7 Minute Security

Mar 30, 2022

Welcome to another fun tale of pentest pwnage! This one isn't a telling of one single pentest, but a collection of helpful tips and tricks I've been using on a bunch of different tests lately. These tips include:

• I'm seeing nmap scans get flagged a bit more from managed SOC services. Maybe a "quieter" nmap scan will...

Mar 23, 2022

Today we're joined by our friends Christopher Fielder and Jon Crotty from Arctic Wolf to talk about their interesting report on The State of Cybersecurity: 2022 Trends (note: you can get some of the report's key points here without needing to provide an email address). The three of us dig in to talk about some of the...

Mar 17, 2022

Today I'm sharing some first impressions of the Rapid 7 InsightIDR as kind of a teaser for an eventual new chapter in our Desperately Seeking a Super SIEM for SMBs series. Disclaimer: remember these are first impressions. There may be some missed detections I talk about today that are a me problem and not...

Mar 11, 2022

Today we're continuing our series focused on [owning a security consultancy], talking specifically about:

• How not to give up on warm sales leads, even if they haven't panned out for 5+ years!

• Some cool Mac tools that help me manage 7MS - such as Craft and OmniFocus

• A sneak peek at a SIEM vendor that will soon be...

Mar 2, 2022

Today we share some first impressions of Tailscale, a service that advertises itself as "Zero config VPN. Installs on any device in minutes, manages firewall rules for you, and works from anywhere." Is it really that cool and easy? Listen to today's episode to find out!