
7MS #488: How to Succeed in Business Without Really Crying - Part 10
Today we continue our series focused on building a security consultancy and talk about: A phishing campaign that went off the rails, and lessons learned from it First impressions of an awesome tool t...
29 Sep 202143min

7MS #487: Light Pentest eBook Announcement!
Hey friends! Today I've got some exciting personal/professional news to share: our Light Pentest eBook - which is a practical, step-by-step playbook for internal network penetration testing - is now a...
28 Sep 20217min

7MS #486: Interview with Matt Quammen of Blue Team Alpha
Today our good buddy Joe Skeen and I virtually sit down with Matt Quammen of Blue Team Alpha to talk about all things incident response! Topics covered include: Top 5 things to do and not do during r...
22 Sep 202139min

7MS #485: Interview with Christopher Fielder
Today our friend Christopher Fielder from Arctic Wolf is back for an interview four-peat! We had a great chat about making sense of vendor alphabet soup terms (like SIEM, SOC, EDR/MDR/XDR, ML, AI and ...
15 Sep 202152min

7MS #484: Desperately Seeking a Super SIEM for SMBs - Part 3
Today we're continuing our series called Desperately Seeking a Super SIEM for SMBs - this time with a focus on a new contender in our bake-off: Perch Security! It might help you to go back and take in...
8 Sep 202146min

7MS #483: Desperately Seeking a Super SIEM for SMBs - Part 2
Today we continue our series we started recently (part 1 is here about finding a super SIEM for SMBs. Specifically I have some updates on (and frustrations with) Arctic Wolf, Elastic, Milton Security ...
1 Sep 202144min

7MS #482: Creating Kick-Butt Credential-Capturing Phishing Campaigns - Part 3
Today we're continuing our discussion on phishing campaigns - including a technical "gotcha" that might redirect your phishing emails into a digital black hole if you're not careful! As I mentioned la...
26 Aug 202113min

7MS #481: Creating Kick-Butt Credential-Capturing Phishing Campaigns - Part 2
Today we're revisiting how to make a kick-butt cred-capturing phishing campaign with Gophish, Amazon Lightsail, LetsEncrypt, ExpiredDomains.net and a special little extra something that makes creating...
19 Aug 202127min





















