@shellsharks@infosec.pub avatar

shellsharks

@shellsharks@infosec.pub

Infosec researcher | writes @ shellsharks.com

Mastodon: @shellsharks

This profile is from a federated server and may be incomplete. View on remote instance

shellsharks OP Mod ,
@shellsharks@infosec.pub avatar

What are you trying to do with it?

shellsharks OP Mod ,
@shellsharks@infosec.pub avatar

@stevedidwhat_infosec dropped some great resources. I also typically direct people to this resource I wrote a few years back in terms of "getting into infosec" https://shellsharks.com/getting-into-information-security.

shellsharks OP Mod ,
@shellsharks@infosec.pub avatar

Meow 😸

shellsharks OP Mod ,
@shellsharks@infosec.pub avatar

Great advice. Thanks!

shellsharks OP Mod ,
@shellsharks@infosec.pub avatar

Had not heard of this. Got some reading to do 👍

shellsharks OP Mod ,
@shellsharks@infosec.pub avatar

Good luck getting those new resources/headcount!

shellsharks OP Mod ,
@shellsharks@infosec.pub avatar

CIS Critical Security Controls and/or NIST CSF as frameworks to help put you in the right mindset. But so much of what you should do first depends on some variables imo.

  • What is your budget?
  • What already exists security-wise at your company?
  • What level of executive support do you have? Can you enact real change?
  • What is most important to the company? i.e. "Crown Jewels"
  • What does the network/infrastructure/endpoint environment look like?

Once you answer these questions then you can get a better idea of where to spend the limited time/money you have. The CSC will likely tell you to tap into an inventory and do some form of Vulnerability Management. This is a decent idea as you need to know what you are trying to protect and also catch low-hanging fruit via vuln scanning. Instrumenting endpoints (EDR) or gaining visibility into your infra is also important but which do you pick first? Crowdstrike is awesome but expensive. No one solution is a silver bullet.

Have a plan, create a reasonable roadmap, figure out your companies risk threshold, ask for more resources depending on what level of risk they're willing to accept and how quickly they want things implemented.

shellsharks OP Mod ,
@shellsharks@infosec.pub avatar

Another part of my Lemmy <--> Mastodon experimentation. The Fediverse is cool but it is also a little confusing 😅

shellsharks OP Mod ,
@shellsharks@infosec.pub avatar

Oh cool. I've been thinking of getting one too. But I already have too many projects and too much work and not enough time 😩 (not that that's ever stopped me from buying stuff before...). Where do you write?

shellsharks OP Mod ,
@shellsharks@infosec.pub avatar

What field is it?

shellsharks OP Mod ,
@shellsharks@infosec.pub avatar

What are you normally up to?

shellsharks OP Mod ,
@shellsharks@infosec.pub avatar

Complaints are more than welcome. and omg yes I've seen this happen before. Typically a result from ONE bad interaction with ONE engineer/analyst who messed something up and now everyone has to be babied 🙄.

shellsharks OP Mod ,
@shellsharks@infosec.pub avatar

Im not sure if your situation is "normal", but it may be less rare than you think. Chaos can be a ladder, but it can also result in you just being overworked and making no real progress technically or professionally. Given the situation I would probably just look for what else you can find and jump on anything that seems promising, but in the mean time keep your head down and get your job done and try to make the best of the situation. Do you feel your situation is stable in terms of job security?

shellsharks OP Mod ,
@shellsharks@infosec.pub avatar

On one hand, the market is such that it might be too much work / too depressing to passively hunt for a plan B. On the other, it's probably good to have an idea of what a plan B could be...

shellsharks OP Mod ,
@shellsharks@infosec.pub avatar

I haven't been looking so I can't speak with first-hand xp. From others accounts on socials it seems like it's kinda rough but everyone has different experiences. Good to hear some potentially optimistic news for a change though so I'll take it.

shellsharks OP Mod ,
@shellsharks@infosec.pub avatar

niiiiice!

shellsharks OP Mod ,
@shellsharks@infosec.pub avatar

Ah cool. I found it relatively challenging when I did it. I used aCloudGuru to prep.

shellsharks OP Mod ,
@shellsharks@infosec.pub avatar

Honestly that's pretty much all I used. In aCloud they link to some AWS-native resources, best-practices guides, etc... but I winged it from there.

  • All
  • Subscribed
  • Moderated
  • Favorites
  • •
  • random
  • All magazines
    •