Cyber / Threat Intel. helms@infosec.exchange

Joined October 2020
I've been working hard for the past few months on a BIG update to my Investigation Theory course. I added a bunch of new material from my recent research, added new exercises, and re-recorded all the course videos. I'm really happy with how it has come together.
4
17
3
95
Gave a internal presentation today, which had 3 parts: 1) Why CTI is needed and Defense-in-Depth is not enough 2) Common pitfalls people fall into where CTI could help, in this case Ocean-11-ing and Chasing Headlines 3) How CTI practices can be useful in your own job.
3
7
21
Watch Live at 3:15 pm ET: Justice Department Press Conference Regarding Ransomware Attack on Colonial Pipeline justice.gov/live
23
95
30
179
If a few of these people get together and jam en.wikipedia.org/wiki/Blood,… ...are they Blood, Sweat, & Tears? Welcome to clustering cyber crime activity. 😩
4
9
2
49
This is in just over an hour, you still have time to sign up and watch live!
Sign-up for tomorrow's webinar and earn more about @Target's Cyber Fusion Center (CFC) teams’ capabilities and what happens when they activate the war room as they walk through a high severity event. brighttalk.com/webcast/17216… #humanintel #analytics #cyberthreats
5
Our talk is up! Watch @NathanIcart and I walk through our new framework
NEW VIDEO ON YOUTUBE! Learn about the birth of the WAVE Matrix, how Target increased its active ransomware coverage by 700%, and how to implement this process in your organization to create massive cross-team security wins. youtu.be/nPn_DH4mqQY
8
15
Very proud to have the WAVE framework covered by @CyberSecDive. I'm so glad with how useful my work has been to others and it's been awesome to see how it's resonated with other intel teams. We're hoping to have more info out in the next month to continue to help teams mature!
How @Target got around a pesky issue in cybersecurity buff.ly/2MnIB6A
1
2
16
The @sansforensics #CTISummit talks have been published! Login to SANS to find them but if you need a guide to when/what: docs.google.com/document/d/1… I got you
😱I'm letting the cat out of the bag!!!😱 This 2020, I've been pouring my heart and soul into my first book: "Practical Threat Intelligence and Data-Driven Threat Hunting" Thanks @PacktPub, @33root and @wumpwoast for putting up with my stressed self 😅 amazon.com/-/es/Valentina-Pa…
29
62
7
236
Lots of great details for any #ransomware researchers. I enjoyed the October talk, this is a great followup.
#CTISummit Track 1: Spooky RYUKy: Chapter 2 @Wanna_VanTa , Aaron Stephens @x04steve provide updates @Mandiant has on the group's operation, and expand on the tradecraft previously presented to highlight important concepts when dealing with interactive ransomware operators.
4
Yessssssss. Remember your stakeholders, as we've been talking about all day at the #CTISummit! @selenalarson
1
4
1
14
#CTISummit #GraphicRecordings: Talk: Riding the WAVE to Better Collaboration and Security Kelsey Helms @halfcafcat & Nate Icart @NathanIcart @Target
8
18
Had a lot of fun sharing our work on WAVE this morning with @NathanIcart ! Thanks to @sansforensics for hosting such a great and smooth conference!
Track 1 with @Target's @halfcafcat "We need to make our intel actionable? Why is changed needed? We need to close communication gaps to get strong security"
1
6
Such a timely and necessary talk
Join us for the #virtual #enigma2021 to hear 'Online Rumors, Misinformation and Disinformation: The Perfect Storm of COVID-19 and Election2020' presented by @katestarbird of @hcdeUW. Register now: bit.ly/enigma2021 #security #privacy
2
Can't wait to share our new framework with you all at the #CTISummit! Sign up here to watch our talk: sans.org/u/1a3l
Proud to be introducing the WAVE Framework with @halfcafcat at the #CTISummit on Jan 21. Sign up here: sans.org/u/1a3l
1
3
So honored to be included in a lineup with such rock stars for the @sansforensics #CTISummit! Join my talk with @NathanIcart in January to learn how to turn your intel into powerful operational collaborations!
3
4
1
18