Welcome to another edition of our Weekly Rewind – where we summarize all our posts from the last week. The top stories this week were 3) “Creating REAL Threat Intelligence…with Evernote Slides from Brucon”, 2) “Learning to Code with Hopscotch (+ a bonus podcast”, and 1) “First Steps Towards Relevant Actionable Threat Intel”. If you missed anything or happened to be offline, we hope you find this summary post useful as a quick reference. A la Schneier … you can also use this rewind post to talk about the security stories in the news that we haven’t covered remote-access.
Creating REAL Threat Intelligence … with Evernote Slides from Brucon: In this updated version of my threat intel framework presentation (using Evernote as a backend database) at Brucon, I have matured the schema a bit, formalizing and generalizing the tagging structure for the different notebooks. As before there are also a few implementation examples. Thanks to the Brucon crew, especially Clement Herssens (@cherssen), for running one of the most well organized conferences I have participated in! (continued here)
FBI Recommends Paying Up for Ransomware: Interesting recommendation from the FBI here regarding ransomware. Of course the best solutions are regular backups … and obviously not getting infected in the first place. (continued here)
First Step Towards Relevant Actionable Threat Intel: Rick Holland published a nice blog post recently covering how to maximize your investment in threat intelligence providers. He discussed the traditional intelligence lifecycle followed by several questions to ask vendors during your evaluation process. But by far the most important part of the article was his suggestion of first collecting and analyzing data from your own environment. This type of analysis will produce the most relevant of any intelligence you can buy from a third-party. (continued here)
Learning to Code with Hopscotch (+ a bonus podcast): We’ve talked about Scratch before as an excellent application for kids to start learning to programming in. From any computer kids can login to the Scratch site and create their own games and other applications by setting parameters in “function blocks” and sequencing these units together through an intuitive drag-and-drop interface. (continued here)
Hope everyone had a wonderful week! Have a great weekend!