twitter: <a href="https://twitter.com/JohnsNotHere" rel="nofollow" target="_blank">@JohnsNotHere</a></li> <li>John's Mastodon: <a href="https://infosec.exchange/@JohnsNotHere" rel="nofollow" target="_blank">https://infosec.exchange/@JohnsNotHere</a></li> <li>Podcast Website: <a href="https://purplesquadsec.com/" rel="nofollow" target="_blank">purplesquadsec.com</a></li> <li>Podcast Store: <a href="https://purplesquadsec.com/store" rel="nofollow" target="_blank">https://purplesquadsec.com/store</a></li> <li>Sign-Up for our Slack community: <a href="https://signup.purplesquadsec.com/" rel="nofollow" target="_blank">https://signup.purplesquadsec.com</a></li> </ul> Thanks for listening, and as always, I will talk with you all again next time. Find out more at <a href="http://purplesquadsec.com" rel="nofollow" target="_blank">http://purplesquadsec.com</a>

Episode 67 - A casual conversation with Snow

Adrian Cheek stops by the show this week to have a nice fireside chat with me.  We talk about passive DNS, which Adrian first introduced to me a few years ago, and then move on to threat hunting.  Adrian has a very interesting history and it was a joy to speak with him. Some links of interest:  Adrian's Twitter: @Outkast_TI Farsight Passive DNS - https://www.farsightsecurity.com/solutions/dnsdb/  Want to reach out to the show?  There's a few ways to get in touch!  Purple Squad Security's Twitter: @PurpleSquadSec John's Twitter: @JohnsNotHere John's Mastodon: https://infosec.exchange/@JohnsNotHere Podcast Website: purplesquadsec.com Podcast Store: https://purplesquadsec.com/store Sign-Up for our Slack community: https://signup.purplesquadsec.com  Thanks for listening, and as always, I will talk with you all again next time. Find out more at http://purplesquadsec.com

Adrian Cheek stops by the show this week to have a nice fireside chat with me. We talk about passive DNS, which Adrian first introduced to me a few years ago, and then move on to threat hunting. Adrian has a very interesting history and it was a joy to speak with him. Some links of interest: <ul> <li>Adrian's Twitter: <a href="https://twitter.com/Outkast_TI" rel="nofollow" target="_blank">@Outkast_TI</a></li> <li>Farsight Passive DNS - <a href="https://www.farsightsecurity.com/solutions/dnsdb/" rel="nofollow" target="_blank">https://www.farsightsecurity.com/solutions/dnsdb/</a></li> </ul> Want to reach out to the show?  There's a few ways to get in touch! <ul> <li>Purple Squad Security's Twitter: <a href="https://twitter.com/PurpleSquadSec" rel="nofollow" target="_blank">@PurpleSquadSec</a></li> <li>John's Twitter: <a href="https://twitter.com/JohnsNotHere" rel="nofollow" target="_blank">@JohnsNotHere</a></li> <li>John's Mastodon: <a href="https://infosec.exchange/@JohnsNotHere" rel="nofollow" target="_blank">https://infosec.exchange/@JohnsNotHere</a></li> <li>Podcast Website: <a href="https://purplesquadsec.com/" rel="nofollow" target="_blank">purplesquadsec.com</a></li> <li>Podcast Store: <a href="https://purplesquadsec.com/store" rel="nofollow" target="_blank">https://purplesquadsec.com/store</a></li> <li>Sign-Up for our Slack community: <a href="https://signup.purplesquadsec.com/" rel="nofollow" target="_blank">https://signup.purplesquadsec.com</a></li> </ul> Thanks for listening, and as always, I will talk with you all again next time. Find out more at <a href="http://purplesquadsec.com" rel="nofollow" target="_blank">http://purplesquadsec.com</a>

Episode 66 - Fireside Chat with Adrian Cheek

I'm trying a slightly different format for the next few episodes, and I'd appreciate any feedback you may have.   In this episode I sit down with The Gibson, mayor of hackers.town, to talk about a variety of things from the Fediverse, working with the under-serviced SMB market, old school technologies, and the Infosec community as a whole.  We're all over the place, but it's a good thing.  Just a nice casual conversation talking about things that interest us. Some links of interest:  Gibson's Mastodon: @TheGibson@hackers.town Hacker's Town: https://hackers.town Gibson's Twitter: @gibsonmainframe BlackFire Security: https://blackfiresec.com/  Want to reach out to the show?  There's a few ways to get in touch!  Purple Squad Security's Twitter: @PurpleSquadSec John's Twitter: @JohnsNotHere John's Mastodon: https://infosec.exchange/@JohnsNotHere Podcast Website: purplesquadsec.com Podcast Store: https://purplesquadsec.com/store Sign-Up for our Slack community: https://signup.purplesquadsec.com  Thanks for listening, and as always, I will talk with you all again next time. Find out more at http://purplesquadsec.com

I'm trying a slightly different format for the next few episodes, and I'd appreciate any feedback you may have. In this episode I sit down with The Gibson, mayor of hackers.town, to talk about a variety of things from the Fediverse, working with the under-serviced SMB market, old school technologies, and the Infosec community as a whole. We're all over the place, but it's a good thing. Just a nice casual conversation talking about things that interest us. Some links of interest: <ul> <li>Gibson's Mastodon: @TheGibson@hackers.town</li> <li>Hacker's Town: https://hackers.town</li> <li>Gibson's Twitter: <a href="https://twitter.com/gibsonmainframe" rel="nofollow" target="_blank">@gibsonmainframe</a></li> <li>BlackFire Security: <a href="https://blackfiresec.com/" rel="nofollow" target="_blank">https://blackfiresec.com/</a></li> </ul> Want to reach out to the show?  There's a few ways to get in touch! <ul> <li>Purple Squad Security's Twitter: <a href="https://twitter.com/PurpleSquadSec" rel="nofollow" target="_blank">@PurpleSquadSec</a></li> <li>John's Twitter: <a href="https://twitter.com/JohnsNotHere" rel="nofollow" target="_blank">@JohnsNotHere</a></li> <li>John's Mastodon: <a href="https://infosec.exchange/@JohnsNotHere" rel="nofollow" target="_blank">https://infosec.exchange/@JohnsNotHere</a></li> <li>Podcast Website: <a href="https://purplesquadsec.com/" rel="nofollow" target="_blank">purplesquadsec.com</a></li> <li>Podcast Store: <a href="https://purplesquadsec.com/store" rel="nofollow" target="_blank">https://purplesquadsec.com/store</a></li> <li>Sign-Up for our Slack community: <a href="https://signup.purplesquadsec.com/" rel="nofollow" target="_blank">https://signup.purplesquadsec.com</a></li> </ul> Thanks for listening, and as always, I will talk with you all again next time. Find out more at <a href="http://purplesquadsec.com" rel="nofollow" target="_blank">http://purplesquadsec.com</a>

Episode 65 - Fireside Chat with The Gibson

Tanya Janca

I'm trying a slightly different format for the next few episodes, and I'd appreciate any feedback you may have.   In this episode I sit down with the amazing Tanya Janca for a fireside chat about her new company, Security Sidekick.  They seem to have some pretty ambitious goals, and I couldn't think of anyone better to help make those a reality. Some links of interest: For Tanya:  Tanya's Twitter: https://twitter.com/shehackspurple Tanya's Dev.to Profile: https://dev.to/shehackspurple Tanya's Blog: https://medium.com/@shehackspurple Tanya's YouTube Profile: https://www.youtube.com/shehackspurple Tanya's Twitch Channel: https://www.twitch.tv/shehackspurple Tanya's LinkedIn Profile: https://www.linkedin.com/in/tanya-janca  For Security Sidekick:  Website: https://securitysidekick.dev Twitter: https://twitter.com/SecSidekick  YouTube Channel: https://www.youtube.com/channel/UC3KyuI83jt0l14q8xyffC2A  Want to reach out to the show?  There's a few ways to get in touch!  Purple Squad Security's Twitter: @PurpleSquadSec John's Twitter: @JohnsNotHere John's Mastodon: https://infosec.exchange/@JohnsNotHere Podcast Website: purplesquadsec.com Podcast Store: https://purplesquadsec.com/store Sign-Up for our Slack community: https://signup.purplesquadsec.com  Thanks for listening, and as always, I will talk with you all again next time. Find out more at http://purplesquadsec.com

I'm trying a slightly different format for the next few episodes, and I'd appreciate any feedback you may have. In this episode I sit down with the amazing Tanya Janca for a fireside chat about her new company, Security Sidekick. They seem to have some pretty ambitious goals, and I couldn't think of anyone better to help make those a reality. Some links of interest: <h3>For Tanya:</h3> <ul> <li>Tanya's Twitter: <a href="https://twitter.com/shehackspurple" rel="nofollow" target="_blank">https://twitter.com/shehackspurple</a></li> <li>Tanya's <a href="http://Dev.to" rel="nofollow" target="_blank">Dev.to</a> Profile: <a href="https://dev.to/shehackspurple" rel="nofollow" target="_blank">https://dev.to/shehackspurple</a></li> <li>Tanya's Blog: <a href="https://medium.com/@shehackspurple" rel="nofollow" target="_blank">https://medium.com/@shehackspurple</a></li> <li>Tanya's YouTube Profile: <a href="https://www.youtube.com/shehackspurple" rel="nofollow" target="_blank">https://www.youtube.com/shehackspurple</a></li> <li>Tanya's Twitch Channel: <a href="https://www.twitch.tv/shehackspurple" rel="nofollow" target="_blank">https://www.twitch.tv/shehackspurple</a></li> <li>Tanya's LinkedIn Profile: <a href="https://www.linkedin.com/in/tanya-janca" rel="nofollow" target="_blank">https://www.linkedin.com/in/tanya-janca</a></li> </ul> <h3>For Security Sidekick:</h3> <ul> <li>Website: https://securitysidekick.dev</li> <li>Twitter: <a href="https://twitter.com/SecSidekick" rel="nofollow" target="_blank">https://twitter.com/SecSidekick</a> </li> <li>YouTube Channel: <a href="https://www.youtube.com/channel/UC3KyuI83jt0l14q8xyffC2A" rel="nofollow" target="_blank">https://www.youtube.com/channel/UC3KyuI83jt0l14q8xyffC2A</a></li> </ul> Want to reach out to the show?  There's a few ways to get in touch! <ul> <li>Purple Squad Security's Twitter: <a href="https://twitter.com/PurpleSquadSec" rel="nofollow" target="_blank">@PurpleSquadSec</a></li> <li>John's Twitter: <a href="https://twitter.com/JohnsNotHere" rel="nofollow" target="_blank">@JohnsNotHere</a></li> <li>John's Mastodon: <a href="https://infosec.exchange/@JohnsNotHere" rel="nofollow" target="_blank">https://infosec.exchange/@JohnsNotHere</a></li> <li>Podcast Website: <a href="https://purplesquadsec.com/" rel="nofollow" target="_blank">purplesquadsec.com</a></li> <li>Podcast Store: <a href="https://purplesquadsec.com/store" rel="nofollow" target="_blank">https://purplesquadsec.com/store</a></li> <li>Sign-Up for our Slack community: <a href="https://signup.purplesquadsec.com/" rel="nofollow" target="_blank">https://signup.purplesquadsec.com</a></li> </ul> Thanks for listening, and as always, I will talk with you all again next time. Find out more at <a href="http://purplesquadsec.com" rel="nofollow" target="_blank">http://purplesquadsec.com</a>

Episode 64 - Fireside Chat with Tanya Janca

John Strand

Oh what I treat I have for you today!  John Strand, former SANS instructor, long time co-host on Enterprise Security Weekly, Founder of Black Hills Information Security, and a whole lot more has taken time out of his busy schedule to stop by and talk about Backdoors &amp; Breaches, the new IR card game from BHIS.  Naturally we talk about more than just the game, but it was all as amazing as I had hoped.  I trust you will enjoy listening to this one about as much as I enjoyed recording it. Some links of interest:  Backdoors &amp; Breaches Site - http://backdoorsandbreaches.com/ John's Email - john 'at' blackhillsinfosec.com John's Twitter - @strandjs BHIS Website - https://www.blackhillsinfosec.com Events where BHIS will be - https://www.blackhillsinfosec.com/events/  Want to reach out to the show?  There's a few ways to get in touch!  Purple Squad Security's Twitter: @PurpleSquadSec John's Twitter: @JohnsNotHere John's Mastodon: https://infosec.exchange/@JohnsNotHere Podcast Website: purplesquadsec.com Podcast Store: https://purplesquadsec.com/store Sign-Up for our Slack community: https://signup.purplesquadsec.com  Thanks for listening, and as always, I will talk with you all again next time. Find out more at http://purplesquadsec.com

Oh what I treat I have for you today! John Strand, former SANS instructor, long time co-host on Enterprise Security Weekly, Founder of Black Hills Information Security, and a whole lot more has taken time out of his busy schedule to stop by and talk about Backdoors &amp; Breaches, the new IR card game from BHIS. Naturally we talk about more than just the game, but it was all as amazing as I had hoped. I trust you will enjoy listening to this one about as much as I enjoyed recording it. Some links of interest: <ul> <li>Backdoors &amp; Breaches Site - <a href="http://backdoorsandbreaches.com/" rel="nofollow" target="_blank">http://backdoorsandbreaches.com/</a></li> <li>John's Email - john 'at' <a href="http://blackhillsinfosec.com" rel="nofollow" target="_blank">blackhillsinfosec.com</a></li> <li>John's Twitter - <a href="https://twitter.com/strandjs" rel="nofollow" target="_blank">@strandjs</a></li> <li>BHIS Website - <a href="https://www.blackhillsinfosec.com" rel="nofollow" target="_blank">https://www.blackhillsinfosec.com</a></li> <li>Events where BHIS will be - <a href="https://www.blackhillsinfosec.com/events/" rel="nofollow" target="_blank">https://www.blackhillsinfosec.com/events/</a></li> </ul> Want to reach out to the show?  There's a few ways to get in touch! <ul> <li>Purple Squad Security's Twitter: <a href="https://twitter.com/PurpleSquadSec" rel="nofollow" target="_blank">@PurpleSquadSec</a></li> <li>John's Twitter: <a href="https://twitter.com/JohnsNotHere" rel="nofollow" target="_blank">@JohnsNotHere</a></li> <li>John's Mastodon: <a href="https://infosec.exchange/@JohnsNotHere" rel="nofollow" target="_blank">https://infosec.exchange/@JohnsNotHere</a></li> <li>Podcast Website: <a href="https://purplesquadsec.com/" rel="nofollow" target="_blank">purplesquadsec.com</a></li> <li>Podcast Store: <a href="https://purplesquadsec.com/store" rel="nofollow" target="_blank">https://purplesquadsec.com/store</a></li> <li>Sign-Up for our Slack community: <a href="https://signup.purplesquadsec.com/" rel="nofollow" target="_blank">https://signup.purplesquadsec.com</a></li> </ul> Thanks for listening, and as always, I will talk with you all again next time. Find out more at <a href="http://purplesquadsec.com" rel="nofollow" target="_blank">http://purplesquadsec.com</a>

Episode 63 - Backdoors & Breaches with John Strand

Information Security, InfoSec, CyberSec, Cyber, Security, whatever you call it, we talk about it! From mobiles and desktops to data centers and the cloud, Purple Squad Security is here to help and give back to our community of information security professionals.  We cover security topics for the red team, blue team, purple team, whatever team!  We are a community of professionals, and this is one man's attempt to give back.  CISSP, CISM, CEH credits can be obtained here!  Also happy to provide info for OSCP, OSCE, and other Offensive Security certified professionals.

I love John information and the guests he brings on are always entertaining and very informative. They bring unique perspectives to different areas of security. He is very passionate about keeping security positive.

Amazing approach to security

I love this podcast. John is very knowledgeable, which makes him a great facilitator of interesting conversations with his guests. I had a hard time finding a &#34;middle of the road&#34; InfoSec podcast, where it&#39;s not too basic or over my head, and this is the best one I&#39;ve found so far. I can always rely on this podcast being current, useful, and relevant.

Great Info!

Purple Squad Security

Over the past few months, John has been working on obtaining his OSCP certification.  Recently he attempted and successfully passed the exam!  In this episode he goes over his journey, what he learned as well as a few tips to help those attempting this rather difficult certification. Some links of interest:   Penetration Testing - A Hands On Introduction to Hacking - https://www.amazon.com/Penetration-Testing-Hands-Introduction-Hacking/dp/1593275641   Web Application Hacker's Handbook 2nd Edition - https://www.amazon.com/Web-Application-Hackers-Handbook-Exploiting/dp/1118026470   OSCP Prep:  https://www.abatchy.com/2017/03/how-to-prepare-for-pwkoscp-noob https://github.com/burntmybagel/OSCP-Prep http://niiconsulting.com/checkmate/2017/06/a-detail-guide-on-oscp-preparation-from-newbie-to-oscp/ https://medium.com/@andr3w_hilton/oscp-training-vms-hosted-on-vulnhub-com-22fa061bf6a1 https://tulpa-security.com/2016/09/19/prep-guide-for-offsecs-pwk/    VulnHub - https://www.vulnhub.com/   HackTheBox - https://www.hackthebox.eu/   Infosec Mastodon - https://infosec.exchange/auth/sign_up   Want to reach out to the show?  There's a few ways to get in touch!   Purple Squad Security's Twitter: @PurpleSquadSec   John's Twitter: @JohnsNotHere   John's Mastodon: https://infosec.exchange/@JohnsNotHere   Podcast Website: purplesquadsec.com   Patreon - https://www.patreon.com/purplesquadsec   Sign-Up for our Slack community: https://signup.purplesquadsec.com   Thanks for listening, and as always, I will talk with you all again next time. Find out more at http://purplesquadsec.com

Over the past few months, John has been working on obtaining his OSCP certification.  Recently he attempted and successfully passed the exam!  In this episode he goes over his journey, what he learned as well as a few tips to help those attempting this rather difficult certification. Some links of interest: <ul> <li> Penetration Testing - A Hands On Introduction to Hacking - <a href="https://www.amazon.com/Penetration-Testing-Hands-Introduction-Hacking/dp/1593275641" rel="nofollow" target="_blank">https://www.amazon.com/Penetration-Testing-Hands-Introduction-Hacking/dp/1593275641</a> </li> <li> Web Application Hacker's Handbook 2nd Edition - <a href="https://www.amazon.com/Web-Application-Hackers-Handbook-Exploiting/dp/1118026470" rel="nofollow" target="_blank">https://www.amazon.com/Web-Application-Hackers-Handbook-Exploiting/dp/1118026470</a> </li> <li> OSCP Prep: <ul> <li><a href="https://www.abatchy.com/2017/03/how-to-prepare-for-pwkoscp-noob" rel="nofollow" target="_blank">https://www.abatchy.com/2017/03/how-to-prepare-for-pwkoscp-noob</a></li> <li><a href="https://github.com/burntmybagel/OSCP-Prep" rel="nofollow" target="_blank">https://github.com/burntmybagel/OSCP-Prep</a> <a href="http://niiconsulting.com/checkmate/2017/06/a-detail-guide-on-oscp-preparation-from-newbie-to-oscp/" rel="nofollow" target="_blank">http://niiconsulting.com/checkmate/2017/06/a-detail-guide-on-oscp-preparation-from-newbie-to-oscp/</a></li> <li><a href="https://medium.com/@andr3w_hilton/oscp-training-vms-hosted-on-vulnhub-com-22fa061bf6a1" rel="nofollow" target="_blank">https://medium.com/@andr3w_hilton/oscp-training-vms-hosted-on-vulnhub-com-22fa061bf6a1</a></li> <li><a href="https://tulpa-security.com/2016/09/19/prep-guide-for-offsecs-pwk/" rel="nofollow" target="_blank">https://tulpa-security.com/2016/09/19/prep-guide-for-offsecs-pwk/</a></li> </ul> </li> <li> VulnHub - <a href="https://www.vulnhub.com/" rel="nofollow" target="_blank">https://www.vulnhub.com/</a> </li> <li> HackTheBox - <a href="https://www.hackthebox.eu/" rel="nofollow" target="_blank">https://www.hackthebox.eu/</a> </li> <li> Infosec Mastodon - <a href="https://infosec.exchange/auth/sign_up" rel="nofollow" target="_blank">https://infosec.exchange/auth/sign_up</a> </li> </ul> Want to reach out to the show?  There's a few ways to get in touch! <ul> <li> Purple Squad Security's Twitter: <a href="https://twitter.com/PurpleSquadSec" rel="nofollow" target="_blank">@PurpleSquadSec</a> </li> <li> John's Twitter: <a href="https://twitter.com/JohnsNotHere" rel="nofollow" target="_blank">@JohnsNotHere</a> </li> <li> John's Mastodon: <a href="https://infosec.exchange/@JohnsNotHere" rel="nofollow" target="_blank">https://infosec.exchange/@JohnsNotHere</a> </li> <li> Podcast Website: <a href="https://purplesquadsec.com/" rel="nofollow" target="_blank">purplesquadsec.com</a> </li> <li> Patreon - <a href="https://www.patreon.com/purplesquadsec" rel="nofollow" target="_blank">https://www.patreon.com/purplesquadsec</a> </li> <li> Sign-Up for our Slack community: <a href="https://signup.purplesquadsec.com/" rel="nofollow" target="_blank">https://signup.purplesquadsec.com</a> </li> </ul> Thanks for listening, and as always, I will talk with you all again next time. Find out more at <a href="http://purplesquadsec.com" rel="nofollow" target="_blank">http://purplesquadsec.com</a>

Episode 39 – John’s OSCP Journey

Michael Bazzell

Nothing helps out security more than information.  Heck, it's the first part of our professions name!  In Infosec, knowledge is key and sometimes we need to roll up our sleeves to get the information we need from various open source outlets.  I'm fortunate to have as a guest on this episode the man who literally wrote the book on OSINT techniques, Michael Bazzell.  We discuss OSINT techniques as well as his recently updated book.  Have yourself a listen and hear the advice Michael has for starting your own OSINT adventures. Some links of interest:   https://inteltechniques.com/   Open Source Intelligence Techniques, 6th Edition   Buscador - OSINT OS   https://michaelbazzell.com/forum.html   Want to reach out to the show?  There's a few ways to get in touch!   Show's Twitter: @PurpleSquadSec   John's Twitter: @JohnsNotHere   Podcast Website: purplesquadsec.com   Sign-Up for our Slack community: https://signup.purplesquadsec.com   John's Peerlyst Profile: https://www.peerlyst.com/users/john-svazic   Thanks for listening, and I will talk with you all again next time. Find out more at http://purplesquadsec.com

Nothing helps out security more than information.  Heck, it's the first part of our professions name!  In Infosec, knowledge is key and sometimes we need to roll up our sleeves to get the information we need from various open source outlets.  I'm fortunate to have as a guest on this episode the man who literally wrote the book on OSINT techniques, Michael Bazzell.  We discuss OSINT techniques as well as his recently updated book.  Have yourself a listen and hear the advice Michael has for starting your own OSINT adventures. Some links of interest: <ul> <li> <a href="https://inteltechniques.com/" rel="nofollow" target="_blank">https://inteltechniques.com/</a> </li> <li> <a href="https://inteltechniques.com/book1.html" rel="nofollow" target="_blank">Open Source Intelligence Techniques, 6th Edition</a> </li> <li> <a href="https://inteltechniques.com/buscador/index.html" rel="nofollow" target="_blank">Buscador - OSINT OS</a> </li> <li> <a href="https://michaelbazzell.com/forum.html" rel="nofollow" target="_blank">https://michaelbazzell.com/forum.html</a> </li> </ul> Want to reach out to the show?  There's a few ways to get in touch! <ul> <li> Show's Twitter: <a href="https://twitter.com/PurpleSquadSec" rel="nofollow" target="_blank">@PurpleSquadSec</a> </li> <li> John's Twitter: <a href="https://twitter.com/JohnsNotHere" rel="nofollow" target="_blank">@JohnsNotHere</a> </li> <li> Podcast Website: <a href="https://purplesquadsec.com/" rel="nofollow" target="_blank">purplesquadsec.com</a> </li> <li> Sign-Up for our Slack community: <a href="https://signup.purplesquadsec.com/" rel="nofollow" target="_blank">https://signup.purplesquadsec.com</a> </li> <li> John's Peerlyst Profile: <a href="https://www.peerlyst.com/users/john-svazic" rel="nofollow" target="_blank">https://www.peerlyst.com/users/john-svazic</a> </li> </ul> Thanks for listening, and I will talk with you all again next time. Find out more at <a href="http://purplesquadsec.com" rel="nofollow" target="_blank">http://purplesquadsec.com</a>

Episode 22 – Open Source Intelligence Techniques with Michael Bazzell

Jek Hyde

Not all penetration testing is done in a virtual setting or even through a phone call.  Sometimes you need to get down and dirty and actually interact with people.  In this very special episode I sit down and speak with the great Jek Hyde about physical penetration testing and everything that it entitles.  It's a fascinating talk for sure, and one you don't want to miss. Some links of interest:   Jek's Motherboard Article   IntelTechniques.com   Open Source Intelligence Techniques (Book)   Google Hacking Database (Google Dorks)   redteamtools.com   @HydeNS33k   Want to reach out to the show?  There's a few ways to get in touch!   Show's Twitter: @PurpleSquadSec   John's Twitter: @JohnsNotHere   Podcast Website: purplesquadsec.com   Sign-Up for our Slack community: https://signup.purplesquadsec.com   John's Peerlyst Profile: https://www.peerlyst.com/users/john-svazic   Thanks for listening, and I will talk with you all again next time. Find out more at http://purplesquadsec.com

Not all penetration testing is done in a virtual setting or even through a phone call.  Sometimes you need to get down and dirty and actually interact with people.  In this very special episode I sit down and speak with the great Jek Hyde about physical penetration testing and everything that it entitles.  It's a fascinating talk for sure, and one you don't want to miss. Some links of interest: <ul> <li> <a href="https://motherboard.vice.com/en_us/article/qv34zb/how-i-socially-engineer-myself-into-high-security-facilities" rel="nofollow" target="_blank">Jek's Motherboard Article</a> </li> <li> <a href="https://inteltechniques.com/" rel="nofollow" target="_blank">IntelTechniques.com</a> </li> <li> <a href="https://inteltechniques.com/book1.html" rel="nofollow" target="_blank">Open Source Intelligence Techniques (Book)</a> </li> <li> <a href="https://www.exploit-db.com/google-hacking-database/" rel="nofollow" target="_blank">Google Hacking Database (Google Dorks)</a> </li> <li> <a href="https://redteamtools.com/" rel="nofollow" target="_blank">redteamtools.com</a> </li> <li> <a href="https://twitter.com/HydeNS33k" rel="nofollow" target="_blank">@HydeNS33k</a> </li> </ul> Want to reach out to the show?  There's a few ways to get in touch! <ul> <li> Show's Twitter: <a href="https://twitter.com/PurpleSquadSec" rel="nofollow" target="_blank">@PurpleSquadSec</a> </li> <li> John's Twitter: <a href="https://twitter.com/JohnsNotHere" rel="nofollow" target="_blank">@JohnsNotHere</a> </li> <li> Podcast Website: <a href="https://purplesquadsec.com/" rel="nofollow" target="_blank">purplesquadsec.com</a> </li> <li> Sign-Up for our Slack community: <a href="https://signup.purplesquadsec.com/" rel="nofollow" target="_blank">https://signup.purplesquadsec.com</a> </li> <li> John's Peerlyst Profile: <a href="https://www.peerlyst.com/users/john-svazic" rel="nofollow" target="_blank">https://www.peerlyst.com/users/john-svazic</a> </li> </ul> Thanks for listening, and I will talk with you all again next time. Find out more at <a href="http://purplesquadsec.com" rel="nofollow" target="_blank">http://purplesquadsec.com</a>

Episode 20 – Physical Penetration Testing with Jek Hyde

There were more than a few of you who were anxiously awaiting his return, and he's back!  Tinker joins me once again to share some stories from his adventures in hackerland.  In addition, I have given Tinker free reign to speak as he chooses, and naturally I participate as well.  Fair warning, this is not safe for work or sensitive ears.  I do ask that you try not to be offended, as his stories and reflections on those events makes for one excellent episode. Some links of interest:   Tinker's Fediverse Account: @tinker@infosec.exchange   Tinker's Twitter Account: @TinkerSec   Tinker's Blog: https://tinker.sh   SecLists: https://github.com/danielmiessler/SecLists   Cyber City Conference: https://www.cybercityconf.io/   Cyber City Conference CFP: https://www.papercall.io/cybercityconf   We have a new store!  Come check out the various Purple Squad Security goods you can buy to share your following and help the show.  From stickers to mugs, we have a few items up for sale: https://purplesquadsec.com/store Want to reach out to the show?  There's a few ways to get in touch!   Purple Squad Security's Twitter: @PurpleSquadSec   John's Twitter: @JohnsNotHere   John's Mastodon: https://infosec.exchange/@JohnsNotHere   Podcast Website: purplesquadsec.com   Patreon - https://www.patreon.com/purplesquadsec   Sign-Up for our Slack community: https://signup.purplesquadsec.com   Thanks for listening, and as always, I will talk with you all again next time. Find out more at http://purplesquadsec.com

There were more than a few of you who were anxiously awaiting his return, and he's back!  Tinker joins me once again to share some stories from his adventures in hackerland.  In addition, I have given Tinker free reign to speak as he chooses, and naturally I participate as well.  Fair warning, this is not safe for work or sensitive ears.  I do ask that you try not to be offended, as his stories and reflections on those events makes for one excellent episode. Some links of interest: <ul> <li> Tinker's Fediverse Account: @tinker@infosec.exchange </li> <li> Tinker's Twitter Account: <a href="https://twitter.com/TinkerSec" rel="nofollow" target="_blank">@TinkerSec</a> </li> <li> Tinker's Blog: <a href="https://www.tinker.sh/" rel="nofollow" target="_blank">https://tinker.sh</a> </li> <li> SecLists: <a href="https://github.com/danielmiessler/SecLists" rel="nofollow" target="_blank">https://github.com/danielmiessler/SecLists</a> </li> <li> Cyber City Conference: <a href="https://www.cybercityconf.io/" rel="nofollow" target="_blank">https://www.cybercityconf.io/</a> </li> <li> Cyber City Conference CFP: <a href="https://www.papercall.io/cybercityconf" rel="nofollow" target="_blank">https://www.papercall.io/cybercityconf</a> </li> </ul> We have a new store!  Come check out the various Purple Squad Security goods you can buy to share your following and help the show.  From stickers to mugs, we have a few items up for sale: <a href="https://purplesquadsec.com/store" rel="nofollow" target="_blank">https://purplesquadsec.com/store</a> Want to reach out to the show?  There's a few ways to get in touch! <ul> <li> Purple Squad Security's Twitter: <a href="https://twitter.com/PurpleSquadSec" rel="nofollow" target="_blank">@PurpleSquadSec</a> </li> <li> John's Twitter: <a href="https://twitter.com/JohnsNotHere" rel="nofollow" target="_blank">@JohnsNotHere</a> </li> <li> John's Mastodon: <a href="https://infosec.exchange/@JohnsNotHere" rel="nofollow" target="_blank">https://infosec.exchange/@JohnsNotHere</a> </li> <li> Podcast Website: <a href="https://purplesquadsec.com/" rel="nofollow" target="_blank">purplesquadsec.com</a> </li> <li> Patreon - <a href="https://www.patreon.com/purplesquadsec" rel="nofollow" target="_blank">https://www.patreon.com/purplesquadsec</a> </li> <li> Sign-Up for our Slack community: <a href="https://signup.purplesquadsec.com/" rel="nofollow" target="_blank">https://signup.purplesquadsec.com</a> </li> </ul> Thanks for listening, and as always, I will talk with you all again next time. Find out more at <a href="http://purplesquadsec.com" rel="nofollow" target="_blank">http://purplesquadsec.com</a>

Episode 57 – Tinker After Dark – Tinker Tales by the Fire

Mark Kikta

Red Teams.  For some, it's the "frenemy".  For others, it's the greener grass on the other side of the defence wall.  In this episode I spend some time speaking with security consultant Mark Kikta about Red Teaming.  Mark has been a Red Teamer for a while and has a lot of experience to share.  We talk about a number of different things, share some laughs and try to shed some light on an often misunderstood group. Mark has also graciously offered to hang out in our Slack channel!  Just message @mark to get in touch with him if you have questions or just want to say "hey". Some links of interest:   CircleCityCon - Seeing Purple Hybrid Security Teams for the Enterprise   Time Based Security   Slack Sign-Up Link: https://signup.purplesquadsec.com   Want to reach out to the show?  There's a few ways to get in touch!   Show Twitter: @PurpleSquadSec   John's Twitter: @JohnsNotHere   Website: purplesquadsec.com   Slack Sign-Up Link: https://signup.purplesquadsec.com   John's Peerlyst Profile: https://www.peerlyst.com/users/john-svazic   Thanks for listening, and I will talk with you again next time! Find out more at http://purplesquadsec.com

Red Teams.  For some, it's the "frenemy".  For others, it's the greener grass on the other side of the defence wall.  In this episode I spend some time speaking with security consultant Mark Kikta about Red Teaming.  Mark has been a Red Teamer for a while and has a lot of experience to share.  We talk about a number of different things, share some laughs and try to shed some light on an often misunderstood group. Mark has also graciously offered to hang out in our Slack channel!  Just message @mark to get in touch with him if you have questions or just want to say "hey". Some links of interest: <ul> <li> <a href="https://www.youtube.com/watch?v=GZ-1pwdrN8o" rel="nofollow" target="_blank">CircleCityCon - Seeing Purple Hybrid Security Teams for the Enterprise</a> </li> <li> <a href="https://www.amazon.com/Time-Based-Security-Winn-Schwartau/dp/0962870048" rel="nofollow" target="_blank">Time Based Security</a> </li> <li> Slack Sign-Up Link: <a href="https://signup.purplesquadsec.com/" rel="nofollow" target="_blank">https://signup.purplesquadsec.com</a> </li> </ul> Want to reach out to the show?  There's a few ways to get in touch! <ul> <li> Show Twitter: <a href="https://twitter.com/PurpleSquadSec" rel="nofollow" target="_blank">@PurpleSquadSec</a> </li> <li> John's Twitter: <a href="https://twitter.com/JohnsNotHere" rel="nofollow" target="_blank">@JohnsNotHere</a> </li> <li> Website: <a href="https://purplesquadsec.com/" rel="nofollow" target="_blank">purplesquadsec.com</a> </li> <li> Slack Sign-Up Link: <a href="https://signup.purplesquadsec.com/" rel="nofollow" target="_blank">https://signup.purplesquadsec.com</a> </li> <li> John's Peerlyst Profile: <a href="https://www.peerlyst.com/users/john-svazic" rel="nofollow" target="_blank">https://www.peerlyst.com/users/john-svazic</a> </li> </ul> Thanks for listening, and I will talk with you again next time! Find out more at <a href="http://purplesquadsec.com" rel="nofollow" target="_blank">http://purplesquadsec.com</a>

Episode 004 – A Day In The Life Of A Red Teamer With Mark Kikta

Digital Forensics and Incident Response - DFIR.  The mere mention of the acronym brings forth memories of CSI, plastic bags and agents in suits coming to collect all manner of evidence.  In this episode I speak with Jonathon Poling, a DFIR expert who has graciously agreed to talk DFIR with me!  Another great listen, Jonathon has a lot of great experience in the field and much to share.  Have yourself a listen! Some links of interest:   Jonathon's Blog: http://ponderthebits.com/   Jonathon's Twitter: @JPoForenso   Slack Sign-Up Link: https://signup.purplesquadsec.com   Want to reach out to the show?  There's a few ways to get in touch!   Show Twitter: @PurpleSquadSec   John's Twitter: @JohnsNotHere   Website: purplesquadsec.com   Slack Sign-Up Link: https://signup.purplesquadsec.com   John's Peerlyst Profile: https://www.peerlyst.com/users/john-svazic   Thanks for listening, and I will talk with you again next time! Find out more at http://purplesquadsec.com

Digital Forensics and Incident Response - DFIR.  The mere mention of the acronym brings forth memories of CSI, plastic bags and agents in suits coming to collect all manner of evidence.  In this episode I speak with Jonathon Poling, a DFIR expert who has graciously agreed to talk DFIR with me!  Another great listen, Jonathon has a lot of great experience in the field and much to share.  Have yourself a listen! Some links of interest: <ul> <li> Jonathon's Blog: <a href="http://ponderthebits.com/" rel="nofollow" target="_blank">http://ponderthebits.com/</a> </li> <li> Jonathon's Twitter: <a href="https://twitter.com/JPoForenso" rel="nofollow" target="_blank">@JPoForenso</a> </li> <li> Slack Sign-Up Link: <a href="https://signup.purplesquadsec.com/" rel="nofollow" target="_blank">https://signup.purplesquadsec.com</a> </li> </ul> Want to reach out to the show?  There's a few ways to get in touch! <ul> <li> Show Twitter: <a href="https://twitter.com/PurpleSquadSec" rel="nofollow" target="_blank">@PurpleSquadSec</a> </li> <li> John's Twitter: <a href="https://twitter.com/JohnsNotHere" rel="nofollow" target="_blank">@JohnsNotHere</a> </li> <li> Website: <a href="https://purplesquadsec.com/" rel="nofollow" target="_blank">purplesquadsec.com</a> </li> <li> Slack Sign-Up Link: <a href="https://signup.purplesquadsec.com/" rel="nofollow" target="_blank">https://signup.purplesquadsec.com</a> </li> <li> John's Peerlyst Profile: <a href="https://www.peerlyst.com/users/john-svazic" rel="nofollow" target="_blank">https://www.peerlyst.com/users/john-svazic</a> </li> </ul> Thanks for listening, and I will talk with you again next time! Find out more at <a href="http://purplesquadsec.com" rel="nofollow" target="_blank">http://purplesquadsec.com</a>

Episode 005 – #DFIR to Someone Else

Curtis Brazzell

What is a red team?  How does it differ from a penetration tester's day-to-day?  How do red teams stay sharp?  How do they stay motivated?  These are a few of the questions I seek to have answered by Curtis Brazzell, a managing Security Consultant at Pondurance.  It's a great interview and sheds light on the difference between red teaming and penetration testing. Some links of interest:   Curtis' Twitter: https://twitter.com/CurtBraz   Curtis' LinkedIn Profile: https://www.linkedin.com/in/curtisbrazzell/   Pondurance Website - https://www.pondurance.com/   We have a new store!  Come check out the various Purple Squad Security goods you can buy to share your following and help the show.  From stickers to mugs, we have a few items up for sale: https://purplesquadsec.com/store Want to reach out to the show?  There's a few ways to get in touch!   Purple Squad Security's Twitter: @PurpleSquadSec   John's Twitter: @JohnsNotHere   John's Mastodon: https://infosec.exchange/@JohnsNotHere   Podcast Website: purplesquadsec.com   Patreon - https://www.patreon.com/purplesquadsec   Sign-Up for our Slack community: https://signup.purplesquadsec.com   Thanks for listening, and as always, I will talk with you all again next time. Find out more at http://purplesquadsec.com

What is a red team?  How does it differ from a penetration tester's day-to-day?  How do red teams stay sharp?  How do they stay motivated?  These are a few of the questions I seek to have answered by Curtis Brazzell, a managing Security Consultant at Pondurance.  It's a great interview and sheds light on the difference between red teaming and penetration testing. Some links of interest: <ul> <li> Curtis' Twitter: <a href="https://twitter.com/CurtBraz" rel="nofollow" target="_blank">https://twitter.com/CurtBraz</a> </li> <li> Curtis' LinkedIn Profile: <a href="https://www.linkedin.com/in/curtisbrazzell/" rel="nofollow" target="_blank">https://www.linkedin.com/in/curtisbrazzell/</a> </li> <li> Pondurance Website - <a href="https://www.pondurance.com/" rel="nofollow" target="_blank">https://www.pondurance.com/</a> </li> </ul> We have a new store!  Come check out the various Purple Squad Security goods you can buy to share your following and help the show.  From stickers to mugs, we have a few items up for sale: <a href="https://purplesquadsec.com/store" rel="nofollow" target="_blank">https://purplesquadsec.com/store</a> Want to reach out to the show?  There's a few ways to get in touch! <ul> <li> Purple Squad Security's Twitter: <a href="https://twitter.com/PurpleSquadSec" rel="nofollow" target="_blank">@PurpleSquadSec</a> </li> <li> John's Twitter: <a href="https://twitter.com/JohnsNotHere" rel="nofollow" target="_blank">@JohnsNotHere</a> </li> <li> John's Mastodon: <a href="https://infosec.exchange/@JohnsNotHere" rel="nofollow" target="_blank">https://infosec.exchange/@JohnsNotHere</a> </li> <li> Podcast Website: <a href="https://purplesquadsec.com/" rel="nofollow" target="_blank">purplesquadsec.com</a> </li> <li> Patreon - <a href="https://www.patreon.com/purplesquadsec" rel="nofollow" target="_blank">https://www.patreon.com/purplesquadsec</a> </li> <li> Sign-Up for our Slack community: <a href="https://signup.purplesquadsec.com/" rel="nofollow" target="_blank">https://signup.purplesquadsec.com</a> </li> </ul> Thanks for listening, and as always, I will talk with you all again next time. Find out more at <a href="http://purplesquadsec.com" rel="nofollow" target="_blank">http://purplesquadsec.com</a>

Episode 49 – The Red Team Life with Curtis Brazzell

Kyle Andrus

Often times in information security, we look upon penetration testing and red teaming with awe and view those professions as the "sexy" side of security.  Truth be told, the defensive side has a lot of exciting opportunities as well!  Kyle Andrus joins me this week to talk about malware analysis, which I think is definitely one of the sexier sides of defense. Some links of interest:   Practical Malware Analysis Book - https://nostarch.com/malware   Cuckoo Sandbox - https://cuckoosandbox.org/   CyberChef - https://gchq.github.io/CyberChef/   Leny Zeltser's Blog - https://zeltser.com/blog/   Journey Into Incident Response - http://journeyintoir.blogspot.com/   Malware Unicorn's Reverse Engineering Workshop - https://malwareunicorn.org/#/workshops   MiSec - https://www.misec.us/   Kyle's Twitter Account: @chaoticflaws   Want to hear about a new Infosec con?  If you're in and around the Waterloo region area in October, why not check out Cyber City!  This is Waterloo region's premier information security conference.  Tickets are on sale now and the CFP is open until July 31st, 2019.  Don't wait, and come participate today!     Cyber City Conference: https://www.cybercityconf.io/   Cyber City Conference CFP: https://www.papercall.io/cybercityconf   We have a new store!  Come check out the various Purple Squad Security goods you can buy to share your following and help the show.  From stickers to mugs, we have a few items up for sale: https://purplesquadsec.com/store Want to reach out to the show?  There's a few ways to get in touch!   Purple Squad Security's Twitter: @PurpleSquadSec   John's Twitter: @JohnsNotHere   John's Mastodon: https://infosec.exchange/@JohnsNotHere   Podcast Website: purplesquadsec.com   Patreon - https://www.patreon.com/purplesquadsec   Sign-Up for our Slack community: https://signup.purplesquadsec.com   Thanks for listening, and as always, I will talk with you all again next time. Find out more at http://purplesquadsec.com

Often times in information security, we look upon penetration testing and red teaming with awe and view those professions as the "sexy" side of security.  Truth be told, the defensive side has a lot of exciting opportunities as well!  Kyle Andrus joins me this week to talk about malware analysis, which I think is definitely one of the sexier sides of defense. Some links of interest: <ul> <li> Practical Malware Analysis Book - <a href="https://nostarch.com/malware" rel="nofollow" target="_blank">https://nostarch.com/malware</a> </li> <li> Cuckoo Sandbox - <a href="https://cuckoosandbox.org/" rel="nofollow" target="_blank">https://cuckoosandbox.org/</a> </li> <li> CyberChef - <a href="https://gchq.github.io/CyberChef/" rel="nofollow" target="_blank">https://gchq.github.io/CyberChef/</a> </li> <li> Leny Zeltser's Blog - <a href="https://zeltser.com/blog/" rel="nofollow" target="_blank">https://zeltser.com/blog/</a> </li> <li> Journey Into Incident Response - <a href="http://journeyintoir.blogspot.com/" rel="nofollow" target="_blank">http://journeyintoir.blogspot.com/</a> </li> <li> Malware Unicorn's Reverse Engineering Workshop - <a href="https://malwareunicorn.org/#/workshops" rel="nofollow" target="_blank">https://malwareunicorn.org/#/workshops</a> </li> <li> MiSec - <a href="https://www.misec.us/" rel="nofollow" target="_blank">https://www.misec.us/</a> </li> <li> Kyle's Twitter Account: <a href="https://twitter.com/chaoticflaws" rel="nofollow" target="_blank">@chaoticflaws</a> </li> </ul> Want to hear about a new Infosec con?  If you're in and around the Waterloo region area in October, why not check out Cyber City!  This is Waterloo region's premier information security conference.  Tickets are on sale now and the CFP is open until July 31st, 2019.  Don't wait, and come participate today!   <ul> <li> Cyber City Conference: <a href="https://www.cybercityconf.io/" rel="nofollow" target="_blank">https://www.cybercityconf.io/</a> </li> <li> Cyber City Conference CFP: <a href="https://www.papercall.io/cybercityconf" rel="nofollow" target="_blank">https://www.papercall.io/cybercityconf</a> </li> </ul> We have a new store!  Come check out the various Purple Squad Security goods you can buy to share your following and help the show.  From stickers to mugs, we have a few items up for sale: <a href="https://purplesquadsec.com/store" rel="nofollow" target="_blank">https://purplesquadsec.com/store</a> Want to reach out to the show?  There's a few ways to get in touch! <ul> <li> Purple Squad Security's Twitter: <a href="https://twitter.com/PurpleSquadSec" rel="nofollow" target="_blank">@PurpleSquadSec</a> </li> <li> John's Twitter: <a href="https://twitter.com/JohnsNotHere" rel="nofollow" target="_blank">@JohnsNotHere</a> </li> <li> John's Mastodon: <a href="https://infosec.exchange/@JohnsNotHere" rel="nofollow" target="_blank">https://infosec.exchange/@JohnsNotHere</a> </li> <li> Podcast Website: <a href="https://purplesquadsec.com/" rel="nofollow" target="_blank">purplesquadsec.com</a> </li> <li> Patreon - <a href="https://www.patreon.com/purplesquadsec" rel="nofollow" target="_blank">https://www.patreon.com/purplesquadsec</a> </li> <li> Sign-Up for our Slack community: <a href="https://signup.purplesquadsec.com/" rel="nofollow" target="_blank">https://signup.purplesquadsec.com</a> </li> </ul> Thanks for listening, and as always, I will talk with you all again next time. Find out more at <a href="http://purplesquadsec.com" rel="nofollow" target="_blank">http://purplesquadsec.com</a>

Episode 58 – Malware Analysis with Kyle Andrus

Tim De Block

Ed Rojas

Daniel Ebbutt

It's that time again!  Yes, another Tabletop D&amp;D episode is upon us!  This time I asked Timothy de Block from the Exploring Information Security podcast to join me, along with a few interesting characters.  Let's just say this particular episode is not for the faint of heart, and we have a few swears thrown in to keep with the atmosphere.  Enjoy! Some links of interest:   Exploring Information Security Podcast: https://www.timothydeblock.com/eis/   Tactical Edge: https://tacticaledge.co/index_en.html   Tactical Edge Twitter: @Tactical3dge   Kyle's Twitter: @chaoticflaws   Ed's Twitter: @edgarr0jas   Daniel's Twitter: @notdanielebbutt   Tim's Twitter: @timothydeblock   Tabletop Scenarios Twitter: @badthingsdaily   We have a new store!  Come check out the various Purple Squad Security goods you can buy to share your following and help the show.  From stickers to mugs, we have a few items up for sale: https://purplesquadsec.com/store Want to reach out to the show?  There's a few ways to get in touch!   Purple Squad Security's Twitter: @PurpleSquadSec   John's Twitter: @JohnsNotHere   John's Mastodon: https://infosec.exchange/@JohnsNotHere   Podcast Website: purplesquadsec.com   Patreon - https://www.patreon.com/purplesquadsec   Sign-Up for our Slack community: https://signup.purplesquadsec.com   Thanks for listening, and as always, I will talk with you all again next time. Find out more at http://purplesquadsec.com

It's that time again!  Yes, another Tabletop D&amp;D episode is upon us!  This time I asked Timothy de Block from the Exploring Information Security podcast to join me, along with a few interesting characters.  Let's just say this particular episode is not for the faint of heart, and we have a few swears thrown in to keep with the atmosphere.  Enjoy! Some links of interest: <ul> <li> Exploring Information Security Podcast: <a href="https://www.timothydeblock.com/eis/" rel="nofollow" target="_blank">https://www.timothydeblock.com/eis/</a> </li> <li> Tactical Edge: <a href="https://tacticaledge.co/index_en.html" rel="nofollow" target="_blank">https://tacticaledge.co/index_en.html</a> </li> <li> Tactical Edge Twitter: <a href="https://twitter.com/Tactical3dge" rel="nofollow" target="_blank">@Tactical3dge</a> </li> <li> Kyle's Twitter: <a href="https://twitter.com/chaoticflaws" rel="nofollow" target="_blank">@chaoticflaws</a> </li> <li> Ed's Twitter: <a href="https://twitter.com/EdgarR0jas" rel="nofollow" target="_blank">@edgarr0jas</a> </li> <li> Daniel's Twitter: <a href="https://twitter.com/notdanielebbutt" rel="nofollow" target="_blank">@notdanielebbutt</a> </li> <li> Tim's Twitter: <a href="https://twitter.com/TimothyDeBlock" rel="nofollow" target="_blank">@timothydeblock</a> </li> <li> Tabletop Scenarios Twitter: <a href="https://twitter.com/badthingsdaily" rel="nofollow" target="_blank">@badthingsdaily</a> </li> </ul> We have a new store!  Come check out the various Purple Squad Security goods you can buy to share your following and help the show.  From stickers to mugs, we have a few items up for sale: <a href="https://purplesquadsec.com/store" rel="nofollow" target="_blank">https://purplesquadsec.com/store</a> Want to reach out to the show?  There's a few ways to get in touch! <ul> <li> Purple Squad Security's Twitter: <a href="https://twitter.com/PurpleSquadSec" rel="nofollow" target="_blank">@PurpleSquadSec</a> </li> <li> John's Twitter: <a href="https://twitter.com/JohnsNotHere" rel="nofollow" target="_blank">@JohnsNotHere</a> </li> <li> John's Mastodon: <a href="https://infosec.exchange/@JohnsNotHere" rel="nofollow" target="_blank">https://infosec.exchange/@JohnsNotHere</a> </li> <li> Podcast Website: <a href="https://purplesquadsec.com/" rel="nofollow" target="_blank">purplesquadsec.com</a> </li> <li> Patreon - <a href="https://www.patreon.com/purplesquadsec" rel="nofollow" target="_blank">https://www.patreon.com/purplesquadsec</a> </li> <li> Sign-Up for our Slack community: <a href="https://signup.purplesquadsec.com/" rel="nofollow" target="_blank">https://signup.purplesquadsec.com</a> </li> </ul> Thanks for listening, and as always, I will talk with you all again next time. Find out more at <a href="http://purplesquadsec.com" rel="nofollow" target="_blank">http://purplesquadsec.com</a>

Episode 50 – Tabletop D&D with Tim De Block, Ed Rojas, Daniel Ebbutt, and Kyle Andrus

Once again I am pleased to share a #ginfosec episode with the woman who helps guide others through the mountains of infosec, Tracy InfoSecSherpa Maleeff!  In this extended episode Tracy and I speak about conferences from the attendee point of view; what to expect, what to bring, how to go, and what you should aim to get from the con.  Enjoy! Some links of interest:   Tracy's Twitter: @InfoSecSherpa   Sign up for Tracy's Nuzzle Newsletter: https://nuzzel.com/InfoSecSherpa   Study on different note taking techniques: https://www.scientificamerican.com/article/a-learning-secret-don-t-take-notes-with-a-laptop/   Tracy's Unusual Journey into Infosec: https://www.secjuice.com/infosecsherpa-unusual-journeys/   Tracy's Talk at BSides NoVa - Networking with Humans: https://www.youtube.com/watch?v=bbfyXTZCVC0   We have a new store!  Come check out the various Purple Squad Security goods you can buy to share your following and help the show.  From stickers to mugs, we have a few items up for sale: https://purplesquadsec.com/store Want to reach out to the show?  There's a few ways to get in touch!   Purple Squad Security's Twitter: @PurpleSquadSec   John's Twitter: @JohnsNotHere   John's Mastodon: https://infosec.exchange/@JohnsNotHere   Podcast Website: purplesquadsec.com   Patreon - https://www.patreon.com/purplesquadsec   Sign-Up for our Slack community: https://signup.purplesquadsec.com   Thanks for listening, and as always, I will talk with you all again next time. Find out more at http://purplesquadsec.com

Once again I am pleased to share a #ginfosec episode with the woman who helps guide others through the mountains of infosec, Tracy InfoSecSherpa Maleeff!  In this extended episode Tracy and I speak about conferences from the attendee point of view; what to expect, what to bring, how to go, and what you should aim to get from the con.  Enjoy! Some links of interest: <ul> <li> Tracy's Twitter: <a href="https://twitter.com/InfoSecSherpa" rel="nofollow" target="_blank">@InfoSecSherpa</a> </li> <li> Sign up for Tracy's Nuzzle Newsletter: <a href="https://nuzzel.com/InfoSecSherpa" rel="nofollow" target="_blank">https://nuzzel.com/InfoSecSherpa</a> </li> <li> Study on different note taking techniques: <a href="https://www.scientificamerican.com/article/a-learning-secret-don-t-take-notes-with-a-laptop/" rel="nofollow" target="_blank">https://www.scientificamerican.com/article/a-learning-secret-don-t-take-notes-with-a-laptop/</a> </li> <li> Tracy's Unusual Journey into Infosec: <a href="https://www.secjuice.com/infosecsherpa-unusual-journeys/" rel="nofollow" target="_blank">https://www.secjuice.com/infosecsherpa-unusual-journeys/</a> </li> <li> Tracy's Talk at BSides NoVa - Networking with Humans: <a href="https://www.youtube.com/watch?v=bbfyXTZCVC0" rel="nofollow" target="_blank">https://www.youtube.com/watch?v=bbfyXTZCVC0</a> </li> </ul> We have a new store!  Come check out the various Purple Squad Security goods you can buy to share your following and help the show.  From stickers to mugs, we have a few items up for sale: <a href="https://purplesquadsec.com/store" rel="nofollow" target="_blank">https://purplesquadsec.com/store</a> Want to reach out to the show?  There's a few ways to get in touch! <ul> <li> Purple Squad Security's Twitter: <a href="https://twitter.com/PurpleSquadSec" rel="nofollow" target="_blank">@PurpleSquadSec</a> </li> <li> John's Twitter: <a href="https://twitter.com/JohnsNotHere" rel="nofollow" target="_blank">@JohnsNotHere</a> </li> <li> John's Mastodon: <a href="https://infosec.exchange/@JohnsNotHere" rel="nofollow" target="_blank">https://infosec.exchange/@JohnsNotHere</a> </li> <li> Podcast Website: <a href="https://purplesquadsec.com/" rel="nofollow" target="_blank">purplesquadsec.com</a> </li> <li> Patreon - <a href="https://www.patreon.com/purplesquadsec" rel="nofollow" target="_blank">https://www.patreon.com/purplesquadsec</a> </li> <li> Sign-Up for our Slack community: <a href="https://signup.purplesquadsec.com/" rel="nofollow" target="_blank">https://signup.purplesquadsec.com</a> </li> </ul> Thanks for listening, and as always, I will talk with you all again next time. Find out more at <a href="http://purplesquadsec.com" rel="nofollow" target="_blank">http://purplesquadsec.com</a>

Episode 53 – #Ginfosec with @InfoSecSherpa – All About Cons!

A few weeks ago, Sam King on Twitter mentioned me in a tweet that included a link to a Medium post, but not just any Medium post.  Tim MalcomVetter had posted up an "Choose Your Own Red Team Adventure", which I thought was just amazing!  I used to read a lot of choose your own adventure books as a kid, so I was naturally excited!  For this episode, I will be going through the story the first time, reading aloud as I try my hand at red teaming against a customer.  I hope you enjoy! Some links of interest:   Choose Your Own Red Team Adventure - https://medium.com/@malcomvetter/choose-your-own-red-team-adventure-f87d6a3b0b76   Tim MalcomVetter's Twitter - @malcomvetter   We have a new store!  Come check out the various Purple Squad Security goods you can buy to share your following and help the show.  From stickers to mugs, we have a few items up for sale: https://purplesquadsec.com/store Want to reach out to the show?  There's a few ways to get in touch!   Purple Squad Security's Twitter: @PurpleSquadSec   John's Twitter: @JohnsNotHere   John's Mastodon: https://infosec.exchange/@JohnsNotHere   Podcast Website: purplesquadsec.com   Patreon - https://www.patreon.com/purplesquadsec   Sign-Up for our Slack community: https://signup.purplesquadsec.com   Thanks for listening, and as always, I will talk with you all again next time. Find out more at http://purplesquadsec.com

A few weeks ago, Sam King on Twitter mentioned me in a tweet that included a link to a Medium post, but not just any Medium post.  Tim MalcomVetter had posted up an "Choose Your Own Red Team Adventure", which I thought was just amazing!  I used to read a lot of choose your own adventure books as a kid, so I was naturally excited!  For this episode, I will be going through the story the first time, reading aloud as I try my hand at red teaming against a customer.  I hope you enjoy! Some links of interest: <ul> <li> Choose Your Own Red Team Adventure - <a href="https://medium.com/@malcomvetter/choose-your-own-red-team-adventure-f87d6a3b0b76" rel="nofollow" target="_blank">https://medium.com/@malcomvetter/choose-your-own-red-team-adventure-f87d6a3b0b76</a> </li> <li> Tim MalcomVetter's Twitter - <a href="https://twitter.com/malcomvetter" rel="nofollow" target="_blank">@malcomvetter</a> </li> </ul> We have a new store!  Come check out the various Purple Squad Security goods you can buy to share your following and help the show.  From stickers to mugs, we have a few items up for sale: <a href="https://purplesquadsec.com/store" rel="nofollow" target="_blank">https://purplesquadsec.com/store</a> Want to reach out to the show?  There's a few ways to get in touch! <ul> <li> Purple Squad Security's Twitter: <a href="https://twitter.com/PurpleSquadSec" rel="nofollow" target="_blank">@PurpleSquadSec</a> </li> <li> John's Twitter: <a href="https://twitter.com/JohnsNotHere" rel="nofollow" target="_blank">@JohnsNotHere</a> </li> <li> John's Mastodon: <a href="https://infosec.exchange/@JohnsNotHere" rel="nofollow" target="_blank">https://infosec.exchange/@JohnsNotHere</a> </li> <li> Podcast Website: <a href="https://purplesquadsec.com/" rel="nofollow" target="_blank">purplesquadsec.com</a> </li> <li> Patreon - <a href="https://www.patreon.com/purplesquadsec" rel="nofollow" target="_blank">https://www.patreon.com/purplesquadsec</a> </li> <li> Sign-Up for our Slack community: <a href="https://signup.purplesquadsec.com/" rel="nofollow" target="_blank">https://signup.purplesquadsec.com</a> </li> </ul> Thanks for listening, and as always, I will talk with you all again next time. Find out more at <a href="http://purplesquadsec.com" rel="nofollow" target="_blank">http://purplesquadsec.com</a>

Episode 56 – John Reads: Choose Your Own Red Team Adventure

The cloud.  The final frontier.  Well, not exactly but it is a pretty important topic in today's IT environment.  Unfortunately 2017 has been the year of leaks, hacks, and misconfigurations when it comes to the cloud.  Amazon Web Services (AWS) is the cloud provider with the most market share, but its security configuration can leave a bit to be desired. J Cole Morrison joins me this week to discuss IAM policies in AWS, what they are and why they are important.  Cole has written about IAM policies on his blog (link below), which I encourage everyone to read. Some links of interest:   Cole's IAM Blog Article: AWS IAM Policies in a Nutshell   Cole's Website: https://start.jcolemorrison.com/   Cole's Twitter: @JColeMorrison   AWS DevOps: https://awsdevops.io/   Want to reach out to the show?  There's a few ways to get in touch!   Show Twitter: @PurpleSquadSec   John's Twitter: @JohnsNotHere   Website: purplesquadsec.com   Slack Sign-Up Link: https://signup.purplesquadsec.com   John's Peerlyst Profile: https://www.peerlyst.com/users/john-svazic   Thanks for listening, and I will talk with you again next time! Find out more at http://purplesquadsec.com

The cloud.  The final frontier.  Well, not exactly but it is a pretty important topic in today's IT environment.  Unfortunately 2017 has been the year of leaks, hacks, and misconfigurations when it comes to the cloud.  Amazon Web Services (AWS) is the cloud provider with the most market share, but its security configuration can leave a bit to be desired. J Cole Morrison joins me this week to discuss IAM policies in AWS, what they are and why they are important.  Cole has written about IAM policies on his blog (link below), which I encourage everyone to read. Some links of interest: <ul> <li> Cole's IAM Blog Article: <a href="https://start.jcolemorrison.com/aws-iam-policies-in-a-nutshell/" rel="nofollow" target="_blank">AWS IAM Policies in a Nutshell</a> </li> <li> Cole's Website: <a href="https://start.jcolemorrison.com/" rel="nofollow" target="_blank">https://start.jcolemorrison.com/</a> </li> <li> Cole's Twitter: <a href="https://twitter.com/JColeMorrison" rel="nofollow" target="_blank">@JColeMorrison</a> </li> <li> AWS DevOps: <a href="https://awsdevops.io/" rel="nofollow" target="_blank">https://awsdevops.io/</a> </li> </ul> Want to reach out to the show?  There's a few ways to get in touch! <ul> <li> Show Twitter: <a href="https://twitter.com/PurpleSquadSec" rel="nofollow" target="_blank">@PurpleSquadSec</a> </li> <li> John's Twitter: <a href="https://twitter.com/JohnsNotHere" rel="nofollow" target="_blank">@JohnsNotHere</a> </li> <li> Website: <a href="https://purplesquadsec.com/" rel="nofollow" target="_blank">purplesquadsec.com</a> </li> <li> Slack Sign-Up Link: <a href="https://signup.purplesquadsec.com/" rel="nofollow" target="_blank">https://signup.purplesquadsec.com</a> </li> <li> John's Peerlyst Profile: <a href="https://www.peerlyst.com/users/john-svazic" rel="nofollow" target="_blank">https://www.peerlyst.com/users/john-svazic</a> </li> </ul> Thanks for listening, and I will talk with you again next time! Find out more at <a href="http://purplesquadsec.com" rel="nofollow" target="_blank">http://purplesquadsec.com</a>

Episode 008 – IAM Securing AWS with J Cole Morrison

Scott Piper

The old saying of a defender has to be right 100% of the time while an attacker only has to be right once is growing a bit tired.  Now blue team members should be measured not by keeping the attackers out, but by how quickly they can find out that they're on your network. Scott Piper joins me this week to discuss how we can detect intruders in your AWS cloud infrastructure.  We cover a lot of different tools and techniques that you can use to help detect intruders, and some mitigation strategies to help reduce the risk when an attack is successful. Some links of interest:   ElastAlert: https://github.com/Yelp/elastalert   StreamAlert: https://github.com/airbnb/streamalert   Prowler: https://github.com/Alfresco/prowler   Security Monkey: https://github.com/Netflix/security_monkey   AWS Billing Alerts: https://docs.aws.amazon.com/awsaccountbilling/latest/aboutv2/free-tier-alarms.html   jq (for JSON parsing on the CLI): https://stedolan.github.io/jq/   Summit Route: https://summitroute.com/   Downclimb: https://summitroute.com/blog/   Scott's Twitter: @SummitRoute   Want to reach out to the show?  There's a few ways to get in touch!   Show Twitter: @PurpleSquadSec   John's Twitter: @JohnsNotHere   Podcast Website: purplesquadsec.com   Sign-Up for our Slack community: https://signup.purplesquadsec.com   John's Peerlyst Profile: https://www.peerlyst.com/users/john-svazic   Thanks for listening, and I will talk with you again next time! Find out more at http://purplesquadsec.com

The old saying of a defender has to be right 100% of the time while an attacker only has to be right once is growing a bit tired.  Now blue team members should be measured not by keeping the attackers out, but by how quickly they can find out that they're on your network. Scott Piper joins me this week to discuss how we can detect intruders in your AWS cloud infrastructure.  We cover a lot of different tools and techniques that you can use to help detect intruders, and some mitigation strategies to help reduce the risk when an attack is successful. Some links of interest: <ul> <li> ElastAlert: <a href="https://github.com/Yelp/elastalert" rel="nofollow" target="_blank">https://github.com/Yelp/elastalert</a> </li> <li> StreamAlert: <a href="https://github.com/airbnb/streamalert" rel="nofollow" target="_blank">https://github.com/airbnb/streamalert</a> </li> <li> Prowler: <a href="https://github.com/Alfresco/prowler" rel="nofollow" target="_blank">https://github.com/Alfresco/prowler</a> </li> <li> Security Monkey: <a href="https://github.com/Netflix/security_monkey" rel="nofollow" target="_blank">https://github.com/Netflix/security_monkey</a> </li> <li> AWS Billing Alerts: <a href="https://docs.aws.amazon.com/awsaccountbilling/latest/aboutv2/free-tier-alarms.html" rel="nofollow" target="_blank">https://docs.aws.amazon.com/awsaccountbilling/latest/aboutv2/free-tier-alarms.html</a> </li> <li> jq (for JSON parsing on the CLI): <a href="https://stedolan.github.io/jq/" rel="nofollow" target="_blank">https://stedolan.github.io/jq/</a> </li> <li> Summit Route: <a href="https://summitroute.com/" rel="nofollow" target="_blank">https://summitroute.com/</a> </li> <li> Downclimb: <a href="https://summitroute.com/blog/" rel="nofollow" target="_blank">https://summitroute.com/blog/</a> </li> <li> Scott's Twitter: <a href="https://twitter.com/SummitRoute" rel="nofollow" target="_blank">@SummitRoute</a> </li> </ul> Want to reach out to the show?  There's a few ways to get in touch! <ul> <li> Show Twitter: <a href="https://twitter.com/PurpleSquadSec" rel="nofollow" target="_blank">@PurpleSquadSec</a> </li> <li> John's Twitter: <a href="https://twitter.com/JohnsNotHere" rel="nofollow" target="_blank">@JohnsNotHere</a> </li> <li> Podcast Website: <a href="https://purplesquadsec.com/" rel="nofollow" target="_blank">purplesquadsec.com</a> </li> <li> Sign-Up for our Slack community: <a href="https://signup.purplesquadsec.com/" rel="nofollow" target="_blank">https://signup.purplesquadsec.com</a> </li> <li> John's Peerlyst Profile: <a href="https://www.peerlyst.com/users/john-svazic" rel="nofollow" target="_blank">https://www.peerlyst.com/users/john-svazic</a> </li> </ul> Thanks for listening, and I will talk with you again next time! Find out more at <a href="http://purplesquadsec.com" rel="nofollow" target="_blank">http://purplesquadsec.com</a>

Episode 009 – Detecting Intruders on AWS with Scott Piper

Hey everyone, this is a re-release of episode 45 with Tinker, but this one is WITHOUT the background music.  I hope this makes up for the snafu in an otherwise great interview! Happy December everyone!  Whatever holiday you may be celebrating this season, may it be enjoyable.  I've decided for the month of December to treat myself, by having a bunch of people I hold in high regard to join me in sharing of their tales, similar to the fireside chats I've had in the past.  We have no set agenda, we have no set time, but we do plan on sharing some fun stories that hopefully you will enjoy. So consider this a holiday gift my dear listener, and I hope you find it as enjoyable as I do. This episode we are going to have a man whom I honestly believe should write as many books as possible, and provide audiobook versions as well, the one and only Tinker! Some links of interest:   Tinker's Website: https://www.tinker.sh/   Dallas Hackers - https://dallashackers.com/   Popular Mechanics Article - https://www.popularmechanics.com/technology/a24676415/dallas-hackers/   Tinker's Twitter: @tinkersec   Tinker's Mastodon - @tinker   Infosec Mastodon - https://infosec.exchange/auth/sign_up   Want to reach out to the show?  There's a few ways to get in touch!   Purple Squad Security's Twitter: @PurpleSquadSec   John's Twitter: @JohnsNotHere   John's Mastodon: https://infosec.exchange/@JohnsNotHere   Podcast Website: purplesquadsec.com   Patreon - https://www.patreon.com/purplesquadsec   Sign-Up for our Slack community: https://signup.purplesquadsec.com   Thanks for listening, and as always, I will talk with you all again next time. Find out more at http://purplesquadsec.com

Hey everyone, this is a re-release of episode 45 with Tinker, but this one is WITHOUT the background music.  I hope this makes up for the snafu in an otherwise great interview! Happy December everyone!  Whatever holiday you may be celebrating this season, may it be enjoyable.  I've decided for the month of December to treat myself, by having a bunch of people I hold in high regard to join me in sharing of their tales, similar to the fireside chats I've had in the past.  We have no set agenda, we have no set time, but we do plan on sharing some fun stories that hopefully you will enjoy. So consider this a holiday gift my dear listener, and I hope you find it as enjoyable as I do. This episode we are going to have a man whom I honestly believe should write as many books as possible, and provide audiobook versions as well, the one and only Tinker! Some links of interest: <ul> <li> Tinker's Website: <a href="https://www.tinker.sh/" rel="nofollow" target="_blank">https://www.tinker.sh/</a> </li> <li> Dallas Hackers - <a href="https://dallashackers.com/" rel="nofollow" target="_blank">https://dallashackers.com/</a> </li> <li> Popular Mechanics Article - <a href="https://www.popularmechanics.com/technology/a24676415/dallas-hackers/" rel="nofollow" target="_blank">https://www.popularmechanics.com/technology/a24676415/dallas-hackers/</a> </li> <li> Tinker's Twitter: <a href="https://twitter.com/TinkerSec" rel="nofollow" target="_blank">@tinkersec</a> </li> <li> Tinker's Mastodon - <a href="https://infosec.exchange/@tinker" rel="nofollow" target="_blank">@tinker</a> </li> <li> Infosec Mastodon - <a href="https://infosec.exchange/auth/sign_up" rel="nofollow" target="_blank">https://infosec.exchange/auth/sign_up</a> </li> </ul> Want to reach out to the show?  There's a few ways to get in touch! <ul> <li> Purple Squad Security's Twitter: <a href="https://twitter.com/PurpleSquadSec" rel="nofollow" target="_blank">@PurpleSquadSec</a> </li> <li> John's Twitter: <a href="https://twitter.com/JohnsNotHere" rel="nofollow" target="_blank">@JohnsNotHere</a> </li> <li> John's Mastodon: <a href="https://infosec.exchange/@JohnsNotHere" rel="nofollow" target="_blank">https://infosec.exchange/@JohnsNotHere</a> </li> <li> Podcast Website: <a href="https://purplesquadsec.com/" rel="nofollow" target="_blank">purplesquadsec.com</a> </li> <li> Patreon - <a href="https://www.patreon.com/purplesquadsec" rel="nofollow" target="_blank">https://www.patreon.com/purplesquadsec</a> </li> <li> Sign-Up for our Slack community: <a href="https://signup.purplesquadsec.com/" rel="nofollow" target="_blank">https://signup.purplesquadsec.com</a> </li> </ul> Thanks for listening, and as always, I will talk with you all again next time. Find out more at <a href="http://purplesquadsec.com" rel="nofollow" target="_blank">http://purplesquadsec.com</a>

Episode 45.1 – Holiday Special – Storytime with Tinker – NO MUSIC!!!

Jason Haddix

Penetration testing.  If you're in the information security field, you have run into your fair share of them.  Now there seems to be a trend with penetration testing moving to a crowdsourcing model.  This week I speak with Jason Haddix of Bugcrowd to explore why that is, what's the draw and how are companies like Bugcrowd helping build the infosec community. Some links of interest:   Bugcrowd: https://www.bugcrowd.com/   HackerOne: https://www.hackerone.com/   HackTheBox: https://www.hackthebox.eu/   Bugcrowd Report: The 2017 State of Bug Bounty   Bugcrowd's Twitter: https://twitter.com/Bugcrowd   Want to reach out to the show?  There's a few ways to get in touch!   Show Twitter: @PurpleSquadSec   John's Twitter: @JohnsNotHere   Podcast Website: purplesquadsec.com   Sign-Up for our Slack community: https://signup.purplesquadsec.com   John's Peerlyst Profile: https://www.peerlyst.com/users/john-svazic   Thanks for listening, and I will talk with you again next time! Find out more at http://purplesquadsec.com

Penetration testing.  If you're in the information security field, you have run into your fair share of them.  Now there seems to be a trend with penetration testing moving to a crowdsourcing model.  This week I speak with Jason Haddix of Bugcrowd to explore why that is, what's the draw and how are companies like Bugcrowd helping build the infosec community. Some links of interest: <ul> <li> Bugcrowd: <a href="https://www.bugcrowd.com/" rel="nofollow" target="_blank">https://www.bugcrowd.com/</a> </li> <li> HackerOne: <a href="https://www.hackerone.com/" rel="nofollow" target="_blank">https://www.hackerone.com/</a> </li> <li> HackTheBox: <a href="https://www.hackthebox.eu/" rel="nofollow" target="_blank">https://www.hackthebox.eu/</a> </li> <li> Bugcrowd Report: <a href="https://www.bugcrowd.com/resource/2017-state-of-bug-bounty/" rel="nofollow" target="_blank">The 2017 State of Bug Bounty</a> </li> <li> Bugcrowd's Twitter: <a href="https://twitter.com/Bugcrowd" rel="nofollow" target="_blank">https://twitter.com/Bugcrowd</a> </li> </ul> Want to reach out to the show?  There's a few ways to get in touch! <ul> <li> Show Twitter: <a href="https://twitter.com/PurpleSquadSec" rel="nofollow" target="_blank">@PurpleSquadSec</a> </li> <li> John's Twitter: <a href="https://twitter.com/JohnsNotHere" rel="nofollow" target="_blank">@JohnsNotHere</a> </li> <li> Podcast Website: <a href="https://purplesquadsec.com/" rel="nofollow" target="_blank">purplesquadsec.com</a> </li> <li> Sign-Up for our Slack community: <a href="https://signup.purplesquadsec.com/" rel="nofollow" target="_blank">https://signup.purplesquadsec.com</a> </li> <li> John's Peerlyst Profile: <a href="https://www.peerlyst.com/users/john-svazic" rel="nofollow" target="_blank">https://www.peerlyst.com/users/john-svazic</a> </li> </ul> Thanks for listening, and I will talk with you again next time! Find out more at <a href="http://purplesquadsec.com" rel="nofollow" target="_blank">http://purplesquadsec.com</a>

Episode 010 – Crowdsourced Pen Testing w/ Jason Haddix of Bugcrowd

Derek Rook

Capture The Flag games, or CTFs, are a popular way for infosec pros to brush up on the offensive skills.  From VulnHub to HackTheBox, there are a few different ways to quote "get your hack on"!  Derek Rook (@_r00k_) joins me today to talk about CTFs and how they can assist in your Infosec journey, regardless of your role. Some links of interest:   Derek's YouTube Channel - https://www.youtube.com/channel/UCMACXuWd2w6_IEGog744UaA   Derek's Twitch Stream - https://www.twitch.tv/r00k_infosec   ippsec's YouTube Channel - https://www.youtube.com/channel/UCa6eh7gCkpPo5XXUDfygQQA   LiveOverflow YouTube Channel - https://www.youtube.com/channel/UClcE-kVhqyiHCcjYwcpfj9w   Mub1x's Twitch Stream - https://www.twitch.tv/mub1x   CCDC (US) - http://www.nationalccdc.org/   CCDC (Canada) - https://www.cyberdefencechallenge.ca/   SANS Holiday Hack Challenge - https://holidayhackchallenge.com/past-challenges/   Open2All CTF team - https://www.reddit.com/r/OpenToAllCTFteam/   CTF Time - https://ctftime.org/   Derek's Twitter - https://twitter.com/_r00k_   Want to reach out to the show?  There's a few ways to get in touch!   Purple Squad Security's Twitter: @PurpleSquadSec   John's Twitter: @JohnsNotHere   Podcast Website: purplesquadsec.com   Sign-Up for our Slack community: https://signup.purplesquadsec.com   Thanks for listening, and as always, I will talk with you all again next time. Find out more at http://purplesquadsec.com

Capture The Flag games, or CTFs, are a popular way for infosec pros to brush up on the offensive skills.  From VulnHub to HackTheBox, there are a few different ways to quote "get your hack on"!  Derek Rook (@_r00k_) joins me today to talk about CTFs and how they can assist in your Infosec journey, regardless of your role. Some links of interest: <ul> <li> Derek's YouTube Channel - <a href="https://www.youtube.com/channel/UCMACXuWd2w6_IEGog744UaA" rel="nofollow" target="_blank">https://www.youtube.com/channel/UCMACXuWd2w6_IEGog744UaA</a> </li> <li> Derek's Twitch Stream - <a href="https://www.twitch.tv/r00k_infosec" rel="nofollow" target="_blank">https://www.twitch.tv/r00k_infosec</a> </li> <li> ippsec's YouTube Channel - <a href="https://www.youtube.com/channel/UCa6eh7gCkpPo5XXUDfygQQA" rel="nofollow" target="_blank">https://www.youtube.com/channel/UCa6eh7gCkpPo5XXUDfygQQA</a> </li> <li> LiveOverflow YouTube Channel - <a href="https://www.youtube.com/channel/UClcE-kVhqyiHCcjYwcpfj9w" rel="nofollow" target="_blank">https://www.youtube.com/channel/UClcE-kVhqyiHCcjYwcpfj9w</a> </li> <li> Mub1x's Twitch Stream - <a href="https://www.twitch.tv/mub1x" rel="nofollow" target="_blank">https://www.twitch.tv/mub1x</a> </li> <li> CCDC (US) - <a href="http://www.nationalccdc.org/" rel="nofollow" target="_blank">http://www.nationalccdc.org/</a> </li> <li> CCDC (Canada) - <a href="https://www.cyberdefencechallenge.ca/" rel="nofollow" target="_blank">https://www.cyberdefencechallenge.ca/</a> </li> <li> SANS Holiday Hack Challenge - <a href="https://holidayhackchallenge.com/past-challenges/" rel="nofollow" target="_blank">https://holidayhackchallenge.com/past-challenges/</a> </li> <li> Open2All CTF team - <a href="https://www.reddit.com/r/OpenToAllCTFteam/" rel="nofollow" target="_blank">https://www.reddit.com/r/OpenToAllCTFteam/</a> </li> <li> CTF Time - <a href="https://ctftime.org/" rel="nofollow" target="_blank">https://ctftime.org/</a> </li> <li> Derek's Twitter - <a href="https://twitter.com/_r00k_" rel="nofollow" target="_blank">https://twitter.com/_r00k_</a> </li> </ul> Want to reach out to the show?  There's a few ways to get in touch! <ul> <li> Purple Squad Security's Twitter: <a href="https://twitter.com/PurpleSquadSec" rel="nofollow" target="_blank">@PurpleSquadSec</a> </li> <li> John's Twitter: <a href="https://twitter.com/JohnsNotHere" rel="nofollow" target="_blank">@JohnsNotHere</a> </li> <li> Podcast Website: <a href="https://purplesquadsec.com/" rel="nofollow" target="_blank">purplesquadsec.com</a> </li> <li> Sign-Up for our Slack community: <a href="https://signup.purplesquadsec.com/" rel="nofollow" target="_blank">https://signup.purplesquadsec.com</a> </li> </ul> Thanks for listening, and as always, I will talk with you all again next time. Find out more at <a href="http://purplesquadsec.com" rel="nofollow" target="_blank">http://purplesquadsec.com</a>

Episode 36 – The Joy of CTFs with Derek Rook

Equifax had the largest data breach this year, possibly ever!  How could I possibly pass up this opportunity to discuss what happened?  How did it happen and what lessons could we learn from it?  Equifax did a lot of things wrong for sure, but that doesn't mean that we should throw stones.  Especially given how many of us live in glass houses. Have a listen as I explore the Equifax breach from another perspective, in the hopes of salvaging something of use for others in the infosec community. Some links of interest:   https://www.equifaxsecurity2017.com/   Equifax Bitcoin Ransom   Krebs On Security - Equifax Breach Response Turns Dumpster Fire   Apache Foundation Responds to Struts Vulnerability Confirmation   CVE-2017-5638 Details   OWASP Maven Dependency Checker   Wappalyzer Browser Plug-In   Want to reach out to the show?  There's a few ways to get in touch!   Show Twitter: @PurpleSquadSec   John's Twitter: @JohnsNotHere   Website: purplesquadsec.com   Slack Sign-Up Link: https://signup.purplesquadsec.com   John's Peerlyst Profile: https://www.peerlyst.com/users/john-svazic   Thanks for listening, and I will talk with you again next time! Find out more at http://purplesquadsec.com

Equifax had the largest data breach this year, possibly ever!  How could I possibly pass up this opportunity to discuss what happened?  How did it happen and what lessons could we learn from it?  Equifax did a lot of things wrong for sure, but that doesn't mean that we should throw stones.  Especially given how many of us live in glass houses. Have a listen as I explore the Equifax breach from another perspective, in the hopes of salvaging something of use for others in the infosec community. Some links of interest: <ul> <li> <a href="https://www.equifaxsecurity2017.com/" rel="nofollow" target="_blank">https://www.equifaxsecurity2017.com/</a> </li> <li> <a href="http://mashable.com/2017/09/08/equifax-hackers-bitcoin-ransom/#GKuChm2XSkqx" rel="nofollow" target="_blank">Equifax Bitcoin Ransom</a> </li> <li> <a href="https://krebsonsecurity.com/2017/09/equifax-breach-response-turns-dumpster-fire/" rel="nofollow" target="_blank">Krebs On Security - Equifax Breach Response Turns Dumpster Fire</a> </li> <li> <a href="https://blogs.apache.org/foundation/entry/media-alert-the-apache-software" rel="nofollow" target="_blank">Apache Foundation Responds to Struts Vulnerability Confirmation</a> </li> <li> <a href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5638" rel="nofollow" target="_blank">CVE-2017-5638 Details</a> </li> <li> <a href="https://www.owasp.org/index.php/OWASP_Dependency_Check" rel="nofollow" target="_blank">OWASP Maven Dependency Checker</a> </li> <li> <a href="https://wappalyzer.com/" rel="nofollow" target="_blank">Wappalyzer Browser Plug-In</a> </li> </ul> Want to reach out to the show?  There's a few ways to get in touch! <ul> <li> Show Twitter: <a href="https://twitter.com/PurpleSquadSec" rel="nofollow" target="_blank">@PurpleSquadSec</a> </li> <li> John's Twitter: <a href="https://twitter.com/JohnsNotHere" rel="nofollow" target="_blank">@JohnsNotHere</a> </li> <li> Website: <a href="https://purplesquadsec.com/" rel="nofollow" target="_blank">purplesquadsec.com</a> </li> <li> Slack Sign-Up Link: <a href="https://signup.purplesquadsec.com/" rel="nofollow" target="_blank">https://signup.purplesquadsec.com</a> </li> <li> John's Peerlyst Profile: <a href="https://www.peerlyst.com/users/john-svazic" rel="nofollow" target="_blank">https://www.peerlyst.com/users/john-svazic</a> </li> </ul> Thanks for listening, and I will talk with you again next time! Find out more at <a href="http://purplesquadsec.com" rel="nofollow" target="_blank">http://purplesquadsec.com</a>

Episode 003 – Just the Equifax ma’am

The best podcasts on investing. For anyone interested in the stories in the investing industry, whether it's an interview with Ray Dalio or Ed Thorp to the writer of The Big Short. This topic includes the most fascinating stories from all the best investors. Add episodes you're interested into your queue below!

Best Investing Podcasts

The best podcast episodes on Startups. For anyone working in a startup, or anyone interested in the incredible stories behind how people built companies like Instagram, and Facebook. Offering both practical advice and insights, as well as the stories for how many of the biggest startups got to where they are today. Add episodes you're interested into your queue below!