Episode 30: Joff Thyer on the Threat Hunter's Mindset and Making the Most of Penetration Testing

Update: 2017-01-09

Description

The always-entertaining Joff Thyer of Black Hills Information Security shares his insights on threat hunting in the enterprise and gives advice on how information security leaders and teams can get maximum benefit from penetration tests -- from preparation and documentation to teaching moments and after-action items. We also take on more Yahoo! follies, the ongoing drama that is vendor vulnerability reporting, and the OTHER Russian hack -- the Methbot criminal enterprise stealing millions in video advertising revenues.

Comments

Top Podcasts

The Best New Comedy Podcast Right Now – June 2024 The Best News Podcast Right Now – June 2024 The Best New Business Podcast Right Now – June 2024 The Best New Sports Podcast Right Now – June 2024 The Best New True Crime Podcast Right Now – June 2024 The Best New Joe Rogan Experience Podcast Right Now – June 20 The Best New Dan Bongino Show Podcast Right Now – June 20 The Best New Mark Levin Podcast – June 2024

In Channel

Episode 41: Rapid 7 Founder Chad Loder on the Evolution of Vulnerability Management and the Mistakes We Make in Infosec Training

2017-08-0744:48

Episode 40: Mark Clancy on the Petya-NotPetya Attacks and Tough Choices in Enterprise Defense

2017-06-2826:14

Episode 39: Jon Condra on Dark Web Threats and Nation-State Attacks

2017-06-1428:44

Episode 38: Dave Shackleford on NIST Changes, WannaCry and Trump's Cyber Order

2017-05-2229:39

Episode 37: Call Center and Phone Fraud with Pindrop's David Dewey

2017-05-1222:20

Episode 36: Kevin Beaver on the Verizon DBIR and Our Perennial Security Shortcomings

2017-05-0530:09

Episode 35: George Gerchow on CASBs, Cloud Services Providers and the Reality of Security as Code

2017-04-1430:35

Episode 34: Raffy Marty on the Truth About Machine Learning, AI and Advanced Analytics in Infosec

2017-03-3036:38

Episode 33: Larry Walsh on Making Good MSSP Choices and Avoiding Vendor FUD in Pursuit of Better Security

2017-02-2344:24

Episode 32: David Kolb on the Soft Skills That Spell Infosec Success

2017-02-1036:47

Episode 31: Rich Mogull on 'Tidal Forces' Set to Upend Information Security

2017-01-2443:31

Episode 30: Joff Thyer on the Threat Hunter's Mindset and Making the Most of Penetration Testing

2017-01-0932:51

Bonus Episode: Russia Hacking: What Enterprise Defenders Need to Know

2017-01-0319:47

Episode 28: Chris Poulin on Conscripted Cameras, Connected Cars and Learning to Love the IoT

2016-12-1545:58

Episode 27: Aaron Turner on Ransomware, Privileged ID Management, The Killing of EMET, and the Internet of Criminal Things

2016-12-0843:45

Episode 26: Kevin Johnson on Pentests, Incident Response, Infosec Leadership and Sweating for Charity

2016-10-0339:11

Episode 25: Dave Shackleford on DDoS, Passwords, and Web App Testing With a UK Flair

2016-09-2140:04

Episode 24: Dave Kennedy on Passwords, Pen Tests, Purple Teams and DerbyCon

2016-09-0846:46

Episode 23: Ken Van Wyk on Shadow Brokers, Incident Response Exercises and Why Teams Struggle With Threat Modeling

2016-08-2438:33

Episode 22: Security Ledger Chief Paul Roberts on Giving Voice to Securing the Internet of Things

2016-08-0434:07

00:00

Episode 30: Joff Thyer on the Threat Hunter's Mindset and Making the Most of Penetration Testing

#box-pro-ellipsis-173609402566352{-webkit-line-clamp:2;}Episode 30: Joff Thyer on the Threat Hunter's Mindset and Making the Most of Penetration Testing

Episode 30: Joff Thyer on the Threat Hunter's Mindset and Making the Most of Penetration Testing

Episode 30: Joff Thyer on the Threat Hunter's Mindset and Making the Most of Penetration Testing