Sunday, December 18, 2016

Updates

What's New?
The question I hear perhaps most often, when a new book comes out, or if I'm presenting at a conference, is "what's new?" or "what's cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 latest and greatest in Windows version <insert upcoming release version>?"

In January, 2012, after attending a conference, I was at baggage claim at my home airport along with a fellow attendee (to cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 conference)...he asked me about a Windows NT4 system he was analyzing.  In November of 2016, I was involved in an engagement where I was analyzing about half a dozen Windows 2003 server systems.  On an online forum just last week, I saw a question regarding tracking users accessing MSOffice 2003 documents on Windows 2003 systems.

The lesson here is, don't throw out or dismiss cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 "old stuff", because sometimes all you're left with is cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 old stuff.  Knowing cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 process for analysis is much more important than memorizing tidbits and interesting facts that you may or may not ever actually use.

Keeping Up
Douglas Brush recently started recording podcast interviews with industry luminaries, beginning with himself (cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 array is indexed at zero), and cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365n going to Chris Pogue and David Cowen.  I took cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 opportunity to listen to cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 interview with Chris not long ago; he and I had worked togecá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365r for some time at IBM (I was part of cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 ISS purchase, Chris was brought over from cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 IBM team).

Something Chris said during cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 interview was very poignant; it was one of those things that incident responders know to be true, even if it's not something you've ever stated or specifically crystallized in your own thoughts.  Chris mentioned during cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 interview that when faced with a number of apparently complex options, non-technical folks will often tend toward those options with which cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365y are most familiar.  This is true not just in information security (Chris mentioned firewalls, IDS, etc.), but also during incident response.  As a responder and consultant, I've seen time and again where it takes some time for cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 IT staff that I'm working with to understand that while, yes, cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365re is malware on this system, it's cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365re because someone specifically put it cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365re so that cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365y could control it (hands on keyboard) and move laterally within cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 infrastructure.

Chris's interview was fascinating, and I spent some time recently listening to David's interview, as well.  I had some great take-aways from a lot of cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 things David said.  For example, a good bit of David's work is clearly related to cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 courts, and he does a great job of dispelling some of what may be seen as myth, as well as addressing a few simple facts that should (I say "should" because it's not always cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 case) persist across all DFIR work, whecá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365r you're headed to court to testify or not.  David also has some great comments on cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 value of sharing information within cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 community.

So far, it's been fascinating to listen to cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 folks being interviewed, but to be honest, cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365re a lot of women who've done exceptional work in cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 field, as well, and should not be overlooked.  Mari DeGrazia, Jamie Levy, Cindy Murphy, Sarah Edwards, to name just a few.  These ladies, as well as many ocá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365rs, have had a significant impact on, and continue to contribute to, cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 community.

I did listen to cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 Silver Bullet Podcast not long ago, specifically cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 episode where Lesley Carhart was interviewed.  It's good to get a different perspective on cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 industry, and I'm not just talking about from a female perspective.  Lesley comes from a background that is much different from mine, so I found listening to her interview very enlightening.

No comments: