Collaborate Disseminate
It’s crazy how many (free!) OSS projects are popping up for threat and attack simulation! We are working on research about Breach and Attack Simulation (BAS) tools, and we’ll certainly mention these projects, buy I thought it would be valua… Continue reading From my Gartner Blog – Threat Simulation Open Source Projects
I don’t care if you use Hadoop or grep+Perl scripts. If you can demonstrate enough performance to do what you claim you can do, that’s what matters to me from a backend point of view. Now, can you show me that your tool does what it should … Continue reading From my Gartner Blog – Big data And AI Craziness Is Ruining Security Innovation
For a hobby that’s ostensibly all about reaching out to touch someone, ham radio can often be a lonely activity. Lots of hams build and experiment with radio gear much more than they’re actually on the air, improving their equipment iteratively. The build-test-tweak-repeat cycle can get a little tedious, though, especially when you’re trying to assess signal strength and range and can’t find anyone to give you a report.
To close the loop on field testing, [WhiskeyTangoHotel] threw together a simple ham radio field confirmation unit that’s pretty slick. It relies on the fact that almost every ham radio designed …read more
Continue reading Simple Decoder Serves as Solo Ham’s Test Buddy
Is there a need, or place for a “virtual patch analyst”?
If you look at our guidance on vulnerability management, you’ll see that one of the key components we suggest our clients to consider is preparing for mitigation actions, when t… Continue reading From my Gartner Blog – The Virtual Patch Analyst
While working on our research for testing security practices, and also about BAS tools, I’ve noticed that a common question about adding more testing is “why not putting some real effort in doing the basics instead of yet another security t… Continue reading From my Gartner Blog – It’s Not (Only) That The Basics Are Hard…
Anton beat me this time on blogging about our new research, but I’ll do it anyway
Our document about Security Orchestration, Automation and Response (SOAR) tools includes some interesting findings. Anton provided some quotes on his post, but I&#… Continue reading From my Gartner Blog – SOAR paper is out!
Microsoft is bringing support for IFTTT and new smart home devices to Cortana on Windows 10, iPhone, Android, and other devices.
The post Cortana Now Works With Automation Service IFTTT, More Smart Home Devices appeared first on Thurrott.com.
Continue reading Cortana Now Works With Automation Service IFTTT, More Smart Home Devices
With our research on testing security methods and Breach and Attack Simulation tools (BAS), we ended up with an interesting discussion about the role of the pentest. I think we can risk saying that pentesting, as it is today, will cease to exist (IR… Continue reading From my Gartner Blog – BAS and Red Teams Will Kill The Pentest
As Anton just posted, the new version of the famous “How to Work With an MSSP to Improve Security” has just been published. I’m very happy to become a co-author (together with Anton and Mike Wonham) on this document, as it is usually … Continue reading From my Gartner Blog – The “working with an MSSP” Tome Is Here
Posting about updated documents is often boring, but this time I’m talking about my favorite Gartner document, as usual, co-authored with Anton: “How to Develop and Maintain Security Monitoring Use Cases”!
This document described… Continue reading From my Gartner Blog – Security Monitoring Use Cases, the UPDATE!