Unlocking Cyber Education with John Hammond

Unlocking Cyber Education with John Hammond

John Hammond, Senior Security Researcher at Huntress Labs and self-described cybersecurity education enthusiast, joins us as we continue our discussion of red team legends. With a focus on content creation this week, John discusses his success with his YouTube channel, his passion for showcasing authentic and accessible educational materials online, and his advice for creating content safely and spreading awareness with not only a red team or blue team mindset, but with a purple team perspective.

Timecode Guide:

[01:37] Understanding the impact of content creators in the cybersecurity community, especially when it comes to YouTube educational content

[06:58] Becoming a successful YouTube creator through consistently posting hacking content and ignoring the stereotype of “overnight success”

[13:28] Combining his role as a cybersecurity educator with his security research at Huntress to explore exploits and have real life experience with what he teaches

[16:47] Focusing on the blue side of the house as someone with red team experience, and understanding how to use a tool like PlexTrac to create a collaborative purple team

[21:13] Being mindful of the impact he has through sharing this knowledge and understanding the risk of cybersecurity educational materials falling into “the wrong hands”

Sponsor Links:

Thank you to our sponsors Axonius and PlexTrac for bringing this season of HVR to life!

The Axonius solution correlates asset data from existing solutions to provide an always up-to-date inventory, uncover gaps, and automate action — giving IT and security teams the confidence to control complexity. Learn more at axonius.com/hackervalley

PlexTrac is pleased to offer an exclusive Red Team Content Bundle for Hacker Valley listeners. This bundle contains both our "Writing a Killer Penetration Test Report" and "Effective Purple Teaming" white papers in ONE awesome package. Head to PlexTrac.com/HackerValley to learn more about the platform and get your copy today!

What is your origin story for wanting to educate other hackers?

Like many of us, John started his journey Googling how to become a hacker. As he gained more knowledge about the specific skills involved in hacking, John never left the internet behind, always seeking out videos and articles explaining new and emerging content. Inspired by those who created that content in the first place, he started his own YouTube channel, simply titled John Hammond, as has spent years cultivating a consistent hacker audience.

“Along the way, creating content and helping educate others through YouTube is really my main stage platform and has been just a passion project, a labor of love, and something fun along the way.”

What feelings do you get looking back on the YouTube content you’ve created so far?

John prioritizes clarity, transparency, and honesty in what he does, and he’s not afraid to show some humbleness, too. Overall, John is thankful for his YouTube success and the impact it had on the cybersecurity community. No matter what he’s showing in his videos, he prefers to keep things honest, to show where he’s made mistakes, and to accept criticism and advice from other hackers and offensive cybersecurity professionals that see his work.

“I'm showcasing just my computer screen, maybe you get a little face cam and a circle on the bottom right, but it's like you're looking over my shoulder. You're seeing me showcase something raw, live, genuine, and authentic…It’s not all sexy, there’s a lot of failure in hacking.”

Have you ever considered focusing on the blue team or the defensive side of cybersecurity?

The majority of John's YouTube content and the work he does in his role at Huntress Labs heavily involves the red team and offensive side of cyber. However, John is a huge advocate for the blue team and the red team collaborating and communicating better. Through making more concepts in cybersecurity accessible through educational content like John’s own videos, he hopes we can continue to bridge the gap and achieve that perfectly mixed purple team.

“We're all playing in concert. As one team sharpens their skills in the red team pen test, then it's up to the blue team to figure that out. What did they do? How can we better detect it? How can we stop and mitigate that security threat?”

What advice do you have for red team content creators that want to share content and spread awareness safely?

With the impact that he’s had and the content he’s put out onto the internet, John is no stranger to seeing the negative side of cybersecurity knowledge being more accessible than ever before.

Still, he wants to make sure content creators understand the value of transparency and honesty in what they do. Instead of fearing what could be, cultivate a community around making this level of knowledge and security available to everyone.

“Share, be transparent, be forthcoming. I know there are a lot of conversations about gatekeeping in cybersecurity, but there shouldn't be that. I understand there's grit and determination and hard work to do all the things that you're doing, but be friendly and be transparent and honest.”

----------

Links:

Check out our guest, John Hammond, on YouTube and LinkedIn.

Keep up with Hacker Valley on our website, LinkedIn, Instagram, and Twitter.

Follow Ron Eddings on Twitter and LinkedIn.

Catch up with Chris Cochran on Twitter and LinkedIn.

Continue the conversation by joining our Discord.

Episoder(404)

Episode 188 - Making Friends, Spies, and Traitors with James Lawler

Episode 188 - Making Friends, Spies, and Traitors with James Lawler

James Lawler serves as a national security consultant and is the Senior Partner at MDO Group, which provides Human Intelligence training to the Intelligence Community and the commercial sector focused on WMD, CI, technical and cyber issues.  Mr. Lawler is a noted speaker on the Insider Threat in government and industry. Prior to this, Mr. Lawler served for 25 years as a CIA operations officer in various international posts and as Chief of the Counterproliferation Division's Special Activities Unit.  Join Chris, Ron and James for a riveting audio journey through stories and experiences from the inside of the C.I.A.   Key Takeaways: 03:07 Bio 04:10 Finding a job after school – the CIA comes to campus 05:40 Clandestine Service 09:55 Can you start in two weeks? 12:40 A sociopath within lanes (laws) 14:00 Betraying company over country 17:37 Intensifying friendship development 19:54 Can you betray your country for $1k? 20:52 Why do people turn down a pitch? 27:53 Receiving overwhelming classified information 36:10 Book 40:05 Take away from Mr. Lawler   Links Hacker Valley Studio: Swag | LinkedIn | Twitter | Instagram | Email Ron & Chris | Website  James Lawler: Book | Linkedin Support Hacker Valley Studio on Patreon Join our monthly mastermind group via Patreon This episode is sponsor by our friends at CrowdStrike. Join the CrowdStrike team here.

16 Nov 202146min

Episode 187 - Keep Your &#%! Authentic with Samara Williams

Episode 187 - Keep Your &#%! Authentic with Samara Williams

Samara Williams is a Manager of Threat Operations at Cardinal Health, focused on proactive action and defense-in-depth improvement. She specializes in threat intelligence, vulnerability management, technical risk communications as well as program design and development. Chris, Ron and Samara go deep into what it takes to be your authentic self, standing strong for what you believe and being aggressive in your thoughts and actions.   Key Takeaways: 03:21 Bio 10:00 Ted talk: short, sweet and powerful 17:51 Knowing your superpower – Samara's? Authenticity 21:05 Being aggressive and using mentors & allies 25:26 Mentoring to help the future generation thrive 28:33 Advice for the person scared to be authentic 32:09 Get in touch   Links:   Hacker Valley Studio: Swag | LinkedIn | Twitter | Instagram | Email Ron & Chris | Website  Samara Williams: LInkedIn | Ted Talk | Twitter Support Hacker Valley Studio on Patreon Join our monthly mastermind group via Patreon This episode is sponsored by our friends at CrowdStrike. Join the CrowdStrike team here.

12 Nov 202133min

We Are Here Finale: A Case Study of DEI at CrowdStrike

We Are Here Finale: A Case Study of DEI at CrowdStrike

In the finale of We Are Here, Chris and Ron are joined by Emily Van Norden, branding and DE&I leader, and Nikki Thornton, Chief of Staff, both at CrowdStrike. The group talks about Diversity, equity and inclusion in this jam-packed episode. Emily and Nikki peel a layer off of the CrowdStrike brand to unveil a plethora of tips, tricks, and advice from their experience with people and standing up the DE&I function company-wide.    Key Takeaways:   01:56 Bio – Nikki 02:48 Bio – Emily 04:58 The chronology of CrowdStrike 10:12 Standing up the DE&I program 15:44 From adversity comes opportunity 20:21 Executives promoting DE&I 23:23 The deeper meaning of DE&I and why it matters at CrowdStrike 34:25 Advice for new professionals; making allies 37:55 Get in touch   Links:   Hacker Valley Studio: Swag | LinkedIn | Twitter | Instagram | Email Ron & Chris | Website  Emily Van Norden: LinkedIn | Website Nikki Thornton: LinkedIn  Support Hacker Valley Studio on Patreon Join our monthly mastermind group via Patreon We Are Here is proudly presented by CrowdStrike. Join the CrowdStrike team here.

11 Nov 202139min

We Are Here Part 3: Allyship and Representation

We Are Here Part 3: Allyship and Representation

On this episode of We Are Here, Ron and Chris join Dave Zawdie and Nina Padavil, two members of the team believe, CrowdStrike’s employee resource group for black professionals. The group dives deep into representation and allyship and how we can use the past to change the future for the good of the industry and its people.    Key Takeaways: 01:54: Nina – Bio 03:36 David – Bio 05:25 Role models and influencers 11:24 How can the majority help the minority in the future? 14:33 Mentoring and impacting the future 17:38 Setbacks and advice for a discouraged cyber security professional 20:26 Committing to being an ally to another 22:52 The future of DE&I and how we contribute  25:14 Get in touch   Hacker Valley Studio: Swag | LinkedIn | Twitter | Instagram | Email Ron & Chris | Website  Nina Padavil: LinkedIn  Support Hacker Valley Studio on Patreon Join our monthly mastermind group via Patreon We Are Here is proudly presented by CrowdStrike. Join the CrowdStrike team here.

10 Nov 202126min

We Are Here Part 2: A Tech Titans Roundtable

We Are Here Part 2: A Tech Titans Roundtable

In this whopper of an episode, Chris and Ron join the panel again to discuss diversity, equity and inclusion. The panel includes Marianne Budnik, CMO at CrowdStrike, Shawn Henry, CSO at CrowdStrike, powerhouse educator and influencer Olivia Herriford, and MK Palmore, Director with the CISO division at Google. Stay tuned for a masterclass in DE&I, how they differ and how we can keep pushing the ball forward.    Key Takeaways: 01:53 Bio- Marianne Budnik 02:34 Bio- MK Palmore 03:36 Bio- Olivia Herriford 04:53 Bio- Shawn Henry 06:20 The panel discusses their first interest in diversity 21:36 Equity & Inclusion- how is it different, and what are some ways to incorporate them? 32:25 Finding influence from all types of people 37:12 Planning for DE&I 41:23 Advice to the people who strive to make a difference 59:20 Get in touch   Links: Hacker Valley Studio: Swag | LinkedIn | Twitter | Instagram | Email Ron & Chris | Website  Marianne Budnik: Website | LinkedIn Shawn Henry: Website | LinkedIn Olivia Herriford: Website | LinkedIn MK Palmore:  Twitter | LinkedIn Support Hacker Valley Studio on Patreon Join our monthly mastermind group via Patreon We Are Here is proudly presented by CrowdStrike. Join the Crowdstrike team here.

9 Nov 202153min

We Are Here Season 2 Premiere with Minda Harts

We Are Here Season 2 Premiere with Minda Harts

Minda Harts is an Adjunct Assistant Professor of Public Service of NYU’s Robert F. Wagner Graduate School of Public Service and the founder of The Memo LLC, a career development company for women of color. On top of her impressive work resume, she is the award-winning and best-selling author of The Memo: What Women of Color Need To Know To Secure A Seat At The Table. Join Ron, Chris and Minda as they navigate through some of the toughest issues troubling our workplaces today.   Key Takeaways:   01:58 Bio 03:08 The last straw 05:53 Minda’s journey in writing & reflecting 07:50 Staying humble and making a real difference 10:25 Workplace trauma- What is it? 14:32 Advice for businesses opening back up 17:26 Being authentic at work 19:40 The new book – Right Within 25:46 Reminding people they have a voice 28:24 Get in touch with Minda   Links:   Hacker Valley Studio: Swag | LinkedIn | Twitter | Instagram | Email Ron & Chris | Website  Minda Harts: Website | LinkedIn | Twitter Buy her new book Right Within here! Support Hacker Valley Studio on Patreon Join our monthly mastermind group via Patreon We Are Here is proudly presented by CrowdStrike. Join the CrowdStrike team here.

8 Nov 202128min

Hacker Valley Red is Back! Episode 1 Sample

Hacker Valley Red is Back! Episode 1 Sample

Follow the new channel here: https://hackervalley.com/show/hacker-valley-red/   Christopher Hadnagy is the founder and CEO of Social-Engineer, LLC. He created the world’s first social engineering framework, as well as hosted the first social engineering-based podcast. Chris is an adjunct professor of Social Engineering for an NSA Cyber School of excellence at University of Arizona. Chris is also a well-known author, having written five books on social engineering. Chris’ new book, “Human Hacking: Win Friends, Influence People and Leave Them Better Off for Having Met You”, released January 5, 2021. Join both Chris’ and Ron for an episode of self-analyzation, empathy and understanding.   Key Takeaways 02:52 Bio 06:20 Exploring the title of Chris’ book 08:40 What’s the difference between manipulation and influence? 10:36 A contract in a book. Why? 14:33 What books describe Chris?  21:48 The importance of Empathy 26:48 The science  30:57 Chris’ conference: The Human Behavior Conference     Links: Hacker Valley Studio: Swag | LinkedIn | Twitter | Instagram | Email Ron & Chris | Website  Chris Hadnagy: Twitter | LinkedIn | Facebook | Book | Conference Support Hacker Valley Studio on Patreon Join our monthly mastermind group via Patreon This episode is sponsored by Axonius Hype Cycle

4 Nov 202139min

Episode 181 - The Calling of Cyber with Jerich Beason

Episode 181 - The Calling of Cyber with Jerich Beason

Jerich Beason, SVP & CISO at Epiq, joins Chris and Ron to talk passion, purpose and how that plays a part in cyber. Jerich sits on panels, speaks at conferences and events & contributes to white papers and security articles. He also serves as a Board advisor to security startups. Jerich is currently the host of Epiq’s podcast, Cyberside Chats which has the mission of increasing knowledge and awareness of cybersecurity within the legal industry.   Key Takeaways:   02:50 Bio 03:48 Choosing an education in cyber 05:00 Origin story – why cyber? 09:58 Jerich touches on why some cyber veterans are discouraging newcomers 12:26 Inspiring the future generation 15:20 Talking passion & calling 17:17 A day in the life of Jerich 20:10 Avoiding burnout & fulfilling purpose 23:15 Zero-Trust 26:34 The future in security program building     Links: Hacker Valley Studio: Swag | LinkedIn | Twitter | Instagram | Email Ron & Chris | Website  Jerich Beason: LinkedIn | Podcast | Twitter Support Hacker Valley Studio on Patreon Join our monthly mastermind group via Patreon This Episode is sponsored by CrowdStrike. Find a home with CrowdStrike here.

2 Nov 202131min

Populært innen Fakta

merry-quizmas
fastlegen
dine-penger-pengeradet
relasjonspodden-med-dora-thorhallsdottir-kjersti-idem
rss-strid-de-norske-borgerkrigene
treningspodden
foreldreradet
dypdykk
rss-var-forste-kaffe
jakt-og-fiskepodden
fryktlos
rss-kull
hverdagspsyken
sinnsyn
rss-sarbar-med-lotte-erik
rss-kunsten-a-leve
tomprat-med-gunnar-tjomlid
gravid-uke-for-uke
skravleklassen
teknologi-og-mennesker