Blue Square Security

Ep. 11 Microsoft Global Black Belt | Cloud Security & More

December 08, 2023 Greg Wartes, David Driggers, Michael Vitale Season 1 Episode 11

·      Microsoft Detection and Response Team, DART

·      Nashville, Tennessee 

·      Posture Management

·      Top 3 categories of data breach: 

o   Cloud misconfigurations is number 3

·      Scattered Spider

·      Adversary in the middle attacks 

·       Authentication 

·      Lemon Duck 

·      Identity compromise

·      Moving at the Speed of DevOps

·      Security Training 

·      DevSecOps

·      Threat Modeling 

·      SQL Injection 

·      Secret Scanning 

·      Infrastructure As A Code

·      Source Code Management – SCM

·      Push Protection 

·      Key Vault 

·      Log4j

·      Polymorphic 

·      SBOM – Software Bill of Materials 

·      NotPetya

·      5th Generation attacks 

·      WAF – Web Application Firewall 

·      SMBv1

·      AI – Artificial Intelligence

·      Black Mamba polymorphic malware 

·      Azure Policy 

·      NIST

·      Framework

·      S3Buckets 

·      Hub and Spoke 

·      Resource Groups

·      Management Groups 

·      Permissions 

·      Subscription Management