Security

Balancing Stability and Agility

06/11/18 “The price of reliability is the pursuit of the utmost simplicity.” C.A.R. Hoare, Turing Award lecture. Software and computers in general are inherently dynamic and not of…

I Beat Them to Firing Me! Part Two: Fight Back

05/17/18 How to use network configuration, change, and compliance management (NCCCM) and other monitoring software in response to an actual security breach. If you have not read pa…

I Beat Them to Firing Me: A Story of Corporate Sabotage

05/17/18 Why network configuration, change, and compliance management (NCCCM) is a must Inspired by former Citibank employee sentencing We’ve all heard horror stories about the dis…

5 Fundamental Strategies for Cybersecurity

04/03/18 Here’s an interesting article from my colleague Joe Kim, in which he offers suggestions to reduce cybersecurity vulnerabilities. Agencies should focus on the basics to pro…

Out of Office: Identifying & Managing Risk

03/13/18 Risk Management is an important part of IT. Being able to identify risks and remediation options can make a huge difference if or when disaster strikes. If you’ve moved pa…

Windows Workstation Logs – Integration

03/09/18 In the final blog of this series, we’ll look at ways to integrate Windows event logs with other telemetry sources to provide a complete picture of a network environment. T…

Microsoft Workstation Logs – Configuration

02/22/18 Over the last three posts, we’ve looked at Microsoft event logging use cases and identified a set of must-have event IDs. Now we’re ready to put our security policy in pla…

Building a Solid Security Foundation to Support the NIST Framework

02/07/18 Henceforth, the agencies are expected to follow a five-step process: Identify Protect Detect Respond Recover This creates near-term challenges with potentially long-term b…

Windows Workstation Logs – Increasing Visibility

02/07/18 Anyone who has looked at the number of event IDs assigned to Windows events has probably felt overwhelmed. In the last blog, we looked at some best practices events that a…

An A-B-C Approach to Improving Security Compliance

01/30/18 Security is always an important topic with our government customers. Here’s an applicable article from my colleague, Joe Kim, in which he offers some tips on compliance. E…

Microsoft Workstation Logs – Focus on What’s Important

01/25/18 Can you have too much of a good thing? Maybe not, but you can certainly have too much of the wrong thing. In my first blog, I introduced the idea that Microsoft event logg…

Microsoft Workstation Logs – An Introduction

01/18/18 We’ve all heard the saying, “What you see is what you get.” Life isn’t quite so simple for those focused on security, as what you don’t see is more likely to be what you g…