Dana Ledford

JPCert Details on Event Tracing Over EventLog for Windows Forensics The EventLogs have long been the go-to source for incident investigators in the realm of Windows operating system forensics. However, these logs often fall short when it comes to detecting suspicious behavior, necessitating the use of additional audit logs or tools like Sysmon. Enter Event Tracing for Windows (ETW), a powerful yet often overlooked feature that offers a more comprehensive approach to Windows forensics. ETW is a robust system designed to manage events generated by the kernel and processes. Initially created for application debugging, it has evolved into a crucial component for collecting and managing EventLogs. Stay Connected to Sidharth Sharma, CPA, CISA, CISM, CFE, CDPSE for content related to Cyber Security. #CyberSecurity #JPMC #Technology #InfoSec #DataProtection #DataPrivacy #ThreatIntelligence #CyberThreats #NetworkSecurity #CyberDefense #SecurityAwareness #ITSecurity #SecuritySolutions #CyberResilience #DigitalSecurity #SecurityBestPractices #CyberRisk #SecurityOperations 

3

I recently received a copy of Packt Publishing’s Unveiling the NIST Risk Management Framework: A practical guide to implementing RMF and managing risks in your organization by Thomas M. This guide breaks down using and implementing a risk management framework within your organization. Understanding the risks at the organizational and technical level are the first steps in managing and monitoring the vulnerabilities and threats of your organization. This book breaks down the NIST RMF in a manner that allows you to go step by step through the process. These steps allow you to build a risk aware organization from top to bottom.  NIST makes documents available at no charge, including the NIST SP 800-37 v2, which this book is based. The book breaks down this document and is an excellent accompanying guide to the document. Chapter 9 and 10 are particularly helpful with guidance for the RMF for cloud implementation and use case scenarios, respectively. For anyone that wants to understand how to implement a risk management framework within your organization, I highly recommend this book. Pick up your copy here: https://packt.link/689vW Kamalpreet Sahni

17

1 Comment

🚀🔍 More Insights from #Identiverse ! 🔍🚀 Attended some insightful keynote sessions this morning, each shedding light on the future of digital identity and security. Here’s a recap of the highlights: 🔹 John Pritchard, Ph.D., Chief Product Officer, Radiant Logic   John emphasized the importance of data in AI and its impact on identity. Clean, reliable data is crucial for predictive power and effective risk management. He introduced the concept of Identity Observability and discussed how AI can uncover patterns, anomalies, and outliers, enhancing decision-making and bolstering an Identity-first security strategy. Remember, AI is only as good as the data we feed it! 🔹 Pamela Dingle, Director of Identity Standards, Microsoft   Pam covered the critical standards shaping our industry: SAML, SCIM, OAuth, and MFA. She stressed the need for a shared security context across clouds, domains, and devices, and the importance of takeover resistance and secure-by-design principles. Pam also encouraged us to engage more in the identity discourse through blogging and community interaction. I was fortunate enough to be introduced to Pam later in the morning by Eve Maler and Ed Pascua C-CISO, CISSP. Pam has a phenomenal vision for all things related to IAM. 🔹 Brad Carr, Executive, Innovation & Partnerships, NAB (National Australia Bank)   Brad drew parallels to historical business models, highlighting the need for constant evolution. He explored the future of identity-enabled payments and how AI can transition us from reactive to proactive security measures. It’s all about staying ahead in a rapidly changing landscape of humans, bots, AI agents, and fraudsters. Inspired by these sessions, I’ve added a new track to my album "Identity Engine: Identiverse Beats of 2024". Presenting Track 5 - Standards of Tomorrow - a fusion of R&B and Pop. Watch the full video (🎶Sound On🎶) below and let me know your thoughts! If you missed my previous tracks, check them out here: Track 1 - Lights of Identiverse - Pop Rock Genre   https://lnkd.in/gDYYVcgP Track 2 - Trust in the Fields: Data Sharing in Agriculture - Country Genre   https://lnkd.in/g8igzmPq Track 3 - Untangling the Web - Piano Genre   https://lnkd.in/geuX7b2F Track 4 - Powering Our Lives: The Engine of Trust - Soft Rock/Adult Contemporary   https://lnkd.in/gRjtNfbZ Track 5 - Standards of Tomorrow Track 6 - Bankers Navigating the Digital Sea - 80's Rock https://lnkd.in/ghirB2MP Track 7 - Digital Warriors - 80's Rock   https://lnkd.in/g98h2BWK Let’s continue exploring and innovating in the world of digital identity together! 🚀 👉 Comment, repost, and follow my updates for more fun and insights from the sessions I attend! #Identiverse #IdentityManagement #CyberSecurity #IAM #DigitalIdentity #AI

16

1 Comment

Ensuring compliance with Payment Card Industry (PCI) standards is a critical part of securing Application Programming Interfaces (APIs), and the sensitive information they handle. 💰 Interested in learning more about how YOU can protect YOUR organization? 🔐✅ Register for this APIsec University “API Security for PCI Compliance” course, taught by expert, Dan Barahona. https://lnkd.in/e_cPpAgt ⭐️ The course covers the following topics. 👉Why API Security 👉PCI Overview 👉Data Security Standard 👉Reviewing the DSS 4.0 Requirement 👉Best Practices #cybersecurity #artificialintelligence #APIsec

5

Getting Ready for PCI Secure Software Standard - A Vendor And A Penetration Tester Perspective. Learn the key differences between traditional application pentest and this standard security tests and how to prepare for the assessment Learn more in my session at @PCI Security Standards Council‘s #PCIEUCM24 ➡ https://lnkd.in/du86PcDM

31

Don't miss out on the 2024 PCI DSS 4.0 Training by ISACA Middle TN! Enhance your knowledge of data security standards on July 31st at 12:00 PM. Link in bio for more details and to get tickets. #ISACA #PCIDSS #Training #DataSecurity #MiddleTN

11

1 Comment

Please join us this Thursday, for an informative webinar surrounding how to align your business goals with the complexities of GRC! Our panel of experts (Cat Hammond, CISSP, GSLC, Mike Ellestad, and Les Terrell) will be discussing the latest "learns" from real world implementation and documentation. Register today! Registration link: https://lnkd.in/gMq5a6je #dfars #cybercommunity #dod #techinovation #cyberdefense #infosec #cyber #defense #cmmc #cissp #cism #cis #nist #grc #secops #msp #mssp #cybersecurity

2

Please join us this Thursday, for an informative webinar surrounding how to align your business goals with the complexities of GRC! Our panel of experts (Cat Hammond, CISSP, GSLC, Mike Ellestad, and Les Terrell) will be discussing the latest "learns" from real world implementation and documentation. Register today! Registration link: https://lnkd.in/gMq5a6je #dfars #cybercommunity #dod #techinovation #cyberdefense #infosec #cyber #defense #cmmc #cissp #cism #cis #nist #grc #secops #msp #mssp #cybersecurity

14

2 Comments

Please join us this Thursday, for an informative webinar surrounding how to align your business goals with the complexities of GRC! Our panel of experts (Cat Hammond, CISSP, GSLC, Mike Ellestad, and Les Terrell) will be discussing the latest "learns" from real world implementation and documentation. Register today! Registration link: https://lnkd.in/gMq5a6je #dfars #cybercommunity #dod #techinovation #cyberdefense #infosec #cyber #defense #cmmc #cissp #cism #cis #nist #grc #secops #msp #mssp #cybersecurity

1

“Expanded Identity Proofing Models. The Draft Guidelines offer a new taxonomy and structure for the requirements at each assurance level based on the means of providing the proofing, whether the means are remote unattended proofing, remote attended proofing (e.g., videoconferencing), onsite unattended (e.g., kiosks), or onsite proofing.” #nist #cybersecurityguidelines

1

Please join #SilverSky in a webinar sponsored by CUNA Strategic Services as Tom Neclerio, SilverSky’s CISO, reviews the benefits of using Continuous Validation Testing to improve your Credit Union’s cybersecurity posture. Tom will cover how this improved testing works and how it better protects against new and known vulnerabilities and they key fact that we want to find them as early as possible. https://lnkd.in/evrgXCwQ #CyberSecurity #CreditUnions

4

🔐 Haven't had the chance to review NIST CSF 2.0? Then join us April 24th as we dive into the latest changes and highlight key components for financial institutions! We’ll dive into cybersecurity defense strategies, governance essentials, and more. Secure your spot today!: https://hubs.ly/Q02rp_690 #NISTCSF #Cybersecurity #FinancialInstitutions

1

New Case Study on the TG Website! 📰 How did Triden Group help this SoCal Accounting firm achieve #SOC2 Compliance? Click the link and read all about it! #Cybersecurity #Compliance #PII #protectingpeople https://lnkd.in/gT5cAqWi

5

Join your peers at the #BayArea CyberRisk CISO Dinner on Tuesday, August 20, 2024 presented by your Bay Area CISO Leadership Board, Brent Conran, CISO of Intel Corporation , Malcolm Harkins, CSTO of HiddenLayer, Jacki Monson, CISO & CPO of Sutter Health, Vitaliy Panych, CISO of State of California, Leda Muller, CISM, CISO & CPO of Stanford University, and Krishnan Chellakarai, CISO of Gilead Sciences at El Prado. Apply now to network with the industry's top #CISOs and #CybersecurityExecutives during an intimate dinner and roundtable discussion on Mitigating and Responding to Incidents. Every cybersecurity leader must adapt their approach to what makes their organization competitive in the marketplace—especially as it relates to building the relationships and processes that streamline responding to a major incident. In this collaborative discussion, local security leaders share insights on preventing and responding to incidents. Discuss: • Building relationships and processes to ease decision making • Improving key technologies to mitigate risk • Identifying key attack vector Interested in learning more before you apply? Reach out to your community cultivators, Drew Klinsing and Parham Eftekhari. CyberRisk Alliance #CISOcommunity #collaboration #networkingevent #cybersecurity #networking #CRAEvents

10

Join your peers at the #BayArea CyberRisk CISO Dinner on Tuesday, August 20, 2024 presented by your Bay Area CISO Leadership Board, Brent Conran, CISO of Intel Corporation , Malcolm Harkins, CSTO of HiddenLayer, Jacki Monson, CISO & CPO of Sutter Health, Vitaliy Panych, CISO of State of California, Leda Muller, CISM, CISO & CPO of Stanford University, and Krishnan Chellakarai, CISO of Gilead Sciences at El Prado. Apply now to network with the industry's top #CISOs and #CybersecurityExecutives during an intimate dinner and roundtable discussion on Mitigating and Responding to Incidents. Every cybersecurity leader must adapt their approach to what makes their organization competitive in the marketplace—especially as it relates to building the relationships and processes that streamline responding to a major incident. In this collaborative discussion, local security leaders share insights on preventing and responding to incidents. Discuss: • Building relationships and processes to ease decision making • Improving key technologies to mitigate risk • Identifying key attack vector Interested in learning more before you apply? Reach out to your community cultivators, Drew Klinsing and Parham Eftekhari. CyberRisk Alliance #CISOcommunity #collaboration #networkingevent #cybersecurity #networking #CRAEvents

4

Outpacing Cloud Attackers with GenAI: Advanced AI Strategies for Rapid Threat Detection and Response Earn CPE credits while enhancing your knowledge on leveraging AI for cloud defense. Personally the more I hear multiple perspectives of how AI can be used in whole or in part as a defensive measure, the more I learn of the vast possibilities. I’m joining this webinar as I sense it will be quite valuable in enhancing my personal knowledge.  Register here: https://lnkd.in/g4AF36jQ #CyberSecurity #AI #CloudSecurity #ThreatDetection #Sysdig #Webinar #TechInnovation #InfoSec #CPECredits

10

3 Comments