In this episode we talk about the insider. Because right now, there is nothing more important for you to detect. Why? Because you could have an insider. You could also have a compromised user account. From a detection standpoint, they would be indistinguishable.


Links for this episode:

  • Snowden
  • File Audit
  • Limit Login
  • Offensive Countermeasures at Black Hat
    -strandjs

    Video Feeds:
  • About the author