Unlocking Cyber Education with John Hammond

Unlocking Cyber Education with John Hammond

John Hammond, Senior Security Researcher at Huntress Labs and self-described cybersecurity education enthusiast, joins us as we continue our discussion of red team legends. With a focus on content creation this week, John discusses his success with his YouTube channel, his passion for showcasing authentic and accessible educational materials online, and his advice for creating content safely and spreading awareness with not only a red team or blue team mindset, but with a purple team perspective.

Timecode Guide:

[01:37] Understanding the impact of content creators in the cybersecurity community, especially when it comes to YouTube educational content

[06:58] Becoming a successful YouTube creator through consistently posting hacking content and ignoring the stereotype of “overnight success”

[13:28] Combining his role as a cybersecurity educator with his security research at Huntress to explore exploits and have real life experience with what he teaches

[16:47] Focusing on the blue side of the house as someone with red team experience, and understanding how to use a tool like PlexTrac to create a collaborative purple team

[21:13] Being mindful of the impact he has through sharing this knowledge and understanding the risk of cybersecurity educational materials falling into “the wrong hands”

Sponsor Links:

Thank you to our sponsors Axonius and PlexTrac for bringing this season of HVR to life!

The Axonius solution correlates asset data from existing solutions to provide an always up-to-date inventory, uncover gaps, and automate action — giving IT and security teams the confidence to control complexity. Learn more at axonius.com/hackervalley

PlexTrac is pleased to offer an exclusive Red Team Content Bundle for Hacker Valley listeners. This bundle contains both our "Writing a Killer Penetration Test Report" and "Effective Purple Teaming" white papers in ONE awesome package. Head to PlexTrac.com/HackerValley to learn more about the platform and get your copy today!

What is your origin story for wanting to educate other hackers?

Like many of us, John started his journey Googling how to become a hacker. As he gained more knowledge about the specific skills involved in hacking, John never left the internet behind, always seeking out videos and articles explaining new and emerging content. Inspired by those who created that content in the first place, he started his own YouTube channel, simply titled John Hammond, as has spent years cultivating a consistent hacker audience.

“Along the way, creating content and helping educate others through YouTube is really my main stage platform and has been just a passion project, a labor of love, and something fun along the way.”

What feelings do you get looking back on the YouTube content you’ve created so far?

John prioritizes clarity, transparency, and honesty in what he does, and he’s not afraid to show some humbleness, too. Overall, John is thankful for his YouTube success and the impact it had on the cybersecurity community. No matter what he’s showing in his videos, he prefers to keep things honest, to show where he’s made mistakes, and to accept criticism and advice from other hackers and offensive cybersecurity professionals that see his work.

“I'm showcasing just my computer screen, maybe you get a little face cam and a circle on the bottom right, but it's like you're looking over my shoulder. You're seeing me showcase something raw, live, genuine, and authentic…It’s not all sexy, there’s a lot of failure in hacking.”

Have you ever considered focusing on the blue team or the defensive side of cybersecurity?

The majority of John's YouTube content and the work he does in his role at Huntress Labs heavily involves the red team and offensive side of cyber. However, John is a huge advocate for the blue team and the red team collaborating and communicating better. Through making more concepts in cybersecurity accessible through educational content like John’s own videos, he hopes we can continue to bridge the gap and achieve that perfectly mixed purple team.

“We're all playing in concert. As one team sharpens their skills in the red team pen test, then it's up to the blue team to figure that out. What did they do? How can we better detect it? How can we stop and mitigate that security threat?”

What advice do you have for red team content creators that want to share content and spread awareness safely?

With the impact that he’s had and the content he’s put out onto the internet, John is no stranger to seeing the negative side of cybersecurity knowledge being more accessible than ever before.

Still, he wants to make sure content creators understand the value of transparency and honesty in what they do. Instead of fearing what could be, cultivate a community around making this level of knowledge and security available to everyone.

“Share, be transparent, be forthcoming. I know there are a lot of conversations about gatekeeping in cybersecurity, but there shouldn't be that. I understand there's grit and determination and hard work to do all the things that you're doing, but be friendly and be transparent and honest.”

----------

Links:

Check out our guest, John Hammond, on YouTube and LinkedIn.

Keep up with Hacker Valley on our website, LinkedIn, Instagram, and Twitter.

Follow Ron Eddings on Twitter and LinkedIn.

Catch up with Chris Cochran on Twitter and LinkedIn.

Continue the conversation by joining our Discord.

Jaksot(404)

Hacker Valley Blue Episode 2 - Jack Rhysider

Hacker Valley Blue Episode 2 - Jack Rhysider

Fan-favorite Jack Rhysider of the Darknet Diaries podcast joins Hacker Valley Studio hosts Ron and Chris for the second episode of Hacker Valley Blue! Jack joins the show again during an ideal season - one focused on threat intelligence - and this episode will focus on Jack’s past in the field of threat intelligence, as well as on a major issue faced daily by analysts in the field: that of managing bias. As the conversation begins, the group focuses on threat intelligence and Jack’s work in the field.  Jack has been pouring himself into his own podcast, leaning into the fact that threat intelligence is a form of knowing what has happened in the past by his sharing of stories.  Jack explains what has surprised him recently in his work, how he maintains a sharp sense of focus, and what sort of continuity he sees between the news-sharing of his current role and a more formal practitioner role within the field of threat intelligence.  Jack’s podcast work necessitates practical skill in his field, and demands an ability to share complex concepts through simple expression. The work also necessitates strong skills of managing bias, and it is to this topic that the group turns.  Jack makes a practice of putting aside negative personal feelings about a person and looking for areas of agreement with the individual.  This practice, along with his feedback loop and his efforts to listen to actual voices, help Jack to tell both sides of the stories he shares.  In discussing the counteraction of bias, Jack touches on concepts of assumptions, bias toward self, empathy, and humanization.   And as the conversation winds toward a close, listeners will hear about Jack’s use of audio books, balancing fact and listener interest, appealing to different audiences, and navigating questions of personal privacy.  1:40 - Listeners are introduced to Jack and the episode ahead. 4:13 - How is Jack currently thinking about storytelling? 8:40 - The group dives into some topics related to Jack’s work: his focus and need for practical skill. 12:37 - The conversation turns to the subject of bias. 28:28 - What is Jack doing for research today, and how does he navigate technical questions of storytelling? 36:35 - Finally, Jack and his hosts turn to considerations of personal privacy.   Links: Learn more about Hacker Valley Studio Support Hacker Valley Studio on Patreon Follow Hacker Valley Studio on Twitter Follow Ronald Eddings on Twitter Follow Chris Cochran on Twitter Learn more about Jack Rhysider Follow Jack on Twitter Learn more about Darknet Diaries Learn more about the episode sponsor, RiskIQ

1 Syys 202045min

Hacker Valley Blue Episode 1

Hacker Valley Blue Episode 1

Hosts Ron and Chris welcome you to today’s episode! This episode of Hacker Valley Studio is the start of a new season, Hacker Valley Blue, a series dedicated to threat intelligence, exclusively for listeners. The episode begins with Ron and Chris sharing their backgrounds in threat intelligence and cybersecurity. Chris picked intelligence as his job field in the United States Marine Corps, and eventually went on to The National Security Agency and United States Cyber Command. He focused on the how, who, and what of all the cyber-attacks happening at the time. Chris then went on to create his own company, and do consulting work in threat intelligence for over a decade. Ron has always had an interest in cybersecurity, and at 16 he found a mentor who took him under his wing in the trade. After a couple of years working in offensive attacks, he transitioned to a job building intelligence tools that dealt with threat data. While Chris focused more on the operational side of threat intelligence, Ron’s was more technical, and their experience converged well. Throughout the rest of the episode, you will hear about what threat intelligence can do for businesses. Ron and Chris discuss how analysts can build rapport with the employees and stakeholders using their intelligence, and what questions companies should ask of analysts for the best results. They do this by walking listeners through Chris’ EASY framework. 1:07 - The new season of Hacker Valley Blue is introduced. 3:43 - Chris shares his background in intelligence. 6:15 - Ron shares his background in intelligence 11:43 - What can threat intelligence do for an organization? 17:50 - The EASY Framework 18:41 - Elicit Requirements 21:40 - Asses Collection Plan 26:03 - Strive for Impact 30:24 - Yield the Feedback Links: Learn more about Hacker Valley Studio Support Hacker Valley Studio on Patreon Follow Hacker Valley Studio on Twitter Follow Ronald Eddings on Twitter Follow Chris Cochran on Twitter Learn more about the episode sponsor, RiskIQ

1 Syys 202041min

Episode 82 - What is Old is New Again with Brian Romansky

Episode 82 - What is Old is New Again with Brian Romansky

Hosts Ron and Chris welcome you to today’s episode! This episode of Hacker Valley Studio features Brian Romansky, the Chief Innovation Officer at Owl Cyber Defense. You will hear about his ideas, inventions, and how hardware is helping us in cybersecurity today.   The episode begins with Brian sharing his background, and journey into the cybersecurity space. He always knew he wanted to do something with technology and thought he may go into robotics. The transition into the cyber world was a natural one when he was working on a team that was moving mechanical postage metering to happen electronically. These machines were often trying to be hacked, and the team also began working on e-commerce and shipping platforms. From then, he continued to work on cybersecurity, data, and cryptography.   Today, at Owl Cyber Defense Brian works on cross domain solutions for the US Department of Defense, and other government organizations, as well as commercial customers. It gets him up in the morning because it combines many of the electrical and cryptography space that interests him, with hardware. His hope for the future, is that there is a paradigm shift in cybersecurity, making it less of a cat and mouse game by using hardware enforced mechanisms.   He doesn’t have a lot of free time, but as the episode wraps up, you will also hear about what Brian is interested in, and working on outside of work.   :29 CIO of Owl Cyber Defense, Brian Romansky is introduced to the show. 4:33 Brian shares his journey from electrical engineering to cybersecurity. 6:25 Brian explains the work he does today. 14:16 Brian hypothosizes on the future of cybersecurity 16:58 Brian answers the question “Is there an unhackable system?” 19:55 Advice for organizations relying more on technology during work from home. 27:48 What does Brian do outside of work?   Links: Learn more about Owl Cyber Defense Learn more about Brian Romansky Learn more about Hacker Valley Studio Support Hacker Valley Studio on Patreon Follow Hacker Valley Studio on Twitter Follow Ronald Eddings on Twitter Follow Chris Cochran on Twitter

24 Elo 202030min

Episode 81 - Communicating in a Crisis with Christopher Budd

Episode 81 - Communicating in a Crisis with Christopher Budd

Security and Privacy Expert and author, Christopher Budd, is welcomed to the Hacker Valley Studio podcast! You will hear some great communication tips and how to handle people who fear worst case scenarios during a crisis. He explains how to showcase your authority and credibility during a tough situation. He talks about traits that make someone great at handling these situations, the importance of temperament, and improvisation. In this episode, Christopher Budd shares his journey to becoming an expert in crisis communication. He spent ten years with the Microsoft Security Response Center. He has worked with other security and technology companies as a consultant and full-time employee. He says, “...and if I can sum up what it is I do best, I always say, I take awful news and make it just bad.” Christopher gives some examples of his communication approach. 1) He says he is upfront about news being bad news. He recommends getting credibility by leading with the truth. 2) He then explains reasons why it is a bad situation. 3) Finally, he explains reasons why the situation could be better than you think it might be. He explains that you are not only dealing with the situation itself but also peoples’ fears and projections of the situation. Christopher talks about different personality types and how they handle crisis management. He explains the importance of temperament, the ability to compartmentalize, and thinking about action steps. As the episode draws to a close, Christopher shares some of his thoughts on the workplace today and some of the changes in the COVID environment. He elaborates on topics like privacy and communication. He highlights how technology has allowed us to function as well as it has in the past few months. Links: Learn more about Hacker Valley Studio Support Hacker Valley Studio on Patreon Follow Hacker Valley Studio on Twitter Follow Ronald Eddings on Twitter Follow Chris Cochran on Twitter Follow Christopher Budd on Twitter Learn more about Christopher Budd Check out christopherbudd.com You can reach out to Christopher Budd at unimaginativelychristopher@christopherbudd.com Learn more about the MSRC Christopher Budd is published in Great Thinkers A-Z

18 Elo 202032min

Episode 80 - Leveraging MITRE ATT&CK with Chris Kennedy

Episode 80 - Leveraging MITRE ATT&CK with Chris Kennedy

In this episode of the Hacker Valley Studio podcast, hosts Ron and Chris speak with 25-year cybersecurity veteran Chris Kennedy.  Chris is the Chief Information Security Officer and the VP of Customer Success for AttackIQ, and he and the hosts discuss various topics related to cybersecurity and Chris’s background, with special focus on the MITRE ATT&CK framework The beginning of the episode centers on Chris Kennedy himself, as he provides background information on both himself and his company.  Chris’s career took many turns preparing him for his current role, with a few especially remarkable highlights: he was one of the first cybersecurity officers in the Marine Corps, worked for the world’s largest hedge fund, and was basically one of the first CISO's in tech.  As an executive, he saw how much he depended on the ecosystem of security tech, and he also saw how unreliable this technology was.  This realization paved the way for his move to AttackIQ.   Links: Learn more about Chris Kennedy and contact him at chris.kennedy@attackiq.com. Learn more about AttackIQ. Learn more about AttackIQ’s Academy. Learn more about MITRE ATT&CK. Learn more about MITRE ENGENUITY’s Center for Threat-Informed Defense. Learn more about Hacker Valley Studio. Support Hacker Valley Studio on Patreon. Follow Hacker Valley Studio on Twitter. Follow hosts Ron Eddings and Chris Cochran on Twitter.

9 Elo 202036min

Episode 79 - Finding our Genius with Laura Garnett

Episode 79 - Finding our Genius with Laura Garnett

In this very special episode, we brought back fan favorite Laura Garnett a world-renowned performance strategist, to examine us to see what makes us special. We finds our purpose, our power, and our core emotional conflict in less than an hour! You really see a master at work in this one.   Laura's Website: https://www.lauragarnett.com/ Laura's LinkedIn: https://www.linkedin.com/in/lauragarnett/ Laura's Twitter: https://twitter.com/garnettl

3 Elo 202059min

Episode 78 - Explaining Humans with Dr. Camilla Pang

Episode 78 - Explaining Humans with Dr. Camilla Pang

In this episode, we have the brilliant Dr. Camilla Pang author of the incredible book, "Explaining Humans." We dive into her life, neurodiversity, and her awesome book.   Dr. Pang's Instagram: https://www.instagram.com/millie_moonface/ Dr. Pang's Twitter: https://twitter.com/millzymai Dr. Pang's Book: https://www.amazon.com/dp/0241409608/ref=cm_sw_r_tw_dp_x_ug1hFbATW52TV

27 Heinä 202019min

Episode 77 - Meeting Life with Grace with Charles Nwatu

Episode 77 - Meeting Life with Grace with Charles Nwatu

In this episode, we bring back fan favorite Charles Nwatu! His first episode was met with some much praise and we think you will love this one too. We discuss meeting people with grace even if they aren't so kind to us, being black men in tech and in society, and dive into some personal stories as well.   Charles's Twitter: https://twitter.com/charles_nwatu Charles's LinkedIn: https://www.linkedin.com/in/cnwatu/ This episodes sponsor: https://canary.tools/

19 Heinä 202030min

Suosittua kategoriassa Koulutus

rss-murhan-anatomia
psykopodiaa-podcast
voi-hyvin-meditaatiot-2
rss-liian-kuuma-peruna
aamukahvilla
jari-sarasvuo-podcast
rss-finnish-with-eemeli-podcast
adhd-podi
rss-uskonto-on-tylsaa
rss-tule-tule-hyva-ero
rss-niinku-asia-on
psykologia
ihminen-tavattavissa-tommy-hellsten-instituutti
rss-laadukasta-ensihoitoa
rss-luonnollinen-synnytys-podcast
rss-narsisti
rss-vapaudu-voimaasi
rss-keskeneraiset-aidit
rss-valo-minussa-2
rss-koira-haudattuna