Last week, our community delved into practical training methods designed to boost incident response (IR) speed and enhance documentation processes. Discussions also centered around the nuances of BGP session configurations, specifically the use of TTL 255. Members shared experiences balancing patch service level agreements (SLAs) with compensating controls, and some lighter threads emerged, such as an amusing mishap involving encryption. Finally, there was a focus on the effectiveness of various cyber threat intelligence (CTI) courses and real-world detection engineering skills.
This Week’s Hot Topics
Training that improves IR speed and documentation
This thread explores how specific training approaches can optimize incident response times and improve the quality of documentation. Worth checking out if you’re involved in IR.
Read more here
Why do some BGP sessions use TTL 255
A deep dive into the BGP protocol, examining why some sessions opt for a TTL of 255. This technical discussion is key for network engineers.
Read more here
Balancing patch SLAs with compensating controls
Participants discuss strategies for managing patch SLAs while utilizing compensating controls effectively. A must-read for those in patch management.
Read more here
Accidentally encrypted my grocery list
A lighthearted thread about a common encryption mishap, offering a reminder of the importance of managing encryption keys carefully.
Read more here
Which CTI courses actually improve detections
This conversation evaluates the impact of CTI courses on detection capabilities. Valuable for anyone looking to upskill.
Read more here
Earliest malware with a signed driver
A historical look at malware evolution, focusing on early instances of malware using signed drivers. Fascinating for cybersecurity historians.
Read more here
Small control, huge blast radius
A discussion on how seemingly minor controls can have significant impacts. This is crucial for risk assessment professionals.
Read more here
eBPF sensors in segmented networks
Exploring the use of eBPF sensors in enhancing network security across segmented environments. A technical read for network security experts.
Read more here
Which courses sharpen real-world detection engineering
Evaluates courses that effectively enhance detection engineering skills in practical settings. Perfect for those refining their technical prowess.
Read more here
Looking forward to another engaging week of discussions. Keep sharing your insights and expertise.