7 Minute Security

Latest Episodes:

7MS #500: Interview with John Strand Dec 22, 2021

Show notes

HAPPY 500 EPISODES, FRIENDS! That's right, 7MS turned 5-0-0 today, and so we asked John Strand of Black Hills Information Security to join us and talk about all things security, including the John/BHIS superhero origin story, the future of pentesting, the (perceived) cybersecurity talent shortage, how to get started with good security practices in your organization, and more! P.S. check out John's first visit to the show here.

7MS #499: Desperately Seeking a Super SIEM for SMBs - Part 6 Dec 16, 2021

Show notes

Today we have some cool updates on this SIEM-focused series we've been doing for a while. Specifically, I want to share that one of these solutions can now detect three early (and important!) warning signs that bad things are happening in your environment:

ASREPRoasting
WDigest flag getting flipped (reg add HKLM\SYSTEM\CurrentControlSet\Control\SecurityProviders\WDigest /v UseLogonCredential /t REG_DWORD /d 1)
Restricted admin mode getting enabled (reg add HKLM\System\CurrentControlSet\Control\Lsa /t REG_DWORD /v DisableRestrictedAdmin /d 0x0 /f) - see n00py's blog for more info

7MS #498: Securing Your Mental Health - Part 2 Dec 13, 2021

Show notes

Hi everybody, today we're continuing a series we started way back in June called Securing Your Mental Health. Today I talk about some easy and relatively cheap things I'm doing to try and shutdown negative thoughts, punch imposter syndrome in the face, and be an overall happier and more positive person.

7MS #497: The Stress and Satisfaction of Offering Live Security Training Dec 02, 2021

Show notes

Hey friends, today I'm giving you a peek behind the curtain of our Light Pentest LITE training to talk about the software/hardware we use to make it sing, the growing pains - and OMG(!) moments - that forced us to build in more infrastructure redundancy, and the cool (and expensive!) cloud options we're considering to offer a self-paced version of the course.

7MS #496: Tales of Pentest Pwnage - Part 30 Nov 24, 2021

Show notes

Today's tale of pentesting has a bunch of tips to help you maximize your pwnage, including:

The new Responder DHCP poisoning module
All the cool bells and whistles from CrackMapExec which now include new lsass-dumping modules!
Speaking of lsass dumping, here's a new trick that works if you have Visual Studio installed (I bet it will be detected soon).

I close out today's episode with a story about how my Cobalt Strike beacons got burned by a dating site!

7MS #495: Desperately Seeking a Super SIEM for SMBs - Part 5 Nov 17, 2021

Show notes

Today we continue our SIEM/SOC evaluation series with a closer look at one particular managed solution and how it fared (very well) against a very hostile environment: the Light Pentest LITE pentesting course! Spoiler alert: this solution was able to detect:

RDP from public IPs
Password spraying
Kerberoasting
Mimikatz
Recon net commands
Hash dumping
Hits on a "honey domain admin" account
Users with non-expiring passwords
Hits on the SSH/FTP/HTTP honeypot

7MS #494: Interview with Josh Burnham of Liquid Web Nov 10, 2021

Show notes

7MS #493: 7MOIST - Part 2 Nov 04, 2021

Show notes

Hey, remember back in episode #357 where we introduced 7MOIST (7 Minutes of IT and Security Tips)? Yeah, me neither :-). Anyway, we're back with the second edition of 7MOIST and have some cool pentesting and general IT tips that will hopefully make your life a little awesome-r:

Stuck on a pentest because EDR keeps gobbling your payloads? SharpCradle might just save the day!
CrackMapExec continues to learn new awesome tricks - including a module called slinky that plants hash-grabbing files on shares you have write access to!
Browsing 17 folders deep in Windows Explorer and wish you could just pop a cmd.exe from right there? You can! Just click into the path where you're browsing, type cmd.exe, hit Enter and BOOM! Welcome to a prompt right at that folder!

7MS #492: Tales of Pentest Pwnage - Part 29 Oct 28, 2021

Show notes

Hello friends! We're long overdue for a tale of pentest pwnage, and this one is a humdinger! It's actually kind of three tales in one, focusing on pentesting wins using:

Manual "open heart surgery" on the root of the Active Directory domain
The new totally rad DHCP poisoning module of Responder
An opportunity to abuse GPOs with SharpGPOAbuse (P.S. we talked about this tool about a year ago in episode 441)

7MS #491: Interview with Louis Evans of Arctic Wolf Oct 20, 2021

Show notes

Today we're joined by Louis Evans of Arctic Wolf to talk about all things cyber insurance, including:

History on cyber insurance - who's buying it, what it does and doesn't cover, and when it started to be something you didn't want to leave home without
What are insurance companies asking/demanding of customers before writing a cyber insurance policy?
What basic things organizations can do to reduce malware/ransomware incidents (whether they are considering a cyber insurance policy or not)?
How do I evaluate the various insurance carriers out there and pick a good one?

Our TOPPODCAST Picks

Follow Us

Stay Connected

Related Podcasts

Links

Stay Connected